Skip to content

v0.44.0

Choose a tag to compare

View all tags
@musharna musharna released this 28 Jul 01:23
v0.44.0
61bdebe
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v0.44.0

Closes the licence-coverage arc: every SPDX id the normalizer can emit now carries
a compatibility profile.

Added

  • Creative Commons 1.0/2.0/2.5/3.0 are assessed, not merely identified. The
    normalizer already recognized CC BY 3.0, but only the 4.0 family carried
    compatibility flags, so a licence that plainly permits commercial use returned
    REVIEW while the identical 4.0 licence returned ALLOW. All 24 pre-4.0 ids (6
    families x 4 versions) are now hand-encoded from the licence texts, and their
    verdicts are asserted to match their 4.0 counterparts on every intent rather
    than assumed to.

    The profiles are not copies of the 4.0 ones: pre-4.0 CC says nothing about
    patents, and its only trademark clause disclaims Creative Commons' own marks
    rather than the licensor's, so those limitations are omitted.

  • The UK Open Government Licence v1.0 and v2.0 are assessed too. All three OGL
    versions grant the same shape — copy, publish, distribute, adapt, and exploit
    commercially, conditioned only on attribution — so they share one profile,
    verified against the legal text of each version. Prose and short-code forms now
    work for v1.0 and v2.0 as well. Bare OGL stays unrecognized: the verdict would
    be identical for any version, but spdx_id is the field callers cite, and
    naming a version the source never stated invents a fact.

  • Every licence id the normalizer can emit now carries a compatibility profile,
    pinned by an invariant test. The failure it guards is silent — an alias or URL
    pattern added without a matching profile downgrades a plainly-stated licence to
    REVIEW, which reads as caution rather than as the gap it is.

Fixed

  • OGL-UK-3.0 wrongly reported that the licence is silent on patents. Its profile
    omitted patent-use on that stated ground, but every OGL version's exemption
    list explicitly carves out "other intellectual property rights, including
    patents, trade marks, and design rights". patent-use is now asserted for all
    three versions. Verdicts are unaffected — they derive from permissions alone —
    but the reported limitations were misdescribing the licence.
Assets 2
Loading