Hi Bob,

I’m copying the SPDX tech team on this, as I suspect they will be better suited 
to answer your question or address any issues here :)

Thanks,
Jilayne

SPDX Legal Team co-lead
[email protected]


> On Aug 19, 2015, at 11:41 AM, Gobeille, Robert <[email protected]> wrote:
> 
> We (FOSSology) have discovered some of our license short names that violate 
> your list of allowed characters.  For example, here is the output from your 
> verification tool when I ran it against your three sample packages from the 
> backoff this week:
> 
> bobg$ java -jar spdx-tools-2.0.2-jar-with-dependencies.jar Verify 
> SPDX2_time_1439848453.rdf 
> WARN [main] (ListedLicenses.java:342) - Unable to access the SPDX listed 
> licenses at http://www.spdx.org/licenses.  Using local file copy of SPDX 
> listed licenses
> This SPDX Document is not valid due to:
>    Invalid license id 'LicenseRef-Gov't-work'.  Must start with 'LicenseRef-' 
> and made up of the characters from the set 'a'-'z', 'A'-'Z', '0'-'9', '+', 
> '_', '.', and '-'.
>    Invalid license id 'LicenseRef-JPEG/netpbm'.  Must start with 
> 'LicenseRef-' and made up of the characters from the set 'a'-'z', 'A'-'Z', 
> '0'-'9', '+', '_', '.', and '-'.
>    Invalid license id 'LicenseRef-See-doc(OTHER)'.  Must start with 
> 'LicenseRef-' and made up of the characters from the set 'a'-'z', 'A'-'Z', 
> '0'-'9', '+', '_', '.', and '-'.
>    Invalid license id 'LicenseRef-Non-profit!'.  Must start with 
> 'LicenseRef-' and made up of the characters from the set 'a'-'z', 'A'-'Z', 
> '0'-'9', '+', '_', '.', and '-'.
> 
> But Appendix IV http://spdx.org/sites/spdx/files/SPDX-2.0.pdf says that the 
> valid characters for idstring are:
> 
> idstring = 1*(ALPHA / DIGIT / “-" / ".” )
> 
> I realize you consider the ‘+’ to be an expression operator, as in GPL-2.0+ 
> so that is ok to use in our license names.  But what about the underscore?  
> The verifier says that an underscore is a valid character but I don’t see 
> that it is allowed in the SPDX 2 spec.  What am I missing?
> 
> Thanks,
> Bob Gobeille
> [email protected]
> _______________________________________________
> Spdx-legal mailing list
> [email protected]
> https://lists.spdx.org/mailman/listinfo/spdx-legal

_______________________________________________
Spdx-tech mailing list
[email protected]
https://lists.spdx.org/mailman/listinfo/spdx-tech

Reply via email to