SPDX Statistics - 224 packages remaining

Miroslav Suchý <msuchy@xxxxxxxxxx> · Fri, 20 Dec 2024 20:36:53 +0100



    Hot news:
    - All PRs for firmware packages are merged.

    
    - Small improvements to legal-doc has been done. If you want to
      dive into the changes see 

       
https://gitlab.com/fedora/legal/fedora-legal-docs/-/merge_requests/?sort=closed_at_desc&state=merged&first_page_size=20

    
     Two weeks ago we had: 

    
        * 24366 spec files in Fedora 

              
        * 31018 license
              tags in all spec files
        * 268 tags
              are not SPDX compliant (number from line bellow minus
              packages with LicenseRef-Callaway-*)

            
        * 2542 tags have not been
                              converted to SPDX yet

        
        * 29 tags can be trivially
                          converted using `license-fedora2spdx`
        * Progress: 99.14% ░░░░░░░░░█ 100%

        
    Today we have: 
    * 24368 spec files in Fedora 

          
    * 31025 license tags
          in all spec files
    * 224 tags are
          not SPDX compliant (number from line bellow minus packages
          with LicenseRef-Callaway-*)

        
    * 2475 tags have not been
                          converted to SPDX yet

    
    * 21 tags
                      can be trivially converted using
                      `license-fedora2spdx`
    *
                      Progress: 99.28% ░░░░░░░░░█
                      100%

    
    ELN
                      subset:
    62
                      out of 2314 packages are not converted yet
                      (progress 97.32%)

                    
    Graph of these data with the burndown chart:

      
         https://docs.google.com/spreadsheets/d/1QVMEzXWML-6_Mrlln02axFAaRKCQ8zE807rpCjus-8s/edit?usp=sharing
    The list of packages needed to be converted is here:
         https://pagure.io/copr/license-validate/blob/main/f/packages-without-spdx-final.txt
    List by package maintainers is here
       https://pagure.io/copr/license-validate/blob/main/f/packages-without-spdx-final-maintainers.txt
    Packages that are neither in SPDX nor in Callaway format (highest
      priority for now) - 55 packages:
    https://pagure.io/copr/license-validate/blob/main/f/neither-nor-remaining-packagers.txt
    Most of such packages has open issue in fedora-license-data. A
      lot of them are waiting for SPDX to approved the license and
      assign ID.

    
    I did NOT released new fedora-license-data as there were added a
      public domain dedication and an ultra permissive dedication. 
        11 licenses are waiting to be reviewed by SPDX.org (and then
      to be added to fedora-license-data) https://gitlab.com/fedora/legal/fedora-license-data/-/issues/?label_name%5B%5D=SPDX%3A%3Ablocked

    
    If your package does not have neither git-log entry nor
      spec-changelog entry mentioning SPDX and you know your license tag
      matches SPDX formula, you can put your package on ignore list 
      https://pagure.io/copr/license-validate/blob/main/f/ignore-packages.txt
    Either pull-request or direct email to me is fine. 

    
    Miroslav

      
-- 
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue