SPDX Statistics - Easter edition

Miroslav Suchý <msuchy@xxxxxxxxxx> · Sun, 9 Apr 2023 11:34:20 +0200



    Two weeks ago we had:
     
     
        * 22882  spec files in Fedora
        * 29366 license
              tags in all spec files
        * 19784 tags
                              have not been converted to SPDX yet
          (huray, we are under 20k)

        
        * 7912 tags
                          can be trivially converted using
                          `license-fedora2spdx`
        
      
    Today we have: 
    * 22918  spec files in Fedora
    * 29406 license tags
          in all spec files
    * 19348 tags
                          have not been converted to SPDX yet

    
    * 7521 tags
                      can be trivially converted using
                      `license-fedora2spdx`
    *
                      Progress: 34%
      ░░░███████ 100%
    ELN
                      subset:
    *
                      2159 out of 4688 packages has been converted

                    
    The list of packages needed to be converted is again here:
         https://pagure.io/copr/license-validate/blob/main/f/packages-without-spdx-final.txt
    List by package maintainers is here
       https://pagure.io/copr/license-validate/blob/main/f/packages-without-spdx-final-maintainers.txt
     New version of fedora-license-data and license-validate has been
      released.

    
    Legal docs and especially 

    
      https://docs.fedoraproject.org/en-US/legal/allowed-licenses/
    was updated too.

    
    I updated the progress in this spreadsheet:

      
         https://docs.google.com/spreadsheets/d/1QVMEzXWML-6_Mrlln02axFAaRKCQ8zE807rpCjus-8s/edit?usp=sharing

      
      You converted about 500 license tags in 14 days. 

    
    New projection when we will be finished is 2024-06-05. Pure
      linear approximation. 

    
    If your package does not have
      neither git-log entry nor spec-changelog entry mentioning SPDX and
      you know your license tag matches SPDX formula, you can put your
      package on ignore list
      https://pagure.io/copr/license-validate/blob/main/f/ignore-packages.txt
    Either pull-request or email
        to me is fine. I already put there some packages that has been
        reported in past.

      
     Tip of the day:
    There is great tool to audit a package - FOSSology. And Oregon
      State University runs a free instance
      https://fossology.osuosl.org/repo/ (login: fossy, password:
      fossy).
    It is maintained for free, but every night the content is wiped
      away.

    
    Why Easter? Well, because we have Easter now :) But I will add
      one fun fact. Here in Czechia we have folk custom consisting in
      whipping women by men using a rod or braided wicker also called
      pomlázka, performed on Easter Monday.

    
    https://www.youtube.com/watch?v=l9vDVuiQcWM 

    
    Do you hesitate how to proceed with the migration? Please follow
    
       https://docs.fedoraproject.org/en-US/legal/update-existing-packages/
    or attend SPDX office hours (see different thread in this mailing
      list)

    
    Miroslav
    

_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue