SPDX Status for Rubygems in Fedora as of 2023-01-12

[Jarek Prokop]

Hi all,

I return with stats for Thursday, 2023-01-12,

a few rubygems were dropped since the last run, there are still about 
150 rubygems that need to have their license fixed up.
Going forward, I will be posting these updates more regularly, I feel 
like once every 2 weeks is sufficient.

   * Total rubygems in Fedora: 485
   * Total rubygems checked:   478
   * Fedora License field and gem2rpm license match and license-validate 
succeeds: 288/478
   * license-validate says they are OK SPDX, but licenses may or may not 
match between Fedora and upstream: 331/478
   * license-validate with converted conjunctions: 334/478
   * Action required: 147/478

   Packages that need to convert to valid SPDX:
~~~
rubygem-gem_name, fedora_license
----------------                 --------------
rubygem-abstract,                GPLv2 or Ruby
rubygem-allison,                 AFL
rubygem-ansi,                    BSD
rubygem-archive-tar-minitar,     GPLv2+ or Ruby
rubygem-aruba,                   MIT and CC-BY and (MIT or GPLv2) and 
(MIT or BSD or GPLv2)
rubygem-atk,                     LGPLv2
rubygem-atomic,                  ASL 2.0
rubygem-aws-sigv4,               ASL 2.0
rubygem-bcrypt,                  MIT and Public Domain and ISC
rubygem-bcrypt_pbkdf,            MIT and BSD and ISC
rubygem-between_meals,           ASL 2.0
rubygem-boxgrinder-build,        LGPLv3+
rubygem-boxgrinder-core,         LGPLv3+
rubygem-byebug,                  BSD
rubygem-cairo,                   GPLv2 or Ruby
rubygem-cairo-gobject,           LGPLv2+
rubygem-clutter,                 LGPLv2+
rubygem-clutter-gdk,             LGPLv2+
rubygem-clutter-gstreamer,       LGPLv2+
rubygem-clutter-gtk,             LGPLv2+
rubygem-colorize,                GPLv2
rubygem-contracts,               BSD
rubygem-cookiejar,               BSD
rubygem-creole,                  GPLv2 or Ruby
rubygem-daemons,                 MIT and (GPLv2+ or Ruby)
rubygem-dnsruby,                 ASL 2.0
rubygem-domain_name,             BSD and (MPLv1.1 or GPLv2+ or LGPLv2+)
rubygem-elasticsearch-transport, ASL 2.0
rubygem-escape,                  BSD
rubygem-eventmachine,            GPLv2 or Ruby
rubygem-fattr,                   BSD or Ruby
rubygem-ffi,                     BSD
rubygem-file-tail,               ASL 2.0
rubygem-gdk3,                    LGPLv2+
rubygem-gdk_pixbuf2,             LGPLv2
rubygem-gem2rpm,                 GPLv2+
rubygem-gio2,                    LGPLv2
rubygem-glib2,                   LGPLv2
rubygem-gobject-introspection,   LGPLv2+
rubygem-goocanvas,               LGPLv2
rubygem-gstreamer,               LGPLv2
rubygem-gtk2,                    LGPLv2
rubygem-gtk3,                    LGPLv2+
rubygem-gtksourceview2,          LGPLv2
rubygem-gtksourceview3,          LGPLv2+
rubygem-haml,                    MIT and WTFPL
rubygem-hashery,                 BSD
rubygem-hashicorp-checkpoint,    MPLv2.0
rubygem-hiera-vault,             ASL 2.0
rubygem-highline,                GPLv2 or Ruby or BSD
rubygem-hiredis,                 BSD
rubygem-hocon,                   ASL 2.0
rubygem-hpricot,                 MIT and ASL 2.0
rubygem-hrx,                     ASL 2.0
rubygem-httpclient,              (Ruby or BSD) and Public Domain
rubygem-i18n,                    MIT and (BSD or Ruby)
rubygem-icaro,                   GPLv3
rubygem-idn,                     ASL 2.0 and LGPLv2+
rubygem-image_size,              Ruby or GPLv2
rubygem-imagesize,               GPLv2 or Ruby
rubygem-json,                    Ruby or BSD
rubygem-levenshtein,             GPLv2
rubygem-locale,                  GPLv2 or Ruby
rubygem-log4r,                   LGPLv3
rubygem-logstash-event,          ASL 2.0
rubygem-macaddr,                 Ruby or BSD
rubygem-marcel,                  MIT and ASL 2.0
rubygem-memcache-client,         BSD
rubygem-mixlib-cli,              ASL 2.0
rubygem-mixlib-config,           ASL 2.0
rubygem-mixlib-log,              ASL 2.0
rubygem-mixlib-shellout,         ASL 2.0
rubygem-mocha,                   MIT or Ruby or BSD
rubygem-mongo,                   ASL 2.0
rubygem-msgpack,                 ASL 2.0
rubygem-narray,                  BSD and Ruby
rubygem-native-package-installer,LGPLv3+
rubygem-ncursesw,                LGPLv2+
rubygem-net-sftp,                MIT or LGPLv2
rubygem-nifti,                   LGPLv3+
rubygem-nio4r,                   MIT and (BSD or GPLv2+)
rubygem-nokogiri,                MIT and ASL 2.0
rubygem-open4,                   BSD or Ruby
rubygem-opennebula,              ASL 2.0
rubygem-pango,                   LGPLv2
rubygem-pathspec,                ASL 2.0
rubygem-pdf-core,                GPLv2 or GPLv3 or Ruby
rubygem-pdf-inspector,           GPLv2 or GPLv3 or Ruby
rubygem-pkg-config,              LGPLv2+
rubygem-poppler,                 LGPLv2
rubygem-power_assert,            Ruby or BSD
rubygem-prawn,                   (GPLv2 or GPLv3 or Ruby) and APAFML
rubygem-prawn-icon,              Ruby or GPLv2 or GPLv3
rubygem-prawn-table,             Ruby or GPLv2 or GPLv3
rubygem-prawn-templates,         Ruby or GPLv2 or GPLv3
rubygem-protobuf,                MIT and BSD
rubygem-puppet-resource_api,     ASL 2.0
rubygem-rabbit,                  GPLv2+ and CC-BY
rubygem-racc,                    BSD
rubygem-rack,                    MIT and BSD
rubygem-rb-readline,             BSD
rubygem-rchardet,                LGPLv2
rubygem-rdiscount,               ASL 1.1
rubygem-rdoc,                    GPL-2.0 AND Ruby AND BSD-3-Clause AND 
CC-BY-2.5 AND OFL-1.1-RFN
rubygem-rdtool,                  GPLv2+ or Ruby
rubygem-redcarpet,               MIT and ISC
rubygem-rmail,                   BSD
rubygem-rouge,                   MIT and BSD
rubygem-rsvg2,                   LGPLv2
rubygem-ruby-dbus,               LGPLv2+ and MIT
rubygem-ruby-libvirt,            LGPLv2+
rubygem-ruby-shadow,             Public Domain
rubygem-rubyzip,                 Ruby or BSD
rubygem-sass-twitter-bootstrap,  ASL 2.0
rubygem-sassc-rails,             MIT and OFL
rubygem-scanf,                   BSD
rubygem-selenium-webdriver,      ASL 2.0
rubygem-semantic_puppet,         ASL 2.0
rubygem-serialport,              GPLv2
rubygem-sinatra-rabbit,          ASL 2.0
rubygem-sqlite3,                 BSD
rubygem-stomp,                   ASL 2.0
rubygem-sugarjar,                ASL 2.0
rubygem-syntax,                  BSD
rubygem-sys-uname,               ASL 2.0
rubygem-test-unit,               (BSD or Ruby or Python) and (BSD or Ruby)
rubygem-test-unit-notify,        LGPLv2+ and (LGPLv2+ or GFDL or CC-BY-SA)
rubygem-test-unit-rr,            LGPLv2+
rubygem-thread_safe,             ASL 2.0 and Public Domain
rubygem-tk,                      BSD or Ruby
rubygem-ttfunk,                  GPLv2 or GPLv3 or Ruby
rubygem-uglifier,                MIT and BSD
rubygem-unf,                     BSD
rubygem-uuid,                    MIT or CC-BY-SA
rubygem-uuidtools,               ASL 2.0
rubygem-vault,                   MPLv2.0
rubygem-vte,                     LGPLv2
rubygem-vte3,                    LGPLv2+
rubygem-webkit2-gtk,             LGPLv2+
rubygem-webrick,                 Ruby and BSD-2-Clause
rubygem-webrobots,               BSD
rubygem-websocket-driver,        ASL 2.0
rubygem-xmlparser,               GPLv2+ and ( Ruby or GPLv2+ or MIT ) 
and ( GPLv2+ or Artistic )
rubygem-xmlrpc,                  Ruby or BSD
rubygem-yard,                    MIT and (BSD or Ruby)
rubygem-zoom,                    LGPLv2+
~~~


Regards,
Jarek Prokop

[Vít Ondruch]

Dne 13. 01. 23 v 13:45 Jarek Prokop napsal(a):
>  Hi all,
>
>  I return with stats for Thursday, 2023-01-12,
>
>  a few rubygems were dropped since the last run, there are still about 
>  150 rubygems that need to have their license fixed up.
>  Going forward, I will be posting these updates more regularly, I feel 
>  like once every 2 weeks is sufficient.
>
>    * Total rubygems in Fedora: 485
>    * Total rubygems checked:   478
>    * Fedora License field and gem2rpm license match and 
>  license-validate succeeds: 288/478
>    * license-validate says they are OK SPDX, but licenses may or may 
>  not match between Fedora and upstream: 331/478
>    * license-validate with converted conjunctions: 334/478
>    * Action required: 147/478
>
>    Packages that need to convert to valid SPDX:
>  ~~~
>  rubygem-gem_name, fedora_license
>  ----------------                 --------------
>  rubygem-abstract,                GPLv2 or Ruby
>  rubygem-allison,                 AFL
>  rubygem-ansi,                    BSD
>  rubygem-archive-tar-minitar,     GPLv2+ or Ruby
>  rubygem-aruba,                   MIT and CC-BY and (MIT or GPLv2) and 
>  (MIT or BSD or GPLv2)
>  rubygem-atk,                     LGPLv2
>  rubygem-atomic,                  ASL 2.0
>  rubygem-aws-sigv4,               ASL 2.0
>  rubygem-bcrypt,                  MIT and Public Domain and ISC
>  rubygem-bcrypt_pbkdf,            MIT and BSD and ISC
>  rubygem-between_meals,           ASL 2.0
>  rubygem-boxgrinder-build,        LGPLv3+
>  rubygem-boxgrinder-core,         LGPLv3+
>
>  
Uff, these two ^^ should have been retired for ages. Just added them 
into this ticket:

https://pagure.io/releng/issue/11156

But what is the source for this list?


Vít



>  rubygem-byebug,                  BSD
>  rubygem-cairo,                   GPLv2 or Ruby
>  rubygem-cairo-gobject,           LGPLv2+
>  rubygem-clutter,                 LGPLv2+
>  rubygem-clutter-gdk,             LGPLv2+
>  rubygem-clutter-gstreamer,       LGPLv2+
>  rubygem-clutter-gtk,             LGPLv2+
>  rubygem-colorize,                GPLv2
>  rubygem-contracts,               BSD
>  rubygem-cookiejar,               BSD
>  rubygem-creole,                  GPLv2 or Ruby
>  rubygem-daemons,                 MIT and (GPLv2+ or Ruby)
>  rubygem-dnsruby,                 ASL 2.0
>  rubygem-domain_name,             BSD and (MPLv1.1 or GPLv2+ or LGPLv2+)
>  rubygem-elasticsearch-transport, ASL 2.0
>  rubygem-escape,                  BSD
>  rubygem-eventmachine,            GPLv2 or Ruby
>  rubygem-fattr,                   BSD or Ruby
>  rubygem-ffi,                     BSD
>  rubygem-file-tail,               ASL 2.0
>  rubygem-gdk3,                    LGPLv2+
>  rubygem-gdk_pixbuf2,             LGPLv2
>  rubygem-gem2rpm,                 GPLv2+
>  rubygem-gio2,                    LGPLv2
>  rubygem-glib2,                   LGPLv2
>  rubygem-gobject-introspection,   LGPLv2+
>  rubygem-goocanvas,               LGPLv2
>  rubygem-gstreamer,               LGPLv2
>  rubygem-gtk2,                    LGPLv2
>  rubygem-gtk3,                    LGPLv2+
>  rubygem-gtksourceview2,          LGPLv2
>  rubygem-gtksourceview3,          LGPLv2+
>  rubygem-haml,                    MIT and WTFPL
>  rubygem-hashery,                 BSD
>  rubygem-hashicorp-checkpoint,    MPLv2.0
>  rubygem-hiera-vault,             ASL 2.0
>  rubygem-highline,                GPLv2 or Ruby or BSD
>  rubygem-hiredis,                 BSD
>  rubygem-hocon,                   ASL 2.0
>  rubygem-hpricot,                 MIT and ASL 2.0
>  rubygem-hrx,                     ASL 2.0
>  rubygem-httpclient,              (Ruby or BSD) and Public Domain
>  rubygem-i18n,                    MIT and (BSD or Ruby)
>  rubygem-icaro,                   GPLv3
>  rubygem-idn,                     ASL 2.0 and LGPLv2+
>  rubygem-image_size,              Ruby or GPLv2
>  rubygem-imagesize,               GPLv2 or Ruby
>  rubygem-json,                    Ruby or BSD
>  rubygem-levenshtein,             GPLv2
>  rubygem-locale,                  GPLv2 or Ruby
>  rubygem-log4r,                   LGPLv3
>  rubygem-logstash-event,          ASL 2.0
>  rubygem-macaddr,                 Ruby or BSD
>  rubygem-marcel,                  MIT and ASL 2.0
>  rubygem-memcache-client,         BSD
>  rubygem-mixlib-cli,              ASL 2.0
>  rubygem-mixlib-config,           ASL 2.0
>  rubygem-mixlib-log,              ASL 2.0
>  rubygem-mixlib-shellout,         ASL 2.0
>  rubygem-mocha,                   MIT or Ruby or BSD
>  rubygem-mongo,                   ASL 2.0
>  rubygem-msgpack,                 ASL 2.0
>  rubygem-narray,                  BSD and Ruby
>  rubygem-native-package-installer,LGPLv3+
>  rubygem-ncursesw,                LGPLv2+
>  rubygem-net-sftp,                MIT or LGPLv2
>  rubygem-nifti,                   LGPLv3+
>  rubygem-nio4r,                   MIT and (BSD or GPLv2+)
>  rubygem-nokogiri,                MIT and ASL 2.0
>  rubygem-open4,                   BSD or Ruby
>  rubygem-opennebula,              ASL 2.0
>  rubygem-pango,                   LGPLv2
>  rubygem-pathspec,                ASL 2.0
>  rubygem-pdf-core,                GPLv2 or GPLv3 or Ruby
>  rubygem-pdf-inspector,           GPLv2 or GPLv3 or Ruby
>  rubygem-pkg-config,              LGPLv2+
>  rubygem-poppler,                 LGPLv2
>  rubygem-power_assert,            Ruby or BSD
>  rubygem-prawn,                   (GPLv2 or GPLv3 or Ruby) and APAFML
>  rubygem-prawn-icon,              Ruby or GPLv2 or GPLv3
>  rubygem-prawn-table,             Ruby or GPLv2 or GPLv3
>  rubygem-prawn-templates,         Ruby or GPLv2 or GPLv3
>  rubygem-protobuf,                MIT and BSD
>  rubygem-puppet-resource_api,     ASL 2.0
>  rubygem-rabbit,                  GPLv2+ and CC-BY
>  rubygem-racc,                    BSD
>  rubygem-rack,                    MIT and BSD
>  rubygem-rb-readline,             BSD
>  rubygem-rchardet,                LGPLv2
>  rubygem-rdiscount,               ASL 1.1
>  rubygem-rdoc,                    GPL-2.0 AND Ruby AND BSD-3-Clause AND 
>  CC-BY-2.5 AND OFL-1.1-RFN
>  rubygem-rdtool,                  GPLv2+ or Ruby
>  rubygem-redcarpet,               MIT and ISC
>  rubygem-rmail,                   BSD
>  rubygem-rouge,                   MIT and BSD
>  rubygem-rsvg2,                   LGPLv2
>  rubygem-ruby-dbus,               LGPLv2+ and MIT
>  rubygem-ruby-libvirt,            LGPLv2+
>  rubygem-ruby-shadow,             Public Domain
>  rubygem-rubyzip,                 Ruby or BSD
>  rubygem-sass-twitter-bootstrap,  ASL 2.0
>  rubygem-sassc-rails,             MIT and OFL
>  rubygem-scanf,                   BSD
>  rubygem-selenium-webdriver,      ASL 2.0
>  rubygem-semantic_puppet,         ASL 2.0
>  rubygem-serialport,              GPLv2
>  rubygem-sinatra-rabbit,          ASL 2.0
>  rubygem-sqlite3,                 BSD
>  rubygem-stomp,                   ASL 2.0
>  rubygem-sugarjar,                ASL 2.0
>  rubygem-syntax,                  BSD
>  rubygem-sys-uname,               ASL 2.0
>  rubygem-test-unit,               (BSD or Ruby or Python) and (BSD or Ruby)
>  rubygem-test-unit-notify,        LGPLv2+ and (LGPLv2+ or GFDL or CC-BY-SA)
>  rubygem-test-unit-rr,            LGPLv2+
>  rubygem-thread_safe,             ASL 2.0 and Public Domain
>  rubygem-tk,                      BSD or Ruby
>  rubygem-ttfunk,                  GPLv2 or GPLv3 or Ruby
>  rubygem-uglifier,                MIT and BSD
>  rubygem-unf,                     BSD
>  rubygem-uuid,                    MIT or CC-BY-SA
>  rubygem-uuidtools,               ASL 2.0
>  rubygem-vault,                   MPLv2.0
>  rubygem-vte,                     LGPLv2
>  rubygem-vte3,                    LGPLv2+
>  rubygem-webkit2-gtk,             LGPLv2+
>  rubygem-webrick,                 Ruby and BSD-2-Clause
>  rubygem-webrobots,               BSD
>  rubygem-websocket-driver,        ASL 2.0
>  rubygem-xmlparser,               GPLv2+ and ( Ruby or GPLv2+ or MIT ) 
>  and ( GPLv2+ or Artistic )
>  rubygem-xmlrpc,                  Ruby or BSD
>  rubygem-yard,                    MIT and (BSD or Ruby)
>  rubygem-zoom,                    LGPLv2+
>  ~~~
>
>
>  Regards,
>  Jarek Prokop
>
>
>  _______________________________________________
>  ruby-sig mailing list --ruby-sig(a)lists.fedoraproject.org
>  To unsubscribe send an email toruby-sig-leave(a)lists.fedoraproject.org
>  Fedora Code of Conduct:https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines:https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List
> Archives:https://lists.fedoraproject.org/archives/list/[e-mail]...
>  Do not reply to spam, report it:https://pagure.io/fedora-infrastructure/new_issue
>

[Jarek Prokop]

>  Uff, these two ^^ should have been retired for ages. Just added them
>
>  into this ticket:
>
>  https://pagure.io/releng/issue/11156
>
>  But what is the source for this list?
>  
As with previous emails, the source is rpm-specs-latest.tar.xz from 
http://src.fedoraproject.org/repo/rpm-specs-latest.tar.xz for the given day.

I then go, unpack tar and for each rubygem specfile in the directory 
where the tar was unpacked (essentially `for rpm in $(rubygem-*.spec)`), 
clone the projects from pagure, run `fedpkg sources` (to get the current 
gem source from dist-git)
and run other kinds of processing.

Script for processing is here: 
https://fedorapeople.org/cgit/jackorp/public_git/spdx_rubygems.git/tree/f...

It can be a bit smarter/better to get current contents of Rawhide, but 
that's just a theoretical approach that I did not pursue yet as the 
current one works OK.

Jarek

>  Vít
>

[Vít Ondruch]

Dne 13. 01. 23 v 15:47 Jarek Prokop napsal(a):
> > Uff, these two ^^ should have been retired for ages. Just added them 
> > into this ticket:
> >
> > https://pagure.io/releng/issue/11156
> >
> > But what is the source for this list?
> >
>  As with previous emails, the source is rpm-specs-latest.tar.xz from 
>  http://src.fedoraproject.org/repo/rpm-specs-latest.tar.xz for the 
>  given day.
>
>  I then go, unpack tar and for each rubygem specfile in the directory 
>  where the tar was unpacked (essentially `for rpm in 
>  $(rubygem-*.spec)`), clone the projects from pagure, run `fedpkg 
>  sources` (to get the current gem source from dist-git)
>  and run other kinds of processing.
>
>  Script for processing is here: 
>  https://fedorapeople.org/cgit/jackorp/public_git/spdx_rubygems.git/tree/f...
>
>  It can be a bit smarter/better to get current contents of Rawhide, but 
>  that's just a theoretical approach that I did not pursue yet as the 
>  current one works OK.
>
>  
No no, that is fine. Thx for elaborating. Packages like the mentioned 
needs to be properly retired, so they are not listed in the 
rpm-spec-latest or anywhere else and that is not your fault.


Vít


>  Jarek
>
> >
> > Vít
> >
>
>  _______________________________________________
>  ruby-sig mailing list -- ruby-sig(a)lists.fedoraproject.org
>  To unsubscribe send an email to ruby-sig-leave(a)lists.fedoraproject.org
>  Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
> https://lists.fedoraproject.org/archives/list/[e-mail]...
>  Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
>