Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Invalid SPDX: incorrect license exception #62

Open
vargenau opened this issue Oct 18, 2024 · 2 comments
Open

Invalid SPDX: incorrect license exception #62

vargenau opened this issue Oct 18, 2024 · 2 comments
Assignees

Comments

@vargenau
Copy link
Contributor

phpwiki.json

java -jar tools-java/tools-java-1.1.8-jar-with-dependencies.jar Verify phpwiki.json

(from https://github.com/spdx/tools-java)

@ortizjeronimo
Copy link
Contributor

Hello @vargenau , can you please give us an example line in which the license exception is incorrect?

@vargenau
Copy link
Contributor Author

Hello @ortizjeronimo

You have for example:
"licenseDeclared": "(BSD-2-Clause AND LicenseRef-scancode-php-2.0.2 AND LicenseRef-GPL-1.0-or-later AND GPL-2.0-or-later WITH x11vnc-openssl-exception AND CC-BY-2.5 AND GPL-2.0-only AND LicenseRef-scancode-public-domain AND GPL-2.0-only AND LGPL-3.0-only AND LicenseRef-scancode-public-domain AND GPL-1.0-or-later AND LicenseRef-LGPL-2.1-only WITH LicenseRef-scancode-generic-exception AND LicenseRef-GPL-1.0-or-later AND CC-BY-2.5 AND GPL-2.0-only AND MIT AND BSD-3-Clause)",

The problem is "WITH LicenseRef-scancode-generic-exception".

The SPDX keyword WITH can only be followed by a predefined exception found the official SPDX list: https://spdx.org/licenses/exceptions-index.html

You cannot have a user-defined exception.

I know ScanCode does that, but it is incorrect.

You can use something like "LicenseRef-LGPL-2.1-only-with-scancode-generic-exception" if you define it.

@ortizjeronimo ortizjeronimo self-assigned this Oct 31, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants