On Thu, Jul 11, 2024 at 10:05 AM David Cantrell dcantrell@redhat.com wrote:
Looking at Fedora now we have nmap-7.95 in Fedora 40 as an update and it has:
License: LicenseRef-NPSL-0.94
Yes. This is erroneous because `LicenseRef-NPSL-0.94` inaccurately referred to the license we are now calling `LicenseRef-NPSL-0.92` (Callaway/Cotton "NPSL") but the license of Nmap changed several more times in the progression to 7.95.
The exception is only for LicenseRef-Nmap and not these NPSL variants, right? Which means nmap will have to be removed?
Yes, the reason for the exception applying to Callaway Nmap (LicenseRef-Nmap) is mostly because we gave everyone the expectation for years that the pre-NPSL version of the Nmap license was (barely) legitimate. That's at least partly my fault. Whereas the only post-Callaway-Nmap license Fedora passed judgment on (prior to this thread) was the one we're now calling `LicenseRef-NPSL-0.92` and that was considered "bad" from the start.
Richard