|
Re: Specific SPDX identifier question I didn't see addressed in the specification
What does that have to do with anything? This is marketing material, not a license nor a grant to "file off" the old license and add your own new one. You are only allowed to add your new one and the
What does that have to do with anything? This is marketing material, not a license nor a grant to "file off" the old license and add your own new one. You are only allowed to add your new one and the
|
By
Warner Losh
·
#1555
·
|
|
Re: Specific SPDX identifier question I didn't see addressed in the specification
These questions are really off-topic.
If you have questions about interpretation of BSD licenses, you probably ought to ask them of your counsel (or if you’re associated with FreeBSD, their
These questions are really off-topic.
If you have questions about interpretation of BSD licenses, you probably ought to ask them of your counsel (or if you’re associated with FreeBSD, their
|
By
McCoy Smith
·
#1554
·
|
|
Re: Specific SPDX identifier question I didn't see addressed in the specification
Are you allowed to do that without it becoming an AND? You can't just change the terms w/o permission like that I'd imagine... And I'm not sure how it would generalize...
Warner
Are you allowed to do that without it becoming an AND? You can't just change the terms w/o permission like that I'd imagine... And I'm not sure how it would generalize...
Warner
|
By
Warner Losh
·
#1553
·
|
|
FW: SPDX Thurs General Meeting Reminder
No special presentation this month, so meeting should go shorter than usual.
GENERAL MEETING
Meeting Time: Thurs, July 7, 8am PT / 10 am CT / 11am ET / 15:00 UTC.
No special presentation this month, so meeting should go shorter than usual.
GENERAL MEETING
Meeting Time: Thurs, July 7, 8am PT / 10 am CT / 11am ET / 15:00 UTC.
|
By
Phil Odence
·
#1552
·
|
|
Re: Specific SPDX identifier question I didn't see addressed in the specification
What makes you think they don't apply? If you have to reproduce the notice, the terms apply. You can't just take code and change the license without the permission of the copyright holders/owners/etc.
What makes you think they don't apply? If you have to reproduce the notice, the terms apply. You can't just take code and change the license without the permission of the copyright holders/owners/etc.
|
By
Warner Losh
·
#1551
·
|
|
Re: Specific SPDX identifier question I didn't see addressed in the specification
No, that’s not really my issue. I believe the logical operators and the ability to designate file-level licenses in SPDX handle your situation.
I’m talking about using SPDX to provide a copy of
No, that’s not really my issue. I believe the logical operators and the ability to designate file-level licenses in SPDX handle your situation.
I’m talking about using SPDX to provide a copy of
|
By
McCoy Smith
·
#1550
·
|
|
Re: Specific SPDX identifier question I didn't see addressed in the specification
I have spent a lot of time contemplating the question, but want to confirm I'm thinking about the same thing:
Are you talking about the nature of open source requiring (such as in a requirements.txt)
I have spent a lot of time contemplating the question, but want to confirm I'm thinking about the same thing:
Are you talking about the nature of open source requiring (such as in a requirements.txt)
|
By
Shawn Clark
·
#1549
·
|
|
Re: Specific SPDX identifier question I didn't see addressed in the specification
Well the example is the reverse: inbound BSD-2-Clause, outbound MIT.
I’m more thinking license identifiers that go with the code (since I think for most folks that’s where they do license
Well the example is the reverse: inbound BSD-2-Clause, outbound MIT.
I’m more thinking license identifiers that go with the code (since I think for most folks that’s where they do license
|
By
McCoy Smith
·
#1548
·
|
|
Re: Specific SPDX identifier question I didn't see addressed in the specification
Hi McCoy!
I’m moving the SPDX-general list to BCC and replying to SPDX-legal as that is the right place for this discussion.
Where is this question coming up in terms of context? That is, are you
Hi McCoy!
I’m moving the SPDX-general list to BCC and replying to SPDX-legal as that is the right place for this discussion.
Where is this question coming up in terms of context? That is, are you
|
By
J Lovejoy
·
#1547
·
|
|
Re: License Type for Commercial Components
#spdx
Get BlueMail for Android
On ۲۳ ژوئن ۲۰۲۲, at ۱۵:۲۳, "Patil, Sandeep via lists.spdx.org" <philips.com@... target=_blank>sandeep.patil=philips.com@...> wrote:
Get BlueMail for Android
On ۲۳ ژوئن ۲۰۲۲, at ۱۵:۲۳, "Patil, Sandeep via lists.spdx.org" <philips.com@... target=_blank>sandeep.patil=philips.com@...> wrote:
|
By
omidramine38@...
·
#1546
·
|
|
Specific SPDX identifier question I didn't see addressed in the specification
I didn’t see this particular topic addressed in the specification (although I’m happy to be correcedt if I missed it), so I thought I’d post and see whether there is a solution that’s commonly
I didn’t see this particular topic addressed in the specification (although I’m happy to be correcedt if I missed it), so I thought I’d post and see whether there is a solution that’s commonly
|
By
McCoy Smith
·
#1545
·
|
|
Re: Where to put issues for "getting started with SPDX" documentation?
I lean strongly toward `docs` as the repo name. It’s a standard and expected name for a repo that contains any sort of documentation, so people will be able to find it in GitHub.
Yes, the spec
I lean strongly toward `docs` as the repo name. It’s a standard and expected name for a repo that contains any sort of documentation, so people will be able to find it in GitHub.
Yes, the spec
|
By
VM (Vicky) Brasseur
·
#1544
·
|
|
Re: Where to put issues for "getting started with SPDX" documentation?
I agree something like help or getting started as a repo name. That way someone can just grab all of the getting started collaterals that may get generated over time: documents, examples, etc.,.
I agree something like help or getting started as a repo name. That way someone can just grab all of the getting started collaterals that may get generated over time: documents, examples, etc.,.
|
By
Manbeck, Jack
·
#1543
·
|
|
Re: Where to put issues for "getting started with SPDX" documentation?
May I propose something like github.com/spdx/help since “docs” covers a lot more things (even the specification itself).
+1 on being a new, separate location.
-- zvr
May I propose something like github.com/spdx/help since “docs” covers a lot more things (even the specification itself).
+1 on being a new, separate location.
-- zvr
|
By
Alexios Zavras
·
#1542
·
|
|
Re: Where to put issues for "getting started with SPDX" documentation?
GitHub is a given, which is why we decided to start opening issues rather than just maintaining a file.
I’d prefer to have either a dedicated docs repo or a /docs folder in another appropriate
GitHub is a given, which is why we decided to start opening issues rather than just maintaining a file.
I’d prefer to have either a dedicated docs repo or a /docs folder in another appropriate
|
By
VM (Vicky) Brasseur
·
#1541
·
|
|
License Type for Commercial Components
#spdx
Hi ,
What is the license type that needs be used in spdx for 3rd parties with proprietary licenses (e.g., Microsoft)?
Regards
Sandeep
Hi ,
What is the license type that needs be used in spdx for 3rd parties with proprietary licenses (e.g., Microsoft)?
Regards
Sandeep
|
By
Patil, Sandeep
·
#1540
·
|
|
Re: Where to put issues for "getting started with SPDX" documentation?
Yes! I think this is a great idea. We’ve tried in the past to do this but could never get people “focused” on it. I agree its needed.
I vote to put it the list in GitHub. The wiki doesn’t
Yes! I think this is a great idea. We’ve tried in the past to do this but could never get people “focused” on it. I agree its needed.
I vote to put it the list in GitHub. The wiki doesn’t
|
By
Manbeck, Jack
·
#1539
·
|
|
Re: Where to put issues for "getting started with SPDX" documentation?
I would put them in the spdx-spec repository, and we can label them as docs. One of the reasons for this is it allows us to address issues holistically, for example, the right thing to do might be to
I would put them in the spdx-spec repository, and we can label them as docs. One of the reasons for this is it allows us to address issues holistically, for example, the right thing to do might be to
|
By
William Bartholomew (CELA)
·
#1538
·
|
|
Where to put issues for "getting started with SPDX" documentation?
Howdy, team.
In last week’s Outreach call we discussed the lack of “getting started with SPDX” documentation, info that could take someone from Zero to SPDX. Currently it’s really hard for
Howdy, team.
In last week’s Outreach call we discussed the lack of “getting started with SPDX” documentation, info that could take someone from Zero to SPDX. Currently it’s really hard for
|
By
VM (Vicky) Brasseur
·
#1537
·
|
|
Re: [spdx-defects] [spdx] VEX integration in SPDX
#spdx
Sandeep,
A good example of a VEX advisory is provided by Siemens in their log4j advisory:
https://cert-portal.siemens.com/productcert/csaf/ssa-661247.json
NOTE: VEX’s are vulnerability
Sandeep,
A good example of a VEX advisory is provided by Siemens in their log4j advisory:
https://cert-portal.siemens.com/productcert/csaf/ssa-661247.json
NOTE: VEX’s are vulnerability
|
By
Dick Brooks
·
#1536
·
|