Hi all, I'm currently working on packaging cargo-deny, and it includes (a very old version) of a compressed form of the SPDX license data from https://github.com/spdx/license-list-data.
The package needs the SPDX license-list-data in a format that can be read by "askalono", and it is used to match unknown license files with licenses known to SPDX. I was able to include a new version of that data by rebuilding that compressed blob from the SPDX license-list-data on GitHub. However, I could not determine under which license terms this data is made available. The repository for spdx/license-list-data only states that all contents are automatically generated from https://github.com/spdx/license-list-XML, which itself specifies no license for the data, either. I assume this data is redistributable *somehow*? The documentation explains how to *use* the data for various purposes, but not which license (if any) applies to it. Note that the existing askalono-cli package also bundles this data, which seems to have been missed during the original package review. I will apply any necessary changes both to cargo-deny (which is still being reviewed) and askalono-cli. Fabio _______________________________________________ legal mailing list -- legal@lists.fedoraproject.org To unsubscribe send an email to legal-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/legal@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
