Fwd: SPDX Statistics - SPDX Hackfest edition

[Miroslav Suchý]

-------- Přeposlaná zpráva --------
Předmět: 	SPDX Statistics - SPDX Hackfest edition
Datum: 	Wed, 17 May 2023 08:23:51 +0200
Od: 	Miroslav Suchý 
Společnost: 	Red Hat Czech, s.r.o.
Komu: 	Development discussions related to Fedora

Two weeks ago we had:
> 23000 spec files in Fedora (wow, nice round number :) )
>
> 29503license tags in all spec files
>
> 18744 tags have not been converted to SPDX yet
>
> 7157tags can be trivially converted using `license-fedora2spdx`
>
> Progress: 36% ░░░███████ 100%
>
> ELN subset:
> 1987 out of 4704 packages are not converted yet

Today we have:

* 23030 spec files in Fedora (wow, nice round number :) )

* 29532license tags in all spec files

* 18604 tags have not been converted to SPDX yet

* 7059tags can be trivially converted using `license-fedora2spdx`

* Progress: 37% ░░░███████ 100%

ELN subset:

* 1907 out of 4567 packages are not converted yet

The list of packages needed to be converted is again here:

https://pagure.io/copr/license-validate/blob/main/f/packages-without-spdx-fi...

List by package maintainers is here

https://pagure.io/copr/license-validate/blob/main/f/packages-without-spdx-fi...

List of packages from ELN subset that needs to be converted:

https://pagure.io/copr/license-validate/blob/main/f/eln-not-migrated.txt

New version of fedora-license-data has been released.

Legal docs and especially

https://docs.fedoraproject.org/en-US/legal/allowed-licenses/

was updated too.

I updated the progress in this spreadsheet:

https://docs.google.com/spreadsheets/d/1QVMEzXWML-6_Mrlln02axFAaRKCQ8zE807rp...

New projection when we will be finished is 2024-08-19. Pure linear approximation.

If your package does not have neither git-log entry nor spec-changelog entry mentioning SPDX and you know your license 
tag matches SPDX formula, you can put your package on ignore list

https://pagure.io/copr/license-validate/blob/main/f/ignore-packages.txt

Either pull-request or email to me is fine.

Why SPDX Hackfest edition? Because **today** we organize hackfest where we show you example of conversion and you will 
have opportunity to talk to us (both lawyers and engineers).

https://communityblog.fedoraproject.org/fedora-legal-spdx-hackfest/

Note: this was rescheduled so you may find two dates there. The valid one is 2023-05-17

Do you hesitate how to proceed with the migration? Please follow

https://docs.fedoraproject.org/en-US/legal/update-existing-packages/

or attend SPDX office hours (see different thread in this mailing list)

Miroslav

[Jilayne Lovejoy]

Speaking of Wednesday's hackfest... thanks to all who attended. It was a 
good session with worthwhile discussion and progress made on some ELN 
packages - yeah!

It'd be great to get feedback from those who attended or wanted to but 
couldn't on doing another one and timing (e.g., day of the week, same 
time of day or different time, etc.)

We started with a presentation and demo by David and some Q&A after 
that. This part was recorded and we'll make that video available as soon 
as we figure out the best way to do that.

Packages from this list 
https://pagure.io/copr/license-validate/blob/main/f/eln-not-migrated.txt
that were worked on during or as a result of the hackfest are listed 
below. If you are a package maintainer of a package that was worked on, 
you may see a pull request for updating the License field of the spec file.

zziplib
zsh
zvbi
zeromq
zimg
sscg
libipt
babeltrace
gdb
source-highlight
fedora-bookmarks
fedora-logos
fedora-release
fedora-repos
rpm
redhat-fonts
redhat-rpm-config
python*

Thanks all!
Jilayne

On 5/17/23 12:24 AM, Miroslav Suchý wrote:
> -------- Přeposlaná zpráva --------
> Předmět: 	SPDX Statistics - SPDX Hackfest edition
> Datum: 	Wed, 17 May 2023 08:23:51 +0200
> Od: 	Miroslav Suchý 
> Společnost: 	Red Hat Czech, s.r.o.
> Komu: 	Development discussions related to Fedora 
>
> Two weeks ago we had:
> > 23000 spec files in Fedora (wow, nice round number :) )
> >
> > 29503license tags in all spec files
> >
> > 18744 tags have not been converted to SPDX yet
> >
> > 7157tags can be trivially converted using `license-fedora2spdx`
> >
> > Progress: 36% ░░░███████ 100%
> >
> > ELN subset:
> > 1987 out of 4704 packages are not converted yet
>
> Today we have:
>
> 23030 spec files in Fedora (wow, nice round number :) )
>
> 29532license tags in all spec files
>
> 18604 tags have not been converted to SPDX yet
>
> 7059tags can be trivially converted using `license-fedora2spdx`
>
> Progress: 37% ░░░███████ 100%
>
> ELN subset:
> 1907 out of 4567 packages are not converted yet
>
> The list of packages needed to be converted is again here:
>
> https://pagure.io/copr/license-validate/blob/main/f/packages-without-spdx-fi...
>
> List by package maintainers is here
>
> https://pagure.io/copr/license-validate/blob/main/f/packages-without-spdx-fi...
>
> List of packages from ELN subset that needs to be converted:
>
> https://pagure.io/copr/license-validate/blob/main/f/eln-not-migrated.txt
>
> New version of fedora-license-data has been released.
>
> Legal docs and especially
>
> https://docs.fedoraproject.org/en-US/legal/allowed-licenses/
>
> was updated too.
>
> I updated the progress in this spreadsheet:
>
> https://docs.google.com/spreadsheets/d/1QVMEzXWML-6_Mrlln02axFAaRKCQ8zE807rp...
>
> New projection when we will be finished is 2024-08-19. Pure linear 
> approximation.
>
> If your package does not have neither git-log entry nor spec-changelog 
> entry mentioning SPDX and you know your license tag matches SPDX 
> formula, you can put your package on ignore list
>
> https://pagure.io/copr/license-validate/blob/main/f/ignore-packages.txt
>
> Either pull-request or email to me is fine.
>
> Why SPDX Hackfest edition? Because **today** we organize hackfest 
> where we show you example of conversion and you will have opportunity 
> to talk to us (both lawyers and engineers).
>
> https://communityblog.fedoraproject.org/fedora-legal-spdx-hackfest/
>
> Note: this was rescheduled so you may find two dates there. The valid 
> one is 2023-05-17
>
> Do you hesitate how to proceed with the migration? Please follow
>
> https://docs.fedoraproject.org/en-US/legal/update-existing-packages/
>
> or attend SPDX office hours (see different thread in this mailing list)
>
> Miroslav
>
> legal mailing list [e-mail]
> To unsubscribe send an email [e-mail]
> Fedora Code of Conduct:https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines:https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:https://lists.fedoraproject.org/archives/list/[e-mail]
> Do not reply to spam, report it:https://pagure.io/fedora-infrastructure/new_issue

[Miro Hrončok]

On 19. 05. 23 4:28, Jilayne Lovejoy wrote:
> Packages from this list 
> https://pagure.io/copr/license-validate/blob/main/f/eln-not-migrated.txt
> that were worked on during or as a result of the hackfest are listed below. If 
> you are a package maintainer of a package that was worked on, you may see a 
> pull request for updating the License field of the spec file.
>
> python*

There are 384 such packages on the list. Did somebody manage to work on 384 
packages during a single hackfest, or is this a mistake?

[Jilayne Lovejoy]

On 5/19/23 4:03 AM, Miro Hrončok wrote:
> On 19. 05. 23 4:28, Jilayne Lovejoy wrote:
> > Packages from this list 
> > https://pagure.io/copr/license-validate/blob/main/f/eln-not-migrated.txt
> > that were worked on during or as a result of the hackfest are listed 
> > below. If you are a package maintainer of a package that was worked 
> > on, you may see a pull request for updating the License field of the 
> > spec file.
> >
> > python*
>
> There are 384 such packages on the list. Did somebody manage to work 
> on 384 packages during a single hackfest, or is this a mistake?

It says packages "from this list" - not all of them, no! And then the 
original email listed which ones were worked on... :)

[Miro Hrončok]

On 19. 05. 23 19:34, Jilayne Lovejoy wrote:
> On 5/19/23 4:03 AM, Miro Hrončok wrote:
> > On 19. 05. 23 4:28, Jilayne Lovejoy wrote:
> > > Packages from this list 
> > > https://pagure.io/copr/license-validate/blob/main/f/eln-not-migrated.txt
> > > that were worked on during or as a result of the hackfest are listed below. 
> > > If you are a package maintainer of a package that was worked on, you may see 
> > > a pull request for updating the License field of the spec file.
> > >
> > > python*
> >
> > There are 384 such packages on the list. Did somebody manage to work on 384 
> > packages during a single hackfest, or is this a mistake?
>
> It says packages "from this list" - not all of them, no! And then the original 
> email listed which ones were worked on... :)

Yes, it listed python* -- what does that mean?