[
https://issues.apache.org/jira/browse/MNG-6677?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16861440#comment-16861440
]
Vladimir Sitnikov commented on MNG-6677:
----------------------------------------
{quote}The problem is with the list of licenses also that some people write two
licenses in the name element because it is so. So is Tomcat, for example. How
do you want to cover that?
{quote}
Technically speaking, SPDX has notion of "license expressions" which looks like
{{Apache-2.0+ WITH Bison-exception-2.2}} (which is (Apache 2.0 or later) with
Bison exception...)
I don't think we need to have xml representation of that expression though, and
we could be just fine with a string field with "license expression" inside.
{quote}What we could do is to add the license id optionally to the manifest or
the properties bundled the archiver, but that you can already do on your
own{quote}
Unfortunately, that is not enforced by default.
Maven Central enforces everybody to have <license> tag. So they have it. As you
know it is not parsable :(
> Ability to declare machine-readable license identifier for project
> ------------------------------------------------------------------
>
> Key: MNG-6677
> URL: https://issues.apache.org/jira/browse/MNG-6677
> Project: Maven
> Issue Type: Improvement
> Components: POM
> Affects Versions: 3.6.1
> Reporter: Vladimir Sitnikov
> Priority: Major
>
> Current model for license is something, yet it is not machine-friendly.
> Developers tend to put random data into
> {{<license><name>...</name><url>...</url>}}, and it is hard to analyze in
> automatic way.
> What if we could use SPDX license identifiers/expressions for license
> information?
> Note: currently POM allows to list multiple <license> tags, and it is not
> clear how they should be treated (and? or?). So a machine-readable field
> should probably allow for AND/OR license expressions.
> So it would be nice if there was a way to declare a machine-readable license
> tag.
> I'm not affiliated with SPDX, however OSGi use those ids:
> https://osgi.org/specification/osgi.core/7.0.0/framework.module.html#framework.module-bundle-license
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
