Re: SPDX License List coverage for a full distro


Philippe Ombredanne
 

Hi Karsten:

On Tue, Aug 17, 2021 at 10:55 AM Karsten Klein
<karsten.klein@...> wrote:
I see the following option (as outlined the one or the other time before):
SPDX (in the future) assesses and captures licenses on two levels. In my brief words:
Level 1 - License Text and Provision of SPDX-Id
The license text is just captured as is and an SPDX identifier is derived. This id can then be used to identify this particular license text.
Level 2 - License Text, License Text Metadata, Matching Rules and Provision of SPDX-Id
This is the current scheme and requires modelling of the licenses and matching rules.

A big +1 for this. (And until then, namespaced LicenseRef- are an OK approach)

--
Cordially
Philippe Ombredanne

+1 650 799 0949 | pombredanne@...
DejaCode - What's in your code?! - http://www.dejacode.com
AboutCode - Open source for open source - https://www.aboutcode.org
nexB Inc. - http://www.nexb.com

Join Spdx-legal@lists.spdx.org to automatically receive all group messages.