proposal for Fedora to start using SPDX identifiers


J Lovejoy
 

I meant to send this to both the legal and tech lists,  as I figured it might be of interest to both, but realized I forgot to add the tech list email, so forwarding now.

- Jilayne

Begin forwarded message:

From: "J Lovejoy" <opensource@...>
Subject: proposal for Fedora to start using SPDX identifiers
Date: July 26, 2021 at 3:08:15 PM MDT
To: 'SPDX-legal' <Spdx-legal@...>

Hi SPDX-legal,

I've been chatting to some of the Fedora folks about adopting the use of SPDX license identifiers in its package spec files. I just posted a comment/ proposal to a PR that was opened some time ago, See  https://pagure.io/packaging-committee/pull-request/971#

As some of you may remember, SPDX-legal undertook adding many licenses on the Fedora Good list back in 2013-14 time frame. I have since looked at the current Fedora Good list and updated a comparison doc, see: https://docs.google.com/spreadsheets/d/1fi5SVzyCAL0UDravvkS6Us4lFwRiQy-l3qTUEkY92U0/edit#gid=243613621

The good news is that the vast majority (~80%) of the Fedora Good licenses can already be represented with SPDX identifiers or expressions. Research will be needed for Fedora licenses that are not on the SPDX License List and we will likely see some additional requests for new licenses.

For any of you who are here and Fedora enthusiasts, help with researching some of the licenses and (eventually) updating existing Fedora package license info once this all moves forward would be greatly appreciated. It would also be good to think about ways to collaborate into ways to automate any cross-functional processes going forward so that we stay in sync.

Ideas there are greatly welcome!  Stay tuned!

Jilayne


Join {Spdx-tech@lists.spdx.org to automatically receive all group messages.