SPDX Statistics - 161 packages remaining

Miroslav Suchý <msuchy@xxxxxxxxxx> · Fri, 10 Jan 2025 07:07:35 +0100



    Hot news:
    - New version of upstream SPDX list has been released

        https://github.com/spdx/license-list-XML/releases/tag/v3.26.0

        Most of the licenses were added due to Fedora.

    
     Three weeks (because of Christmas) ago we had: 

    
      * 24368 spec files in Fedora 

            
      * 31025 license
            tags in all spec files
      * 224 tags
            are not SPDX compliant (number from line bellow minus
            packages with LicenseRef-Callaway-*)

          
      * 2475 tags have not been
                            converted to SPDX yet

      
      * 21 tags
                        can be trivially converted using
                        `license-fedora2spdx`
      *
                        Progress: 99.28% ░░░░░░░░░█
                        100%

      
      ELN
                        subset:
      62
                        out of 2314 packages are not converted yet
                        (progress 97.32%)

                      
    Today we have: 
    * 24379 spec files in Fedora 

          
    * 30988 license tags
          in all spec files
    * 161 tags are
          not SPDX compliant (number from line bellow minus packages
          with LicenseRef-Callaway-*)

        
    * 2325 tags have not been
                          converted to SPDX yet

    
    * 21 tags
                      can be trivially converted using
                      `license-fedora2spdx`
    *
                      Progress: 99.48% ░░░░░░░░░█
                      100%

    
    ELN
                      subset:
    61
                      out of 2316 packages are not converted yet
                      (progress 97.37%)

                    
    Graph of these data with the burndown chart:

      
         https://docs.google.com/spreadsheets/d/1QVMEzXWML-6_Mrlln02axFAaRKCQ8zE807rpCjus-8s/edit?usp=sharing
    The list of packages needed to be converted is here:
         https://pagure.io/copr/license-validate/blob/main/f/packages-without-spdx-final.txt
    List by package maintainers is here
       https://pagure.io/copr/license-validate/blob/main/f/packages-without-spdx-final-maintainers.txt
    Packages that are neither in SPDX nor in Callaway format (highest
      priority for now) - 55 packages:
    https://pagure.io/copr/license-validate/blob/main/f/neither-nor-remaining-packagers.txt
    Most of such packages has open issue in fedora-license-data. A
      lot of them are waiting for SPDX to approved the license and
      assign ID.

    
    New version of fedora-license-data has been released. With: 
        3 new licenses and several public domain or ultrapermissive
    dedications
    
        12 licenses are waiting to be reviewed by SPDX.org (and then
      to be added to fedora-license-data) https://gitlab.com/fedora/legal/fedora-license-data/-/issues/?label_name%5B%5D=SPDX%3A%3Ablocked

    
    Legal docs and especially 

      https://docs.fedoraproject.org/en-US/legal/allowed-licenses/
    was updated too.
    If your package does not have neither git-log entry nor
      spec-changelog entry mentioning SPDX and you know your license tag
      matches SPDX formula, you can put your package on ignore list 
      https://pagure.io/copr/license-validate/blob/main/f/ignore-packages.txt
    Either pull-request or direct email to me is fine. 

    
    Miroslav

      
-- 
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue