Package: python3-spdx-tools
Version: 0.8.5-1
Followup-For: Bug #1132434
X-Debbugs-Cc: [email protected]

I looked into this, and it looks like the copy of the "scancode" database used 
by
python3-license-expression has the wrong ID for Artistic-dist.

/usr/lib/python3/dist-packages/license_expression/data/scancode-licensedb-index.json
contains:

  {
    "license_key": "artistic-dist-1.0",
    "category": "Copyleft Limited",
    "spdx_license_key": "LicenseRef-scancode-artistic-1988-1.0",
    "other_spdx_license_keys": [],
    "is_exception": false,
    "is_deprecated": false,
    "json": "artistic-dist-1.0.json",
    "yaml": "artistic-dist-1.0.yml",
    "html": "artistic-dist-1.0.html",
    "license": "artistic-dist-1.0.LICENSE"
  },
  {
    "license_key": "artistic-perl-1.0",
    "category": "Copyleft Limited",
    "spdx_license_key": "Artistic-1.0-Perl",
    "other_spdx_license_keys": [],
    "is_exception": false,
    "is_deprecated": false,
    "json": "artistic-perl-1.0.json",
    "yaml": "artistic-perl-1.0.yml",
    "html": "artistic-perl-1.0.html",
    "license": "artistic-perl-1.0.LICENSE"
  },

The second entry is correct. The first entry has an incorrect SPDX
`LicenseRef` license key, "LicenseRef-scancode-artistic-1988-1.0",
rather than the correct "Artistic-dist".

See https://spdx.org/licenses/ , which lists the license as
"Artistic-dist".

It looks like the *latest* version of the scancode DB has this correct.
It was fixed in 02c1978aa3eab8c680ce2b0d9a94fe18ffa92a6b upstream, which
updated to SPDX list 3.27, which in turn added this license in
https://github.com/spdx/license-list-XML/commit/724684c4d1bdc1a09ab3fd56c87cc4a451c0f0bc
.

Please consider updating the scancode DB. (I'll reassign this to
python3-license-expression.

-- System Information:
Debian Release: forky/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: arm64

Kernel: Linux 6.19.10+deb14-amd64 (SMP w/12 CPU threads; PREEMPT)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages python3-spdx-tools depends on:
ii  python3                     3.13.9-3
ii  python3-beartype            0.22.9-1
ii  python3-click               8.2.0+0.really.8.1.8-1
ii  python3-license-expression  30.4.1-1
ii  python3-ply                 3.11-10
ii  python3-rdflib              7.4.0-1
ii  python3-semantic-version    2.10.0-4
ii  python3-uritools            6.0.1-1
ii  python3-xmltodict           0.13.0-1
ii  python3-yaml                6.0.3-1

python3-spdx-tools recommends no packages.

python3-spdx-tools suggests no packages.

-- no debconf information

Reply via email to