Předmět: | SPDX Statistics - 108 packages remaining |
---|---|
Datum: | Wed, 4 Jun 2025 12:01:54 +0200 |
Od: | Miroslav Suchý <msuchy@xxxxxxxxxx> |
Společnost: | Red Hat Czech, s.r.o. |
Komu: | Development discussions related to Fedora <devel@xxxxxxxxxxxxxxxxxxxxxxx> |
Hot news:
- in fedora-license-data - Richard and I are working together
on old and painful issues. The number of open issues is now less
than 50. This has been done while new requests are still coming.
- several maintainers overwrote already migrated license tag or used incorrect license ID. I can detect this easily and I communicate with each of them individually to find the solution.
- while the numbers seems to be the same like month ago (108 packages remaining) it was about +20 and -20.
- Packages with invalid
licenses are either resolved or are close to be resolved.
Five weeks ago we had:
* 24479 spec files in Fedora
* 31088 license tags in all spec files
* 108 tags are not SPDX compliant (number from line bellow minus packages with LicenseRef-Callaway-*)
* 2143 tags have not been converted to SPDX yet
* 11 tags can be trivially converted using `license-fedora2spdx`
* Progress: 99.63% ░░░░░░░░░█ 100%
ELN subset:
58 out of 2322 packages are not converted yet (progress 97.65%)
Today we have:
* 24552 spec files in Fedora
* 31159 license tags in all spec files
* 108 tags
are not SPDX compliant (number from line bellow minus
packages with LicenseRef-Callaway-*)
* 2093 tags have not been
converted to SPDX yet
* 8 tags can be trivially converted using `license-fedora2spdx`
*
Progress: 99.65% ░░░░░░░░░█
100%
ELN subset:
55
out of 2291 packages are not converted yet
(progress 97.65%)
Graph of these data with the burndown chart:
https://docs.google.com/spreadsheets/d/1QVMEzXWML-6_Mrlln02axFAaRKCQ8zE807rpCjus-8s/edit?usp=sharing
https://pagure.io/copr/license-validate/blob/main/f/packages-without-spdx-final.txt
List by package maintainers is here
https://pagure.io/copr/license-validate/blob/main/f/packages-without-spdx-final-maintainers.txt
Packages that are neither in SPDX nor in Callaway format (highest priority for now) - 30 packages:
https://pagure.io/copr/license-validate/blob/main/f/neither-nor-remaining-packagers.txt
Most of such packages has open issue in fedora-license-data. A
lot of them are waiting for SPDX to approved the license and
assign ID.
I released new version of fedora-license-data with 10 new license and several public domain or ultra permissive findings.
8 licenses are waiting to be reviewed by SPDX.org (and then to
be added to fedora-license-data) https://gitlab.com/fedora/legal/fedora-license-data/-/issues/?label_name%5B%5D=SPDX%3A%3Ablocked
If your package does not have neither git-log entry nor spec-changelog entry mentioning SPDX and you know your license tag matches SPDX formula, you can put your package on ignore list
https://pagure.io/copr/license-validate/blob/main/f/ignore-packages.txt
Either pull-request or direct email to me is fine.
Miroslav
-- _______________________________________________ legal mailing list -- legal@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to legal-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/legal@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue