Strict license validation of all incoming packages
Migrated to GithubPublic
Actions

Assigned To

Authored By

	ikey
	Aug 19 2017, 1:45 PM

Description

I want full verification of all incoming packages that they're suitable for inclusion now:

All license fields MUST be SPDX compliant records
All licenses in the package must be accounted for
Missing/incorrect license will NOT be permitted - this must be corrected before package.yml goes in the repos

ARs for Ikey:

Create simplistic license validation tool to scan the tarballs and document all license fields.
Perform repository-wide validation
Create new Conformance tag

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Wontfix		None	T4235 Meta: Post-release blues
		Migrated		DataDrake	T4332 Strict license validation of all incoming packages

Event Timeline

ikey claimed this task.Aug 19 2017, 1:45 PM

ikey added a subscriber: ikey.

Herald removed ikey as the assignee of this task. · View Herald TranscriptAug 19 2017, 1:45 PM

Herald added a project: Lacks Project. · View Herald Transcript

ikey updated the task description. (Show Details)Aug 19 2017, 1:48 PM

ikey edited projects, added Platform Integration; removed Lacks Project.

ikey updated the task description. (Show Details)

ikey added a project: Conformance.

ikey triaged this task as High priority.Aug 19 2017, 1:54 PM

ikey claimed this task.Aug 19 2017, 2:01 PM

ikey raised the priority of this task from High to Unbreak Now!.

ikey added a parent task: T4235: Meta: Post-release blues.

Work for this will now happen @ https://github.com/solus-project/preston

• baimafeima added a subscriber: • baimafeima.Aug 19 2017, 4:25 PM

Devil505 added a subscriber: Devil505.Aug 19 2017, 4:34 PM

m-delvalle added a subscriber: m-delvalle.Aug 19 2017, 4:39 PM

Still you'll need to handle some exceptions for things like the nvidia proprietary drivers.

@kyrios123 yeah. Perhaps a static set like EULA-NVIDIA

As4fN1v added a subscriber: As4fN1v.Aug 20 2017, 12:51 PM

As4fN1v removed a subscriber: As4fN1v.

EP01 mentioned this in D632: Update pep8 to 1.7.1.Aug 30 2017, 10:44 AM

@ikey I found a weird case with expect

Here is the full content of the license file:

Expect

Written by: Don Libes, libes at nist.gov, NIST

Design and implementation of this program was paid for by U.S. tax
dollars. Therefore it is public domain. However, the author and NIST
would appreciate credit if this program or parts of it are used.