All,

Folks may care to know that RubyGems, the package manager for Ruby code,
recently merged a patch for issuing warnings about invalid SPDX license
identifiers used in license arrays in package metadata files:

https://github.com/rubygems/rubygems/pull/1249

Unlike npm, RubyGems does not incorporate license expressions. They do
offer an analog to OR, in that the licenses array can contain multiple
values.

RubyGems fetches its internal list of valid IDs for validation via the
new JSON endpoint on SPDX.org. This is done at build time, not on users'
machines, so RubyGems' list may lag a small bit behind SPDX.org.
However, the update process has been automated with a script.

Best,

K

-- 
Kyle Mitchell, attorney // San Francisco // +1 (415) 864 - 9913
_______________________________________________
Spdx-tech mailing list
[email protected]
https://lists.spdx.org/mailman/listinfo/spdx-tech

Reply via email to