Fwd: SPDX Statistics - 161 packages remaining

[Miroslav Suchý]

-------- Přeposlaná zpráva --------
Předmět: 	SPDX Statistics - 161 packages remaining
Datum: 	Fri, 10 Jan 2025 07:07:35 +0100
Od: 	Miroslav Suchý 
Společnost: 	Red Hat Czech, s.r.o.
Komu: 	Development discussions related to Fedora

Hot news:

- New version of upstream SPDX list has been released
https://github.com/spdx/license-list-XML/releases/tag/v3.26.0
   Most of the licenses were added due to Fedora.

Three weeks (because of Christmas) ago we had:
> 24368spec files in Fedora
>
> 31025license tags in all spec files
>
> 224 tags are not SPDX compliant (number from line bellow minus packages with LicenseRef-Callaway-*)
>
> 2475 tags have not been converted to SPDX yet
>
> 21 tags can be trivially converted using `license-fedora2spdx`
>
> Progress: 99.28% ░░░░░░░░░█100%
>
> ELN subset:
>
> 62 out of 2314 packages are not converted yet (progress 97.32%)

Today we have:

* 24379spec files in Fedora

* 30988license tags in all spec files

* 161 tags are not SPDX compliant (number from line bellow minus packages with LicenseRef-Callaway-*)

* 2325 tags have not been converted to SPDX yet

* 21 tags can be trivially converted using `license-fedora2spdx`

* Progress: 99.48% ░░░░░░░░░█100%

ELN subset:

61 out of 2316 packages are not converted yet (progress 97.37%)

Graph of these data with the burndown chart:

https://docs.google.com/spreadsheets/d/1QVMEzXWML-6_Mrlln02axFAaRKCQ8zE807rp...

The list of packages needed to be converted is here:

https://pagure.io/copr/license-validate/blob/main/f/packages-without-spdx-fi...

List by package maintainers is here

https://pagure.io/copr/license-validate/blob/main/f/packages-without-spdx-fi...

Packages that are neither in SPDX nor in Callaway format (highest priority for now) - 55 packages:

https://pagure.io/copr/license-validate/blob/main/f/neither-nor-remaining-pa...

Most of such packages has open issue in fedora-license-data. A lot of them are waiting for SPDX to approved the license 
and assign ID.

New version of fedora-license-data has been released. With:

3 new licenses and several public domain or ultrapermissive dedications

12 licenses are waiting to be reviewed by SPDX.org (and then to be added to fedora-license-data) 
https://gitlab.com/fedora/legal/fedora-license-data/-/issues/?label_name%5B%...

Legal docs and especially

https://docs.fedoraproject.org/en-US/legal/allowed-licenses/

was updated too.

If your package does not have neither git-log entry nor spec-changelog entry mentioning SPDX and you know your license 
tag matches SPDX formula, you can put your package on ignore list

https://pagure.io/copr/license-validate/blob/main/f/ignore-packages.txt

Either pull-request or direct email to me is fine.

Miroslav