https://bugzilla.redhat.com/show_bug.cgi?id=2272299 --- Comment #7 from Steve Cossette <farchord@xxxxxxxxx> --- (In reply to Felix Wang from comment #5) > I have a question here, which how to properly do license analysis. The > license field in .spec file: > > License: BSD-3-Clause AND CC-BY-SA-4.0 AND CC0-1.0 AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LGPL-2.0-only AND LGPL-2.1-or-later AND LGPL-3.0-only > > Looking at the files of parent direcory: > > .gitlab-ci.yml : # SPDX-License-Identifier: CC0-1.0 > .kde-ci.yml : # SPDX-License-Identifier: CC0-1.0 > CMakeLists.txt : # SPDX-License-Identifier: BSD-3-Clause > org.kde.marknote.desktop : # SPDX-License-Identifier: CC0-1.0 > org.kde.marknote.metainfo.xml : SPDX-License-Identifier: CC0-1.0 > src/CMakeLists.txt : # SPDX-License-Identifier: BSD-3-Clause > src/Messages.sh : # SPDX-License-Identifier: CC0-1.0 > src/documenthandler.cpp : // SPDX-License-Identifier: BSD-3-Clause > src/documenthandler.h : // SPDX-License-Identifier: BSD-3-Clause > src/main.cpp : SPDX-License-Identifier: GPL-2.0-or-later > src/nestedlisthelper.cpp : * SPDX-License-Identifier: LGPL-2.1-or-later > src/nestedlisthelper_p.h : * SPDX-License-Identifier: LGPL-2.1-or-later > src/notebooksmodel.cpp : // SPDX-License-Identifier: GPL-2.0-only OR > GPL-3.0-only OR LicenseRef-KDE-Accepted-GPL > src/notebooksmodel.h : // SPDX-License-Identifier: GPL-2.0-only OR > GPL-3.0-only OR LicenseRef-KDE-Accepted-GPL > src/notesmodel.cpp : // SPDX-License-Identifier: GPL-2.0-only OR > GPL-3.0-only OR LicenseRef-KDE-Accepted-GPL > src/notesmodel.h : // SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only > OR LicenseRef-KDE-Accepted-GPL > src/texteditor.cpp : // SPDX-License-Identifier: GPL-2.0-only OR > GPL-3.0-only OR LicenseRef-KDE-Accepted-GPL > src/texteditor.h : // SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only > OR LicenseRef-KDE-Accepted-GPL > src/qml/AddNotebookDialog.qml : // SPDX-License-Identifier: GPL-2.0-only OR > GPL-3.0-only OR LicenseRef-KDE-Accepted-GPL > src/qml/EditPage.qml : // SPDX-License-Identifier: GPL-2.0-only OR > GPL-3.0-only OR LicenseRef-KDE-Accepted-GPL > src/qml/Main.qml : SPDX-License-Identifier: GPL-2.0-or-later > src/qml/NotesPage.qml : // SPDX-License-Identifier: GPL-2.0-only OR > GPL-3.0-only OR LicenseRef-KDE-Accepted-GPL > src/qml/WelcomePage.qml : // SPDX-License-Identifier: GPL-2.0-only OR > GPL-3.0-only OR LicenseRef-KDE-Accepted-GPL > src/qml/components/ActionButton.qml : // SPDX-License-Identifier: > GPL-2.0-only OR GPL-3.0-only OR LicenseRef-KDE-Accepted-GPL > src/qml/components/BottomDrawer.qml : // SPDX-License-Identifier: > LGPL-2.0-only OR LGPL-3.0-only OR LicenseRef-KDE-Accepted-GPL > src/qml/components/DoubleActionButton.qml : // SPDX-License-Identifier: > GPL-2.0-only OR GPL-3.0-only OR LicenseRef-KDE-Accepted-GPL > > Here obviously, LicenseRef-KDE-Accepted-GPL -> GPL-2.0-only OR GPL-3.0-only, > LicenseRef-KDE-Accepted-LGPL - LGPL-2.1-only OR LGPL-3.0-only. > https://docs.fedoraproject.org/en-US/legal/update-existing-packages/ > #_licenseref_kde_accepted > > In addition, org.kde.marknote.svg is CC-BY-SA-4.0, > https://invent.kde.org/office/marknote/-/blob/master/.reuse/dep5#L10-12 > > What file is GPL-3.0-or-later? I only see it here, > https://invent.kde.org/office/marknote/-/blob/master/.reuse/dep5#L14-16 Actually, we ignore any of the 'LicenseRef's from the KDE foundation after checking with the licensing team. -- You are receiving this mail because: You are always notified about changes to this product and component You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2272299 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-spam&short_desc=Report%20of%20Bug%202272299%23c7 -- _______________________________________________ package-review mailing list -- package-review@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to package-review-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-review@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue