https://bugzilla.redhat.com/show_bug.cgi?id=2357479 --- Comment #5 from Ben Beasley <code@xxxxxxxxxxxxxxxxxx> --- (In reply to Jef Spaleta from comment #4) > Hey so an update. > Upstream has changed the license on the items in the utils directory. So a > question for the initial reviewer, with that change do you feel things are > now in compliance? > > ref: https://github.com/raspberrypi/libpisp/pull/51 Note that I’m just a commenter for now, and I haven’t assigned myself the review. As of the latest upstream commit[1], the only remaining CC0-1.0 files in the source are meson files, e.g. [2]. While these don’t contribute to the License field, they are still distributed in the source RPM and need to be acceptably-licensed. There is an exception in the CC0-1.0 usage notes[3] that may be somewhat relevant here: > Upstream application of CC0-1.0 to trivial, noncreative, unoriginal, > and nonexpressive material as part of an effort to achieve conformance > to the REUSE specification (https://reuse.software/) (for example, > CI/CD configuration files) is permitted regardless of whether such > material would normally be classified as "content". That nearly applies to this case, but it does not look like upstream is actually targeting REUSE, and some of the meson.build files seem to be pushing the bounds of “trivial.” I still think it makes sense to ask upstream to relicense the meson.build files too, or run this case by Fedora Legal if that approach doesn’t bear fruit. [1] https://github.com/raspberrypi/libpisp/commit/dbbcf4f828396b494bcefe42fdc48beb6ae2a1c5 [2] https://github.com/raspberrypi/libpisp/blob/dbbcf4f828396b494bcefe42fdc48beb6ae2a1c5/src/meson.build [3] https://gitlab.com/fedora/legal/fedora-license-data/-/blob/56aeba99ba1b551e82b359bde277d1c51cc26e13/data/CC0-1.0.toml#L16-L20 -- You are receiving this mail because: You are on the CC list for the bug. You are always notified about changes to this product and component https://bugzilla.redhat.com/show_bug.cgi?id=2357479 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-spam&short_desc=Report%20of%20Bug%202357479%23c5 -- _______________________________________________ package-review mailing list -- package-review@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to package-review-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-review@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue