On 6/26/24 5:24 AM, Florian Weimer wrote:

* Miroslav Suchý:

Dne 25. 06. 24 v 1:09 odp. Miro Hrončok napsal(a):

Could you make the comment something like this?

  # Automatically converted from old format: GPLv2
  # TODO check if there are other licenses to be listed
  License: GPL-2.0-only

We (the Change owners) discussed this on a meeting today. And we agreed on output:

  # Automatically converted from old format: GPLv2
  # TODO convert to correct SPDX identifier
  # See https://docs.fedoraproject.org/en-US/legal/update-existing-packages/
  License:  LicenseRef-Callaway-GPLv2

This is valid SPDX identifier. But not on the list of Fedora's allowed
licenses, so any QA tool will remind you to check the license.

What do you think?

to clarify how a package maintainer might view this - my thinking is that seeing
"LicenseRef-Callaway-GPLv2" would be a reminder that they need to generally check the actual license, and likely check whether this was intended to be GPL-2.0-only or GPL-2.0-or-later (assuming that GPLv2 was correct to begin with) Is that what you are thinking too, Miro?

Could you add an HTML anchor with GPLv2 specific information?  Otherwise
it looks a bit silly to anyone who isn't familiar with the GPLv2
ambiguity, and will likely result in unchecked replacement with
GPL-2.0-only in many cases.

Thanks,
Florian
--
_______________________________________________
legal mailing list -- legal@lists.fedoraproject.org
To unsubscribe send an email to legal-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/legal@lists.fedoraproject.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue