Hi Bob,
Good flag. This is a bug.
I'll get it into the system, and will bring it up for discussion on
the next tech call.
Kate
On Wed, Aug 19, 2015 at 12:50 PM, J Lovejoy <[email protected]> wrote:
> Hi Bob,
>
> I’m copying the SPDX tech team on this, as I suspect they will be better
> suited to answer your question or address any issues here :)
>
> Thanks,
> Jilayne
>
> SPDX Legal Team co-lead
> [email protected]
>
>
> > On Aug 19, 2015, at 11:41 AM, Gobeille, Robert <[email protected]>
> wrote:
> >
> > We (FOSSology) have discovered some of our license short names that
> violate your list of allowed characters. For example, here is the output
> from your verification tool when I ran it against your three sample
> packages from the backoff this week:
> >
> > bobg$ java -jar spdx-tools-2.0.2-jar-with-dependencies.jar Verify
> SPDX2_time_1439848453.rdf
> > WARN [main] (ListedLicenses.java:342) - Unable to access the SPDX listed
> licenses at http://www.spdx.org/licenses. Using local file copy of SPDX
> listed licenses
> > This SPDX Document is not valid due to:
> > Invalid license id 'LicenseRef-Gov't-work'. Must start with
> 'LicenseRef-' and made up of the characters from the set 'a'-'z', 'A'-'Z',
> '0'-'9', '+', '_', '.', and '-'.
> > Invalid license id 'LicenseRef-JPEG/netpbm'. Must start with
> 'LicenseRef-' and made up of the characters from the set 'a'-'z', 'A'-'Z',
> '0'-'9', '+', '_', '.', and '-'.
> > Invalid license id 'LicenseRef-See-doc(OTHER)'. Must start with
> 'LicenseRef-' and made up of the characters from the set 'a'-'z', 'A'-'Z',
> '0'-'9', '+', '_', '.', and '-'.
> > Invalid license id 'LicenseRef-Non-profit!'. Must start with
> 'LicenseRef-' and made up of the characters from the set 'a'-'z', 'A'-'Z',
> '0'-'9', '+', '_', '.', and '-'.
> >
> > But Appendix IV http://spdx.org/sites/spdx/files/SPDX-2.0.pdf says that
> the valid characters for idstring are:
> >
> > idstring = 1*(ALPHA / DIGIT / “-" / ".” )
> >
> > I realize you consider the ‘+’ to be an expression operator, as in
> GPL-2.0+ so that is ok to use in our license names. But what about the
> underscore? The verifier says that an underscore is a valid character but
> I don’t see that it is allowed in the SPDX 2 spec. What am I missing?
> >
> > Thanks,
> > Bob Gobeille
> > [email protected]
> > _______________________________________________
> > Spdx-legal mailing list
> > [email protected]
> > https://lists.spdx.org/mailman/listinfo/spdx-legal
>
> _______________________________________________
> Spdx-legal mailing list
> [email protected]
> https://lists.spdx.org/mailman/listinfo/spdx-legal
>
_______________________________________________
Spdx-tech mailing list
[email protected]
https://lists.spdx.org/mailman/listinfo/spdx-tech
