Gentoo Archives: gentoo-dev

From: Ulrich Mueller <ulm@g.o>
To: "Matija Šuklje" <matija@××××××.name>
Cc: "Michał Górny" <mgorny@g.o>, gentoo-dev <gentoo-dev@l.g.o>, licenses@g.o, qa <qa@g.o>
Subject: Re: [gentoo-dev] [RFC] Solving the problem of huge number of wrong LICENSES=*GPL-[23]
Date: Mon, 27 Aug 2018 02:37:43
Message-Id: w6gefekwn4k.fsf@kph.uni-mainz.de
1 >>>>> On Sun, 26 Aug 2018, Matija Šuklje wrote:
2
3 > It is worth noting that the SPDX standard (since 3.0) has indeed changed
4 > for the *GPL family of licenses
5
6 > from
7 > • GPL-2.0, and
8 > • GPL-2.0+
9
10 > to
11 > • GPL-2.0-only, and
12 > • GPL-2.0-or-later
13
14 > This was done by request and in coordination with the FSF.
15
16 > To quote from <https://spdx.org/licenses/> (under “Deprecated Licenses”
17 > header):
18
19 >> Release 3.0 replaced previous Identifiers for GNU licenses with more
20 >> explicit Identifiers to reflect the "this version only" or "any later
21 >> version" option specific to those licenses. As such, the previously
22 >> used Identifiers for those licenses are deprecated as of v3.0.
23
24 > Note: for all other licenses ‘+’ does the same as before.
25
26 So it's "-or-later" for the GPL family but "+" for all others?
27 That doesn't look like a consistent format to me.
28
29 Also, what does "GPL-2.0-or-later" mean? There is no version 2.0 of the
30 GPL, and by version ordering rules (ours, as well as GNU strverscmp(3)),
31 "2" is less than "2.0". So GPL version 2 is not matched by it.
32
33 > So, if we plan to the latest SPDX spec, we would need to introduce the
34 > “-only” and ”-or-later” suffixes regardless.
35
36 Ulrich