Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update license.json to include entries for all SPDX 3.21 License templates #12

Open
mrutkows opened this issue Apr 4, 2023 · 5 comments
Labels
enhancement New feature or request good first issue Good for newcomers help wanted Extra attention is needed

Comments

@mrutkows
Copy link
Contributor

mrutkows commented Apr 4, 2023

Support the latest SPDX license templates: https://github.com/spdx/license-list-data

Which were made official in this tagged release: https://github.com/spdx/license-list-data/releases/tag/v3.20

@mrutkows mrutkows added enhancement New feature or request help wanted Extra attention is needed good first issue Good for newcomers labels May 18, 2023
@mrutkows
Copy link
Contributor Author

mrutkows commented May 24, 2023

The "Delta" of missing licenses is contained within this JSON file:
https://github.com/CycloneDX/sbom-utility/blob/main/docs/spdx-licenses-3-20-delta.json

@mrutkows
Copy link
Contributor Author

It would be interesting to write a script to take the published JSON index from SPDX vX.X and produce a merged (must be a merge, not an overwrite or custom notes/annotations would be lost)license.json. This should improve future version updates.

@mrutkows
Copy link
Contributor Author

Please note that the MIT-equivalent "children" need a review as we have no verifiable reference to where these were found:

            "children": [
                "MIT-iOS",
                "MIT-1.0",
                "MIT-1.1",
                "MIT-2.0"
            ],

@mrutkows
Copy link
Contributor Author

Also, along the MIT-equivalent "children" review please verify this:

       {
            "id": "",
            "name": "BSD-equivalent",
            "family": "BSD-equivalent",
            "reference": "",
            "osi": false,
            "fsf": false,
            "usagePolicy": "allow",
            "annotationRefs": [
                "APPROVED",
                "NO-SPDX-ID"
            ],
            "notes": [
                "No SPDX IDs for 18 \"BSD-equivalent\" variants listed here:",
                "BSD Facebook",
                "BSD Google Patents File",
                "BSD Antlr",
                "BSD Bootstrap",
                "BSD Bzip2",
                "BSD DOM4J",
                "BSD Eclipse Distribution License (EDL)",
                "BSD HSQLDB",
                "BSD Infozip",
                "BSD Jaxen",
                "BSD JSch",
                "BSD NetSNMP",
                "BSD OpenLayers",
                "BSD Openssl",
                "BSD Rene Nyffenegger license",
                "BSD Sqlite3-ruby",
                "BSD XStream",
                "BSD YUI"
            ]
        },

@mrutkows
Copy link
Contributor Author

mrutkows commented Aug 2, 2023

Update: Should now look to use the latest 3.21 templates

@mrutkows mrutkows changed the title Update license.json to include entries for all SPDX 3.20 License templates Update license.json to include entries for all SPDX 3.21 License templates Aug 2, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request good first issue Good for newcomers help wanted Extra attention is needed
Projects
None yet
Development

No branches or pull requests

1 participant