Skip to content

Conversation

@jonpryor
Copy link
Contributor

Context: https://docs.microsoft.com/en-us/nuget/reference/nuspec#licenseurl
Context: https://docs.microsoft.com/en-us/nuget/reference/nuspec#license
Context: https://docs.microsoft.com/en-us/dotnet/standard/library-guidance/nuget#important-nuget-package-metadata
Context: https://docs.clearlydefined.io/curation-guidelines

Certain internal Microsoft tools check NuGet license information by
using ClearlyDefined curated data to determine verified license
information for packages which don't "clearly define" their license.

Unfortunately, a license URL is not considered "clearly defined",
likely because it isn't really machine readable. (Just because the
URL contains "MIT" doesn't mean it's actually MIT.)

As part of this effort, NuGet deprecated the <licenseUrl/>
element, preferring instead the new <license/> element.

Replace <licenseUrl/> with <license/>, and provide a
//license/@type value of expression. The value of the
<license/> element is MIT, which is an SPDX identifier,
which is a "clearly defined" value, and thus satisfies ClearlyDefined.

@jonpryor jonpryor force-pushed the jonp-add-license-expression branch from e06465f to 8e181b6 Compare February 17, 2022 01:37
Context: https://docs.microsoft.com/en-us/nuget/reference/nuspec#licenseurl
Context: https://docs.microsoft.com/en-us/nuget/reference/nuspec#license
Context: https://docs.microsoft.com/en-us/dotnet/standard/library-guidance/nuget#important-nuget-package-metadata
Context: https://docs.clearlydefined.io/curation-guidelines

Certain internal Microsoft tools check NuGet license information by
using [ClearlyDefined curated data][0] to determine verified license
information for packages which don't "clearly define" their license.

Unfortunately, a license URL is *not* considered "clearly defined",
likely because it isn't *really* machine readable.  (Just because the
URL contains "MIT" doesn't mean it's *actually* MIT.)

As part of this effort, [NuGet deprecated][1] the [`<licenseUrl/>`][2]
element, preferring instead the new [`<license/>`][3] element.

Replace `<licenseUrl/>` with `<license/>`, and provide a
`//license/@type` value of `expression`.  The value of the
`<license/>` element is `MIT`, which is an [SPDX identifier][4],
which is a "clearly defined" value, and thus satisfies ClearlyDefined.

[0]: https://github.com/clearlydefined/curated-data/
[1]: NuGet/Home#7509
[2]: https://docs.microsoft.com/en-us/nuget/reference/nuspec#licenseurl
[3]: https://docs.microsoft.com/en-us/nuget/reference/nuspec#license
[4]: https://spdx.org/licenses/
@jonpryor jonpryor force-pushed the jonp-add-license-expression branch from 8e181b6 to 2cb605a Compare February 17, 2022 01:39
@jonpryor jonpryor requested a review from akoeplinger February 17, 2022 01:39
@akoeplinger akoeplinger merged commit d40ae84 into main Feb 17, 2022
@akoeplinger akoeplinger deleted the jonp-add-license-expression branch February 17, 2022 10:20
@huangmin-ms
Copy link
Collaborator

@jonpryor @akoeplinger please target on develop branch instead of main branch for pull request.

huangmin-ms added a commit that referenced this pull request Feb 21, 2022
huangmin-ms added a commit that referenced this pull request Feb 23, 2022
Context: https://docs.microsoft.com/en-us/nuget/reference/nuspec#licenseurl
Context: https://docs.microsoft.com/en-us/nuget/reference/nuspec#license
Context: https://docs.microsoft.com/en-us/dotnet/standard/library-guidance/nuget#important-nuget-package-metadata
Context: https://docs.clearlydefined.io/curation-guidelines

Certain internal Microsoft tools check NuGet license information by
using [ClearlyDefined curated data][0] to determine verified license
information for packages which don't "clearly define" their license.

Unfortunately, a license URL is *not* considered "clearly defined",
likely because it isn't *really* machine readable.  (Just because the
URL contains "MIT" doesn't mean it's *actually* MIT.)

As part of this effort, [NuGet deprecated][1] the [`<licenseUrl/>`][2]
element, preferring instead the new [`<license/>`][3] element.

Replace `<licenseUrl/>` with `<license/>`, and provide a
`//license/@type` value of `expression`.  The value of the
`<license/>` element is `MIT`, which is an [SPDX identifier][4],
which is a "clearly defined" value, and thus satisfies ClearlyDefined.

[0]: https://github.com/clearlydefined/curated-data/
[1]: NuGet/Home#7509
[2]: https://docs.microsoft.com/en-us/nuget/reference/nuspec#licenseurl
[3]: https://docs.microsoft.com/en-us/nuget/reference/nuspec#license
[4]: https://spdx.org/licenses/

Co-authored-by: Min Huang <huangmin@microsoft.com>

Co-authored-by: Jonathan Pryor <jonpryor@vt.edu>
@huangmin-ms huangmin-ms restored the jonp-add-license-expression branch February 23, 2022 06:17
@huangmin-ms huangmin-ms deleted the jonp-add-license-expression branch February 23, 2022 06:17
@huangmin-ms huangmin-ms mentioned this pull request Feb 23, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants