Thanks Matt, Gary. I understand that issue will be fixed in Fosslogy+SPDX module in later versions where maximum logic will be implemented to see that standard license text will not be mentioned in Extracted license text ?
From: Matt Germonprez [mailto:[email protected]] Sent: 31 May 2014 02:16 To: Gary O'Neall Cc: Kotrappa DeverShetty (WT01 - Manufacturing & Hi Tech); [email protected]; Akanksha Singh (WT01 - Manufacturing & Hi Tech); Ravishankar T.S (WT01 - Manufacturing & Hi Tech) Subject: Re: [SPDX] Standard Licenses like GPL, LGPL, BSD, ISC are shown in extracted License Info list. Hi Kotrappa and Gary, Surya will be updating the FOSSology+SPDX instance at UNO this June, and during this process your issue should be resolved. During this, we planned on advancing the system to match against the standard licenses. This should be done in the next month. Gary, I'll have Surya contact you. I'll post here when we're done. Hopefully sooner than later. Regards, Matt On Fri, May 30, 2014 at 11:59 AM, Gary O'Neall <[email protected]<mailto:[email protected]>> wrote: Hi Kotrappa, In general, if there is a match to an SPDX standard license, it is a best practice to use the standard license ID. If there is any uncertainty if the text matches the SPDX standard license, a licenseRef should be generated and the found text for the license be included in the extracted license info. I'm not sure if using the extracted license text for an SPDX standard license violates the spec since all of the information is present. I only maintain the SPDX tools libraries, not the FOSSOLOGY tools, so I'll pass along your comments to Matt Germonprez at UNO. Matt: If you agree with the above, it may make for a good student project to match against the standard licenses. In the SPDX Tools, there is some Java code which uses the legal team's matching guidelines to identify matches. Once SPDX 2.0 is released, we I'll update the library to match against license headers as well. If you have a student interested, I can point them in the direction of the existing code. Gary From: [email protected]<mailto:[email protected]> [mailto:[email protected]<mailto:[email protected]>] Sent: Friday, May 30, 2014 5:31 AM To: [email protected]<mailto:[email protected]>; [email protected]<mailto:[email protected]> Cc: [email protected]<mailto:[email protected]>; [email protected]<mailto:[email protected]> Subject: [SPDX] Standard Licenses like GPL, LGPL, BSD, ISC are shown in extracted License Info list. Hello Gary, To understand spdx results, we tried to scan rsync package available in below link http://rsync.samba.org/ - please download rsync-3.1.1pre2.tar.gz<http://rsync.samba.org/ftp/rsync/src-previews/rsync-3.1.1pre2.tar.gz> we scanned on public fossology+SPDX web server - https://fossologyspdx.ist.unomaha.edu<https://fossologyspdx.ist.unomaha.edu/> and then generated spdx results for it. The extracted License info in below link shows standard open source license list available in spdx.org<http://spdx.org>, i.e GPL, LGPL, BSD etc are shown in extractedLicense info. https://fossologyspdx.ist.unomaha.edu/?mod=spdx_extdLicInfoEdit_list&spdxId=80&packageInfoPk=80 But I think as per spdx spec 1.2, extracted license info should represent licenses which are NOT in spdx license list. Please let us know if there any mismatch in understanding or tool having issues. Regards Kotrappa. The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. www.wipro.com<http://www.wipro.com> -- Mutual of Omaha Associate Professor of Information Systems University of Nebraska at Omaha Vita<http://myweb.unomaha.edu/~mgermonprez/> Open Communities Lab<http://ocrl.unomaha.edu/> NSF Grant on Open Communities<http://1.usa.gov/17mbd1Z> The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. www.wipro.com
_______________________________________________ Spdx-tech mailing list [email protected] https://lists.spdx.org/mailman/listinfo/spdx-tech
