Careful there.  SPDX cannot possibly replace a lawyer or a court.  All SPDX can 
do is record information so that people (such as lawyers and judges) can make 
reasonable decisions based on that information.  So SPDX shouldn’t be trying to 
determine “these licenses are compatible” – it should just be recording “here 
are the licenses in use in this product”.

> In other words, the standard could at least hard-code that CDDL-1.1 is a 
> later version of CDDL-1.0.

There’s no need for hard-coding.

I already provided text to extract version numbers.  To compare them, say 
something like this:
Versions are compared using “natural sort order”, an ordering of strings in 
alphabetical order, except that multi-digit numbers are ordered as a single 
number and compared as numbers.  E.g., the following is sorted using natural 
sort: “2.1, 2.2, 2.3, 2.20, 3.0”.

--- David A. Wheeler

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#3727): https://lists.spdx.org/g/Spdx-tech/message/3727
Mute This Topic: https://lists.spdx.org/mt/32049933/21656
Group Owner: [email protected]
Unsubscribe: https://lists.spdx.org/g/Spdx-tech/unsub  
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to