Thanks Dennis. It appears that scancode has already done the administrative work to establish a unified (non-federated) license list.
* Key Shortname SPDX ID * apache-2.0 Apache 2.0 Apache-2.0 apl-1.1 APL-1.1 LicenseRef-scancode-apl-1.1 Federated identity management is well-understood by users - nobody would mistakenly think that [email protected] (or gmail:Dave99 using namespace:local notation) is the same person as [email protected] (or outlook:Dave99). But switching to federated license IDs (spdx:Apache-2.0 and scancode:apl-1.1) doesn't sound like a user-friendly solution. The only thing that federation buys you is the ability to use colliding local IDs. But the cost is having to use qualified license IDs in order to avoid confusion and collisions. Is refusing to collaborate on deconflicting local IDs really worth that cost? Questions: 1) has scancode assigned any Keys that case-insensitively match an SPDX ID but do not match license texts? (I assume not.) 2) has the SPDX legal team agreed to not assign any SPDX IDs that case-insensitively match a current or future Scancode Key without matching license texts? (I hope so, otherwise migrating to qualified license IDs is unavoidable.) 3) for additional license authorities (e.g., "acme") is the same first-come-first-served id deconfliction rule acceptable? 4) What problem are you trying to solve by not agreeing on a unified local ID list? A unified list can always include a registration authority column to communicate different registration requirements. I don't understand the need for anything else. Dave On Fri, Jun 10, 2022 at 10:47 AM Dennis Clark <[email protected]> wrote: > Here is an example license list: > > https://scancode-licensedb.aboutcode.org/ > > Regards, > Dennis Clark > >> >> -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#4581): https://lists.spdx.org/g/Spdx-tech/message/4581 Mute This Topic: https://lists.spdx.org/mt/91653387/21656 Group Owner: [email protected] Unsubscribe: https://lists.spdx.org/g/Spdx-tech/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
