On Tue, Feb 13, 2018 at 04:01:02PM +0100, Dominique Leuenberger / DimStar wrote:
I see basically these options:
* Stick with SPDX-2.0 * Accept SPDX-2.0 AND SPDX-3.0 identifiers * Move to SPDX-3.0
I would prefer (2) and I'm strongly against going with (3) right now. We will get there, eventually, I'm sure, but why the rush? One of the big problems of openSUSE from the point of view of people who do not do package maintenance as their everyday job and can give it only limited amount of time is the hobby of some distribution maintainers (or whatever the correct term is) to continuously invent more and more checks forcing said maintainers to rewrite their specfiles all the time (and study how first - which is not trivial in some cases).
Of course any kind of 'moving away' from spdx will need tooling adjustments, having spdx-3.0 identifier will mean any build for 'non- latest openSUSE releases' will spit warnings, as they would not know about the new license format being valid.
...and this is another problem. Unnecessarily strict checks in Factory enforce new constructions which do not work in older (still supported) distributions. Results either in unreadable specfiles full of %if's or in maintainers resigning on building on anything but Factory. Neither should be considered desirable, AFAICS. Michal Kubeček -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org