The project project uses the deprecated license classifier in project.classifiers (License :: OSI Approved :: Apache Software License), see PEP 639. This one can be dropped as it is redundant to project.license.
It also does not declare a SPDX-compliant license (see https://spdx.org/licenses/; Apache-2.0 would be the compliant value for project.license).
It would be nice if the project adopts an SPDX license to make it easier for downstream projects to verify against a known set of accepted and verified licenses.
❯ pip3 download --no-deps pyopenssl
Collecting pyopenssl
Downloading pyopenssl-26.4.0-py3-none-any.whl.metadata (22 kB)
Downloading pyopenssl-26.4.0-py3-none-any.whl (56 kB)
Saved ./pyopenssl-26.4.0-py3-none-any.whl
Successfully downloaded pyopenssl
❯ unzip -qo pyopenssl-26.4.0-py3-none-any.whl
❯ grep License pyopenssl-26.4.0.dist-info/METADATA
License: Apache License, Version 2.0 # <-- non-SPDX compliant
Classifier: License :: OSI Approved :: Apache Software License # <-- deprecated
License-File: LICENSE
The project project uses the deprecated license classifier in
project.classifiers(License :: OSI Approved :: Apache Software License), see PEP 639. This one can be dropped as it is redundant toproject.license.It also does not declare a SPDX-compliant license (see https://spdx.org/licenses/;
Apache-2.0would be the compliant value forproject.license).It would be nice if the project adopts an SPDX license to make it easier for downstream projects to verify against a known set of accepted and verified licenses.