SPDX Statistics - Independence of Lithuania edition

Miroslav Suchý <msuchy@xxxxxxxxxx> · Sat, 11 Mar 2023 07:10:57 +0100



    tl;dr - you converted 892 tags in 14 days, statistics script now
      does not mention recently introduced packages and you can put your
      package on ignore list

    
    Two weeks ago we had:
     
     
        * 23060  spec files in Fedora
        * 29449 license
              tags in all spec files
        * 21194 tags
                              have not been converted to SPDX yet
        * 8439 tags
                          can be trivially converted using
                          `license-fedora2spdx`
        
      
      Today we have: 
    * 23107  spec files in Fedora
    * 29503 license tags
          in all spec files
    * 20302 tags
                          have not been converted to SPDX yet
    * 8096 tags
                      can be trivially converted using
                      `license-fedora2spdx`
    The list of packages needed to be converted is again here:
         https://pagure.io/copr/license-validate/blob/main/f/packages-without-spdx-final.txt
    List by package maintainers is here
       https://pagure.io/copr/license-validate/blob/main/f/packages-without-spdx-final-maintainers.txt
     New version of fedora-license-data will be released tomorrow

    
    Legal docs and especially 

    
      https://docs.fedoraproject.org/en-US/legal/allowed-licenses/
    will be updated too.

    
    I updated the progress in this spreadsheet:

      
         https://docs.google.com/spreadsheets/d/1QVMEzXWML-6_Mrlln02axFAaRKCQ8zE807rpCjus-8s/edit?usp=sharing

      
      You converted 892 license tags in 14 days. Amazing!

    
    New projection when we will be finished is 2024-04-24. Pure
      linear approximation. 

    
    Now, the script ignores packages that started after 2022-08-01, because by that time
        SPDX for License tags has been already mandatory.
    If your package does not have
        neither git-log entry nor spec-changelog entry mentioning SPDX
        and you know your license tag matches SPDX formula, you can put
        your package on ignore list
     
        https://pagure.io/copr/license-validate/blob/main/f/ignore-packages.txt
    Either pull-request or email
        to me is fine. I already put there some packages that has been
        reported in past.

      
    Tip:

      SPDX formula allows to list licenses that are not on SPDX list, is
      uses LicenseRef-* notation. In Fedora we use it on few places. You
      can read about it here
https://docs.fedoraproject.org/en-US/legal/license-review-process/#_what_is_licenseref
    

    Why Independence of Lithuania? Because today - 11th March 1990
      Lithuania declared an independece. It was first republic from
      Soviet Union. It was not easy and several people had to pay by
      their life.

    
https://en.wikipedia.org/wiki/Act_of_the_Re-Establishment_of_the_State_of_Lithuania

    
    Do you hesitate how to proceed with the migration? Please follow
    
       https://docs.fedoraproject.org/en-US/legal/update-existing-packages/
    or attend SPDX office hours (see different thread in this mailing
      list)

    
    Miroslav
    

_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue