On Fri, Aug 04, 2017 at 04:54:34PM -0600, J Lovejoy wrote: > There is a summary of the background and issue here: > https://wiki.spdx.org/view/Legal_Team/or-later-vs-unclear-disambiguation
I've spend some time today using my new wiki account to shuffle things
around there and on [1]. If it's better to push things through a talk
page before doing that sort of thing, feel free to revert my changes
and I'll post something to their talk pages (or this thread? Or
somewhere else?).
But new (to me and the wiki pages) information from today includes:
* The CDDL family seems to be the only other license (that we've found
so far) with explicit wording about only vs. or-later [2]. It's
like the GPL, except the GPL requires explicit grant wording to
switch from “only” to “or later” [3] while the CDDL requires
explicit grant wording to switch from “or later” to “only” [2].
And there is CDDL code in the wild going both ways [4,5].
* The GPL-3.0 and other GNU v3 licenses have explicit wording about
designating a proxy to approve future versions [6]. But even
without that wording, we've seen explicit proxy designation in
license grants [7,8]. We may want formal syntax for recording these
proxy grants. Something like:
LGPL-2.1 OR
LGPL-3.0 OR
LGPL-3.0 PROXY "membership of KDE e.V. (or its successor approved by the
membership of KDE e.V.)"
I'm still trying to figure out where this leaves me on the only/+
front.
Cheers,
Trevor
[1]: https://wiki.spdx.org/view/Legal_Team/later-version-clauses
[2]:
https://github.com/spdx/license-list-XML/blob/7ecb7363bc82aedd0e293ca8825e348181619e6a/src/CDDL-1.0.xml#L276-L286
[3]:
https://github.com/spdx/license-list-XML/blob/7ecb7363bc82aedd0e293ca8825e348181619e6a/src/GPL-3.0.xml#L503-L514
[4]:
https://github.com/freebsd/freebsd/blob/2c31a4b74c2e41b0c7407c9830e22bfd07150af0/uts/common/fs/zfs/abd.c#L2-L5
[5]:
https://github.com/illumos/illumos-gate/blob/a9bfd41d542f15c474711abb8b0ca66a4cef9918/usr/src/common/acl/acl_common.h#L2-L19
[6]:
https://github.com/spdx/license-list-XML/blob/7ecb7363bc82aedd0e293ca8825e348181619e6a/src/GPL-3.0.xml#L515-L517
[7]: https://lists.spdx.org/pipermail/spdx/2011-May/000389.html
[8]:
https://wiki.spdx.org/view/FileNoticeExamples#.28LGPL-2.1_OR_LGPL-3.0_OR_LicenseRef-KDE-Accepted.29
--
This email may be signed or encrypted with GnuPG (http://www.gnupg.org).
For more information, see http://en.wikipedia.org/wiki/Pretty_Good_Privacy
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Spdx-tech mailing list [email protected] https://lists.spdx.org/mailman/listinfo/spdx-tech
