Re: [FOSSology] License Identifiers - FOSSology & SPDX

Laser, Mary <mary.laser@...>

Yes! We are closely following evolution of the SPDX standard. We will eventually align FOSSology to adopt the standard.


Mary Laser
The FOSSology Project

-----Original Message-----
From: fossology-bounces@... [mailto:fossology-
bounces@...] On Behalf Of Roger Meier
Sent: Wednesday, March 23, 2011 4:07 PM
To: fossology@...; spdx@...
Subject: [FOSSology] License Identifiers - FOSSology & SPDX

Hi all

I'm interested in using FOSSology and the SPDX standard for future
It would be great to have at least one well supported open source
solution like FOSSology which is using the SPDX standard. This will
help all
of us to be license compliant and economic whenever we use open source

However, SPDX is still in definition phase and it probably does not fit
perfectly to FOSSology.
The license meta data is a very important thing required to automate
analysis and that's the place where I've identified a mismatch, the
short name or license identifier.

FOSSology has some very nice metadata for each license, e.g.
Date: 2004-01-01 00:00:00
shortname: ASL v2.0
fullname: Apache Software License v2.0
OSIapproved: Yes
FSFfree: Yes
GPLv2compatible: No
GPLv3compatible: Yes
copyleft: No
notes: ....
for further details see

SPDX is using its own license identifier:
Full name of License: Apache License 2.0
License Identifier: Apache-2
Notes: This version was released: January 2004, This license is
for further details see

Are there any plans to align these identifiers?
Does somebody know some other standards used for license meta data?


fossology mailing list

Join { to automatically receive all group messages.