sbp commented on issue #1379: URL: https://github.com/apache/tooling-trusted-releases/issues/1379#issuecomment-4926782098
The lightweight checks and the RAT checks are unlikely ever to be _exactly_ the same, because otherwise we would be reimplementing the subset of RAT that we use, which is quite substantial. The lightweight checks are there for projects that don't have advanced license checking needs, so the question is whether SPDX headers, if confirmed permitted by Legal, would qualify as not being advanced. I have been using SPDX license headers for many years, since before token costs were a consideration, and have always considered them superior to any longer form statements. I would therefore support this feature being part of the lightweight checks, pending the outcome of the Legal thread. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
