| 1 |
Le 06/09/2009 02:34, Thomas Anderson a écrit : |
| 2 |
> Ciaran's really not making homework up for gentoo. Why, remi stated himself that |
| 3 |
> we have homework to do(and we sometimes don't do that homework) |
| 4 |
|
| 5 |
I did, but I also stated upstream might have some homework to do |
| 6 |
themselves. Here's a list of things that : |
| 7 |
|
| 8 |
- COPYING automagically copied by automake (that would make the file |
| 9 |
be GPL-2+ or GPL-3+) |
| 10 |
- code "stolen" from other projects under a non-compatible/viral license |
| 11 |
- bundled libraries |
| 12 |
- code that's so old, no-one really knows what the original license |
| 13 |
(XFree86/Xorg) is or who the copyright holders are (Mozilla) |
| 14 |
|
| 15 |
And I haven't even had my morning coffee yet. |
| 16 |
|
| 17 |
Even if _we_ do our homework, all those reasons above might mislead us |
| 18 |
into thinking a package has license ABC, while in fact it's under |
| 19 |
license ABC+ and XYZ. |
| 20 |
|
| 21 |
I don't see how a new EAPI will help us with all the aforementioned |
| 22 |
issues. And for the proposed LICENSE sets to work correctly, the whole |
| 23 |
tree needs to be audited, and each new _version_ of each package needs |
| 24 |
to be rigorously checked if we want to provide something users can _trust_. |
| 25 |
|
| 26 |
Cheers, |
| 27 |
|
| 28 |
Rémi |
Archives