legal April 2023

legal@lists.fedoraproject.org

12 participants
13 discussions

Fwd: SPDX Statistics - Easter edition
by Miroslav Suchý 10 Apr '23

10 Apr '23

-------- Přeposlaná zpráva -------- Předmět: SPDX Statistics - Easter edition Datum: Sun, 9 Apr 2023 11:34:20 +0200 Od: Miroslav Suchý <msuchy(a)redhat.com> Společnost: Red Hat Czech, s.r.o. Komu: Development discussions related to Fedora <devel(a)lists.fedoraproject.org> Two weeks ago we had: > * 22882 spec files in Fedora > > * 29366license tags in all spec files > > * 19784 tags have not been converted to SPDX yet(huray, we are under 20k) > > * 7912tags can be trivially converted using `license-fedora2spdx` > Today we have: * 22918 spec files in Fedora * 29406license tags in all spec files * 19348 tags have not been converted to SPDX yet * 7521tags can be trivially converted using `license-fedora2spdx` * Progress: 34% ░░░███████ 100% ELN subset: * 2159 out of 4688 packages has been converted The list of packages needed to be converted is again here: https://pagure.io/copr/license-validate/blob/main/f/packages-without-spdx-f… List by package maintainers is here https://pagure.io/copr/license-validate/blob/main/f/packages-without-spdx-f… New version of fedora-license-data and license-validate has been released. Legal docs and especially https://docs.fedoraproject.org/en-US/legal/allowed-licenses/ was updated too. I updated the progress in this spreadsheet: https://docs.google.com/spreadsheets/d/1QVMEzXWML-6_Mrlln02axFAaRKCQ8zE807r… You converted about 500 license tags in 14 days. New projection when we will be finished is 2024-06-05. Pure linear approximation. If your package does not have neither git-log entry nor spec-changelog entry mentioning SPDX and you know your license tag matches SPDX formula, you can put your package on ignore list https://pagure.io/copr/license-validate/blob/main/f/ignore-packages.txt Either pull-request or email to me is fine. I already put there some packages that has been reported in past. Tip of the day: There is great tool to audit a package - FOSSology. And Oregon State University runs a free instance https://fossology.osuosl.org/repo/ (login: fossy, password: fossy). It is maintained for free, but every night the content is wiped away. Why Easter? Well, because we have Easter now :) But I will add one fun fact. Here in Czechia we have folk custom consisting in whipping women by men using a rod or braided wicker also called pomlázka, performed on Easter Monday. https://www.youtube.com/watch?v=l9vDVuiQcWM Do you hesitate how to proceed with the migration? Please follow https://docs.fedoraproject.org/en-US/legal/update-existing-packages/ or attend SPDX office hours (see different thread in this mailing list) Miroslav

4 4

CoPilot and Fedora packages
by Vitaly Zaitsev 06 Apr '23

06 Apr '23

Hello. I'm asking the Fedora Legal team for a position on open source projects containing GitHub CoPilot AI generated code. We need to solve this problem for the electrum update[1]. I think this is not a problem for OSS projects, because even if CoPilot copy-pastes GPL-licensed fragments, the license will be GPL. [1]: https://src.fedoraproject.org/rpms/electrum/pull-request/5 -- Sincerely, Vitaly Zaitsev (vitaly(a)easycoding.org)

2 5

Do I merge "(A AND B) AND A" into "A AND B" or not?
by Miro Hrončok 04 Apr '23

04 Apr '23

Hello, during a package review I came across this License tag (simplified): License: ((Apache-2.0 OR MIT) AND BSD-3-Clause) AND (Apache-2.0 OR MIT) Where "(Apache-2.0 OR MIT) AND BSD-3-Clause" is a license of one "unit" built into the RPM and "Apache-2.0 OR MIT" is a license of another "unit". (Both units are built into a single binary if that makes a difference.) Do I change that to: License: (Apache-2.0 OR MIT) AND BSD-3-Clause Or not? I know that we are not supposed to calculate "effective license", but in my head they both mean the exact same thing. -- Miro Hrončok -- Phone: +420777974800 IRC: mhroncok

2 3

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

legal April 2023