License Infrastructure Interest Group: Difference between revisions

From Yocto Project
Jump to navigationJump to search
No edit summary
No edit summary
 
(14 intermediate revisions by 3 users not shown)
Line 16: Line 16:
===Packages with known LICENSE issues===
===Packages with known LICENSE issues===


* meta/recipes-connectivity/ppp/ppp_2.4.5.bb:LICENSE = "BSD & GPL-2+ & LGPL-2+ & public domain"
* none
* meta/classes/oelint.bbclass: "GPL LGPL FDL" : True,
* meta/recipes-devtools/nasm/nasm_2.07.bb:LICENSE = "simplifiedBSD"
* meta/recipes-devtools/elfutils/elfutils_0.148.bb:LICENSE = "GPL-2 with exceptions"
* meta/recipes-devtools/perl/libxml-parser-perl_2.40.bb:LICENSE = "Artistic"
* meta/recipes-devtools/perl/liburi-perl_1.58.bb:LICENSE = "Artistic | GPL-1+"
* meta/recipes-devtools/perl/libxml-perl_0.08.bb:LICENSE = "Artistic | GPL-1+"
* meta/recipes-devtools/perl/perl-native_5.12.3.bb:LICENSE = "Artistic|GPL-1"
* meta/recipes-devtools/perl/libxml-simple-perl_2.18.bb:LICENSE = "Artistic"
* meta/recipes-devtools/perl/perl_5.12.3.bb:LICENSE = "Artistic|GPL-1"
* meta/recipes-devtools/python/python-pyrex_0.9.9.bb:LICENSE = "Apache License Version 2.0"
* meta/recipes-devtools/python/python.inc:LICENSE = "PSF"
* meta/recipes-devtools/docbook-dsssl-stylesheets/docbook-dsssl-stylesheets-native_1.79.bb:LICENSE = "DSSSL"
* meta/recipes-devtools/docbook-sgml-dtd/docbook-sgml-dtd-4.5-native.bb:LICENSE = "OASIS"
* meta/recipes-devtools/docbook-sgml-dtd/docbook-sgml-dtd-4.1-native.bb:LICENSE = "OASIS"
* meta/recipes-devtools/docbook-sgml-dtd/docbook-sgml-dtd-3.1-native.bb:LICENSE = "OASIS"
* meta/recipes-devtools/transfig/transfig-native_3.2.5d.bb:LICENSE = "xfig"
* meta/recipes-devtools/tcltk/tcl_8.5.9.bb:LICENSE = "tcl"
* meta/recipes-devtools/subversion/subversion_1.6.15.bb:LICENSE = "Apache BSD"
* meta/recipes-devtools/tcf-agent/tcf-agent_svn.bb:LICENSE = "EPLv1.0 | EDLv1.0"
* meta/recipes-kernel/modutils/modutils-initscripts.bb:LICENSE = "PD"
* meta/recipes-kernel/linux-firmware/linux-firmware_git.bb:LICENSE = "Proprietary"
* meta/recipes-core/dbus/dbus.inc:LICENSE = "AFL2.1 | GPL-2+"
* meta/recipes-core/dbus/dbus-glib.inc:LICENSE = "AFL2.1 | GPL-2+"
* meta/recipes-core/glib-2.0/glib.inc:LICENSE = "LGPL-2+ & BSD & public domain"
* meta/recipes-core/busybox/busybox.inc:LICENSE = "GPL-2 & bzip2"
* meta/recipes-core/zlib/zlib_1.2.5.bb:LICENSE = "zlib"
* meta/recipes-core/jpeg/jpeg_8c.bb:LICENSE ="jpeg"
* meta/classes/openmoko2.bbclass:LICENSE = "${@openmoko_two_get_license(d)}"
* meta/classes/mozilla.bbclass:LICENSE = "MPL NPL"
* meta/recipes-graphics/ttf-fonts/ttf-bitstream-vera_1.10.bb:LICENSE = "Bitstream Vera"
* meta/recipes-graphics/xorg-driver/xf86-driver-common.inc:LICENSE = "MIT-X"
* meta/recipes-graphics/xorg-driver/xf86-video-omapfb_git.bb:LICENSE = "MIT-X"
* meta/recipes-graphics/xorg-app/xorg-app-common.inc:LICENSE = "MIT-X"
* meta/recipes-graphics/xorg-proto/xorg-proto-common.inc:LICENSE = "MIT-X"
* meta/recipes-graphics/fontconfig/fontconfig_2.8.0.bb:LICENSE = "MIT-style & MIT & Public Domain"
* meta/recipes-graphics/xorg-xserver/xserver-xf86-config_0.1.bb:LICENSE = "MIT-X"
* meta/recipes-graphics/xorg-xserver/xserver-xf86-common.inc:LICENSE = "MIT-X"
* meta/recipes-graphics/freetype/freetype_2.4.4.bb:LICENSE = "FreeTypeLicense | GPL-2+"
* meta/recipes-graphics/xorg-util/xorg-util-common.inc:LICENSE = "MIT-X"
* meta/recipes-graphics/xorg-lib/libxpm_3.5.9.bb:LICENSE = "X-BSD"
* meta/recipes-graphics/xorg-lib/xorg-lib-common.inc:LICENSE = "MIT-X"
* meta/recipes-graphics/xorg-lib/pixman_0.20.2.bb:LICENSE = "MIT & MIT-style & Public Domain"
* meta/recipes-graphics/xcb/xcb-proto.inc:LICENSE = "MIT-X"
* meta/recipes-graphics/xcb/libxcb.inc:LICENSE = "MIT-X"
* meta/recipes-graphics/xorg-font/font-alias_1.0.3.bb:LICENSE = "Font-Alias"
* meta/recipes-graphics/xorg-font/font-util_1.2.0.bb:LICENSE = "BSD & MIT-style & Unicode"
* meta/recipes-graphics/xorg-font/encodings_1.0.4.bb:LICENSE = "Public Domain"
* meta/recipes-graphics/xorg-font/xorg-minimal-fonts.bb:LICENSE = "Public Domain"
* meta/recipes-graphics/clutter/clutter-box2d.inc:LICENSE = "Catto"
* meta/recipes-graphics/mesa/mesa-demos_8.0.1.bb:LICENSE = "MIT & PD"
* meta/recipes-sato/sato-icon-theme/sato-icon-theme.inc:LICENSE = "CCPL"
* meta/recipes-sato/matchbox-theme-sato/matchbox-theme-sato.inc:LICENSE = "CCPL"
* meta/recipes-gnome/gnome/gnome-icon-theme_2.31.0.bb:LICENSE = "LGPL-3 | BY-SAv3"
* meta/recipes-extended/xinetd/xinetd_2.3.14.bb:LICENSE = "xinetd"
* meta/recipes-extended/perl/libconvert-asn1-perl_0.22.bb:LICENSE = "Artistic|GPL-1+"
* meta/recipes-extended/perl/libtimedate-perl_1.20.bb:LICENSE = "Artistic|GPL-1+"
* meta/recipes-extended/zip/zip.inc:LICENSE = "Info-ZIP"
* meta/recipes-extended/tcp-wrappers/tcp-wrappers_7.6.bb:LICENSE = "tcp-wrappers"
* meta/recipes-extended/less/less_436.bb:LICENSE = "GPL-3+ | less"
* meta/recipes-extended/libtirpc/libtirpc_0.2.1.bb:LICENSE = "Sun Industry Standards Source License 1.0"
* meta/recipes-extended/tzdata/tzdata_2010o.bb:LICENSE = "PD"
* meta/recipes-extended/bzip2/bzip2_1.0.6.bb:LICENSE = "bzip2"
* meta/recipes-extended/shadow/shadow.inc:LICENSE = "BSD | Artistic"
* meta/recipes-extended/byacc/byacc.inc:LICENSE = "public domain"
* meta/recipes-support/hal/hal-info.inc:LICENSE = "GPL-2 | AFL"
* meta/recipes-support/hal/hal.inc:LICENSE = "GPL-2+ | AFL"
* meta/recipes-support/db/db_5.1.19.bb:LICENSE = "BSD Sleepycat"
* meta/recipes-support/apr/apr-util_1.3.10.bb:LICENSE = "Apache License, Version 2.0"
* meta/recipes-support/apr/apr_1.4.2.bb:LICENSE = "Apache License, Version 2.0"
* meta/recipes-support/icu/icu-3.6.inc:LICENSE = "ICU"
* meta/recipes-support/boost/boost-36.inc:LICENSE = "Boost Software License"
* meta/recipes-support/boost/boost_1.44.0.bb:LICENSE = "boost"
* meta/recipes-support/boost/boost-jam-native.inc:LICENSE = "Boost Software License"
* meta/recipes-support/sqlite/sqlite3.inc:LICENSE = "PD"
* meta/conf/bitbake.conf:LICENSE = "INVALID"
* meta/recipes-multimedia/pulseaudio/libatomics-ops_1.2.bb:LICENSE = "GPL-2&MIT"
* meta/recipes-multimedia/libpng/libpng_1.2.44.bb:LICENSE = "libpng"
* meta/recipes-multimedia/libtiff/tiff_3.8.2.bb:LICENSE = "${PN}"
* meta-demoapps/recipes-connectivity/farsight/libnice_0.0.6.bb:LICENSE = "LGPL-1/MPL"
* meta-demoapps/recipes-graphics/xorg-app/xrdb_1.0.5.bb:LICENSE = "xrdb"
* meta-demoapps/recipes-support/poppler/poppler-data_0.1.bb:LICENSE = "Adobe"
 


===Naming===
===Naming===


All names should adhere to the textfile name of the common-license as defined in poky/meta/files/common-licenses. These file names follow the SPDX standard when an SPDX license file is available. If no SPDX file exists, we should:
All names should adhere to the textfile name of the common-license as defined in poky/meta/files/common-licenses. These file names follow the SPDX naming standard when an SPDX license file is available. If no SPDX file exists, we should:


* Attempt to get a generic license from the license provider
* Attempt to get a generic license from the license provider
* Offer the generic upstream to SPDX (to be defined)
* Offer the generic upstream to SPDX (to be defined)
This following is a list of all liceneses currently registered with SPDX.
==== Licenses ====
{|border="1" align="center" style="text-align:center;"
! Full name
! Identifier
! Text
|-
| [http://www.spdx.org/licenses/AFL-1.1 Academic Free License v1.1]
| AFL-1.1
|
[http://www.spdx.org/licenses/AFL-1.1#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/AFL-1.2 Academic Free License v1.2]
| AFL-1.2
|
[http://www.spdx.org/licenses/AFL-1.2#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/AFL-2.0 Academic Free License v2.0]
| AFL-2.0
|
[http://www.spdx.org/licenses/AFL-2.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/AFL-2.1 Academic Free License v2.1]
| AFL-2.1
|
[http://www.spdx.org/licenses/AFL-2.1#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/APL-1.0 Adaptive Public License]
| APL-1.0
|
[http://www.spdx.org/licenses/APL-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/Apache-1.0 Apache License 1.0]
| Apache-1.0
|
[http://www.spdx.org/licenses/Apache-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/Apache-1.1 Apache License 1.1]
| Apache-1.1
|
[http://www.spdx.org/licenses/Apache-1.1#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/Apache-2.0 Apache License 2.0]
| Apache-2.0
|
[http://www.spdx.org/licenses/Apache-2.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/APSL-1.0 Apple Public Source License 1.0]
| APSL-1.0
|
[http://www.spdx.org/licenses/APSL-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/APSL-1.1 Apple Public Source License 1.1]
| APSL-1.1
|
[http://www.spdx.org/licenses/APSL-1.1#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/APSL-1.2 Apple Public Source License 1.2]
| APSL-1.2
|
[http://www.spdx.org/licenses/APSL-1.2#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/APSL-2.0 Apple Public Source License 2.0]
| APSL-2.0
|
[http://www.spdx.org/licenses/APSL-2.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/Artistic-1.0 Artistic License 1.0]
| Artistic-1.0
|
[http://www.spdx.org/licenses/Artistic-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/Artistic-2.0 Artistic License 2.0]
| Artistic-2.0
|
[http://www.spdx.org/licenses/Artistic-2.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/AAL Attribution Assurance License]
| AAL
|
[http://www.spdx.org/licenses/AAL#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/BSL-1.0 Boost Software License 1.0]
| BSL-1.0
|
[http://www.spdx.org/licenses/BSL-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/BSD-2-Clause BSD 2-clause "Simplified" or "FreeBSD" License]
| BSD-2-Clause
|
[http://www.spdx.org/licenses/BSD-2-Clause#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/BSD-3-Clause BSD 3-clause "New" or "Revised" License]
| BSD-3-Clause
|
[http://www.spdx.org/licenses/BSD-3-Clause#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/BSD-4-Clause BSD 4-clause "Original" or "Old" License]
| BSD-4-Clause
|
[http://www.spdx.org/licenses/BSD-4-Clause#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CECILL-1.0 CeCILL Free Software License Agreement v1.0]
| CECILL-1.0
|
[http://www.spdx.org/licenses/CECILL-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CECILL-2.0 CeCILL Free Software License Agreement v2.0]
| CECILL-2.0
|
[http://www.spdx.org/licenses/CECILL-2.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CECILL-B CeCILL-B Free Software License Agreement]
| CECILL-B
|
[http://www.spdx.org/licenses/CECILL-B#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CECILL-C CeCILL-C Free Software License Agreement]
| CECILL-C
|
[http://www.spdx.org/licenses/CECILL-C#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/ClArtistic Clarified Artistic License]
| ClArtistic
|
[http://www.spdx.org/licenses/ClArtistic#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CDDL-1.0 Common Development and Distribution License 1.0]
| CDDL-1.0
|
[http://www.spdx.org/licenses/CDDL-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CPAL-1.0 Common Public Attribution License 1.0 ]
| CPAL-1.0
|
[http://www.spdx.org/licenses/CPAL-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CPL-1.0 Common Public License 1.0]
| CPL-1.0
|
[http://www.spdx.org/licenses/CPL-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CATOSL-1.1 Computer Associates Trusted Open Source License 1.1]
| CATOSL-1.1
|
[http://www.spdx.org/licenses/CATOSL-1.1#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CC-BY-1.0 Creative Commons Attribution 1.0]
| CC-BY-1.0
|
[http://www.spdx.org/licenses/CC-BY-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CC-BY-2.0 Creative Commons Attribution 2.0]
| CC-BY-2.0
|
[http://www.spdx.org/licenses/CC-BY-2.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CC-BY-2.5 Creative Commons Attribution 2.5]
| CC-BY-2.5
|
[http://www.spdx.org/licenses/CC-BY-2.5#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CC-BY-3.0 Creative Commons Attribution 3.0]
| CC-BY-3.0
|
[http://www.spdx.org/licenses/CC-BY-3.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CC-BY-ND-1.0 Creative Commons Attribution No Derivatives 1.0]
| CC-BY-ND-1.0
|
[http://www.spdx.org/licenses/CC-BY-ND-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CC-BY-ND-2.0 Creative Commons Attribution No Derivatives 2.0]
| CC-BY-ND-2.0
|
[http://www.spdx.org/licenses/CC-BY-ND-2.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CC-BY-ND-2.5 Creative Commons Attribution No Derivatives 2.5]
| CC-BY-ND-2.5
|
[http://www.spdx.org/licenses/CC-BY-ND-2.5#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CC-BY-ND-3.0 Creative Commons Attribution No Derivatives 3.0]
| CC-BY-ND-3.0
|
[http://www.spdx.org/licenses/CC-BY-ND-3.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CC-BY-NC-1.0 Creative Commons Attribution Non Commercial 1.0]
| CC-BY-NC-1.0
|
[http://www.spdx.org/licenses/CC-BY-NC-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CC-BY-NC-2.0 Creative Commons Attribution Non Commercial 2.0]
| CC-BY-NC-2.0
|
[http://www.spdx.org/licenses/CC-BY-NC-2.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CC-BY-NC-2.5 Creative Commons Attribution Non Commercial 2.5]
| CC-BY-NC-2.5
|
[http://www.spdx.org/licenses/CC-BY-NC-2.5#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CC-BY-NC-3.0 Creative Commons Attribution Non Commercial 3.0]
| CC-BY-NC-3.0
|
[http://www.spdx.org/licenses/CC-BY-NC-3.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CC-BY-NC-ND-1.0 Creative Commons Attribution Non Commercial No Derivatives 1.0]
| CC-BY-NC-ND-1.0
|
[http://www.spdx.org/licenses/CC-BY-NC-ND-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CC-BY-NC-ND-2.0 Creative Commons Attribution Non Commercial No Derivatives 2.0]
| CC-BY-NC-ND-2.0
|
[http://www.spdx.org/licenses/CC-BY-NC-ND-2.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CC-BY-NC-ND-2.5 Creative Commons Attribution Non Commercial No Derivatives 2.5]
| CC-BY-NC-ND-2.5
|
[http://www.spdx.org/licenses/CC-BY-NC-ND-2.5#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CC-BY-NC-ND-3.0 Creative Commons Attribution Non Commercial No Derivatives 3.0]
| CC-BY-NC-ND-3.0
|
[http://www.spdx.org/licenses/CC-BY-NC-ND-3.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CC-BY-NC-SA-1.0 Creative Commons Attribution Non Commercial Share Alike 1.0]
| CC-BY-NC-SA-1.0
|
[http://www.spdx.org/licenses/CC-BY-NC-SA-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CC-BY-NC-SA-2.0 Creative Commons Attribution Non Commercial Share Alike 2.0]
| CC-BY-NC-SA-2.0
|
[http://www.spdx.org/licenses/CC-BY-NC-SA-2.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CC-BY-NC-SA-2.5 Creative Commons Attribution Non Commercial Share Alike 2.5]
| CC-BY-NC-SA-2.5
|
[http://www.spdx.org/licenses/CC-BY-NC-SA-2.5#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CC-BY-NC-SA-3.0 Creative Commons Attribution Non Commercial Share Alike 3.0]
| CC-BY-NC-SA-3.0
|
[http://www.spdx.org/licenses/CC-BY-NC-SA-3.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CC-BY-SA-1.0 Creative Commons Attribution Share Alike 1.0]
| CC-BY-SA-1.0
|
[http://www.spdx.org/licenses/CC-BY-SA-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CC-BY-SA-2.0 Creative Commons Attribution Share Alike 2.0]
| CC-BY-SA-2.0
|
[http://www.spdx.org/licenses/CC-BY-SA-2.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CC-BY-SA-2.5 Creative Commons Attribution Share Alike 2.5]
| CC-BY-SA-2.5
|
[http://www.spdx.org/licenses/CC-BY-SA-2.5#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CC-BY-SA-3.0 Creative Commons Attribution Share Alike 3.0]
| CC-BY-SA-3.0
|
[http://www.spdx.org/licenses/CC-BY-SA-3.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/CUA-OPL-1.0 CUA Office Public License v1.0]
| CUA-OPL-1.0
|
[http://www.spdx.org/licenses/CUA-OPL-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/EPL-1.0 Eclipse Public License 1.0]
| EPL-1.0
|
[http://www.spdx.org/licenses/EPL-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/eCos-2.0 eCos license version 2.0]
| eCos-2.0
|
[http://www.spdx.org/licenses/eCos-2.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/ECL-1.0 Educational Community License v1.0]
| ECL-1.0
|
[http://www.spdx.org/licenses/ECL-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/ECL-2.0 Educational Community License v2.0]
| ECL-2.0
|
[http://www.spdx.org/licenses/ECL-2.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/EFL-1.0 Eiffel Forum License v1.0]
| EFL-1.0
|
[http://www.spdx.org/licenses/EFL-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/EFL-2.0 Eiffel Forum License v2.0]
| EFL-2.0
|
[http://www.spdx.org/licenses/EFL-2.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/Entessa Entessa Public License]
| Entessa
|
[http://www.spdx.org/licenses/Entessa#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/ErlPL-1.1 Erlang Public License v1.1]
| ErlPL-1.1
|
[http://www.spdx.org/licenses/ErlPL-1.1#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/EUDatagrid EU DataGrid Software License]
| EUDatagrid
|
[http://www.spdx.org/licenses/EUDatagrid#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/EUPL-1.0 European Union Public License 1.0]
| EUPL-1.0
|
[http://www.spdx.org/licenses/EUPL-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/EUPL-1.1 European Union Public License 1.1]
| EUPL-1.1
|
[http://www.spdx.org/licenses/EUPL-1.1#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/Fair Fair License]
| Fair
|
[http://www.spdx.org/licenses/Fair#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/Frameworx-1.0 Frameworx Open License 1.0]
| Frameworx-1.0
|
[http://www.spdx.org/licenses/Frameworx-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/AGPL-3.0 GNU Affero General Public License v3]
| AGPL-3.0
|
[http://www.spdx.org/licenses/AGPL-3.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/GFDL-1.2 GNU Free Documentation License v1.1]
| GFDL-1.2
|
[http://www.spdx.org/licenses/GFDL-1.2#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/GFDL-1.2 GNU Free Documentation License v1.2]
| GFDL-1.2
|
[http://www.spdx.org/licenses/GFDL-1.2#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/GFDL-1.3 GNU Free Documentation License v1.3]
| GFDL-1.3
|
[http://www.spdx.org/licenses/GFDL-1.3#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/GPL-1.0 GNU General Public License v1.0 only]
| GPL-1.0
|
[http://www.spdx.org/licenses/GPL-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/GPL-1.0  GNU General Public License v1.0 or later]
| GPL-1.0
|
[http://www.spdx.org/licenses/GPL-1.0 #licenseText License Text]
|-
|
[http://www.spdx.org/licenses/GPL-2.0 GNU General Public License v2.0 only]
| GPL-2.0
|
[http://www.spdx.org/licenses/GPL-2.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/GPL-2.0  GNU General Public License v2.0 or later]
| GPL-2.0
|
[http://www.spdx.org/licenses/GPL-2.0 #licenseText License Text]
|-
|
[http://www.spdx.org/licenses/GPL-2.0-with-autoconf-exception GNU General Public License v2.0 w/Autoconf exception]
| GPL-2.0-with-autoconf-exception
|
[http://www.spdx.org/licenses/GPL-2.0-with-autoconf-exception#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/GPL-2-with-bison-exception GNU General Public License v2.0 w/Bison exception]
| GPL-2-with-bison-exception
|
[http://www.spdx.org/licenses/GPL-2-with-bison-exception#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/GPL-2.0-with-classpath-exception GNU General Public License v2.0 w/Classpath exception]
| GPL-2.0-with-classpath-exception
|
[http://www.spdx.org/licenses/GPL-2.0-with-classpath-exception#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/GPL-2,0-with-GCC-exception GNU General Public License v2.0 w/GCC Runtime Library exception]
| GPL-2,0-with-GCC-exception
|
[http://www.spdx.org/licenses/GPL-2,0-with-GCC-exception#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/GPL-2,0-with-font-exception GNU General Public License v2.0 w/Font exception]
| GPL-2,0-with-font-exception
|
[http://www.spdx.org/licenses/GPL-2,0-with-font-exception#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/GPL-3.0 GNU General Public License v3.0 only]
| GPL-3.0
|
[http://www.spdx.org/licenses/GPL-3.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/GPL-3.0  GNU General Public License v3.0 or later]
| GPL-3.0
|
[http://www.spdx.org/licenses/GPL-3.0 #licenseText License Text]
|-
|
[http://www.spdx.org/licenses/GPL-3.0-with-autoconf-exception GNU General Public License v3.0 w/Autoconf exception]
| GPL-3.0-with-autoconf-exception
|
[http://www.spdx.org/licenses/GPL-3.0-with-autoconf-exception#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/GPL-3.0-with-GCC-exception GNU General Public License v3.0 w/GCC Runtime Library exception]
| GPL-3.0-with-GCC-exception
|
[http://www.spdx.org/licenses/GPL-3.0-with-GCC-exception#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/LGPL-2.1 GNU Lesser General Public License v2.1 only]
| LGPL-2.1
|
[http://www.spdx.org/licenses/LGPL-2.1#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/LGPL-2.1  GNU Lesser General Public License v2.1or later]
| LGPL-2.1
|
[http://www.spdx.org/licenses/LGPL-2.1 #licenseText License Text]
|-
|
[http://www.spdx.org/licenses/LGPL-3.0 GNU Lesser General Public License v3.0 only]
| LGPL-3.0
|
[http://www.spdx.org/licenses/LGPL-3.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/LGPL-3.0  GNU Lesser General Public License v3.0 or later]
| LGPL-3.0
|
[http://www.spdx.org/licenses/LGPL-3.0 #licenseText License Text]
|-
|
[http://www.spdx.org/licenses/LGPL-2.0 GNU Library General Public License v2 only]
| LGPL-2.0
|
[http://www.spdx.org/licenses/LGPL-2.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/LGPL-2.0  GNU Library General Public License v2 or later]
| LGPL-2.0
|
[http://www.spdx.org/licenses/LGPL-2.0 #licenseText License Text]
|-
|
[http://www.spdx.org/licenses/gSOAP-1.3b gSOAP Public License v1.b]
| gSOAP-1.3b
|
[http://www.spdx.org/licenses/gSOAP-1.3b#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/HPND Historic Permission Notice and Disclaimer]
| HPND
|
[http://www.spdx.org/licenses/HPND#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/IPL-1.0 IBM Public License v1.0]
| IPL-1.0
|
[http://www.spdx.org/licenses/IPL-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/IPA IPA Font License]
| IPA
|
[http://www.spdx.org/licenses/IPA#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/ISC ISC License (Bind, DHCP Server)]
| ISC
|
[http://www.spdx.org/licenses/ISC#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/LPPL-1.0 LaTeX Project Public License v1.0]
| LPPL-1.0
|
[http://www.spdx.org/licenses/LPPL-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/LPPL-1.1 LaTeX Project Public License v1.1]
| LPPL-1.1
|
[http://www.spdx.org/licenses/LPPL-1.1#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/LPPL-1.2 LaTeX Project Public License v1.2]
| LPPL-1.2
|
[http://www.spdx.org/licenses/LPPL-1.2#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/LPPL-1.3c LaTeX Project Public License v1.3c]
| LPPL-1.3c
|
[http://www.spdx.org/licenses/LPPL-1.3c#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/Libpng libpng License]
| Libpng
|
[http://www.spdx.org/licenses/Libpng#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/LPL-1.02 Lucent Public License v1.02 (Plan9)]
| LPL-1.02
|
[http://www.spdx.org/licenses/LPL-1.02#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/MS-PL Microsoft Public License]
| MS-PL
|
[http://www.spdx.org/licenses/MS-PL#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/MS-RL Microsoft Reciprocal License]
| MS-RL
|
[http://www.spdx.org/licenses/MS-RL#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/MirOS MirOS Licence]
| MirOS
|
[http://www.spdx.org/licenses/MirOS#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/MIT MIT license (also X11)]
| MIT
|
[http://www.spdx.org/licenses/MIT#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/Motosoto Motosoto License]
| Motosoto
|
[http://www.spdx.org/licenses/Motosoto#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/MPL-1.0 Mozilla Public License 1.0]
| MPL-1.0
|
[http://www.spdx.org/licenses/MPL-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/MPL-1.1 Mozilla Public License 1.1 ]
| MPL-1.1
|
[http://www.spdx.org/licenses/MPL-1.1#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/Multics Multics License]
| Multics
|
[http://www.spdx.org/licenses/Multics#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/NASA-1.3 NASA Open Source Agreement 1.3]
| NASA-1.3
|
[http://www.spdx.org/licenses/NASA-1.3#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/Nauman Naumen Public License]
| Nauman
|
[http://www.spdx.org/licenses/Nauman#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/NGPL Nethack General Public License]
| NGPL
|
[http://www.spdx.org/licenses/NGPL#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/Nokia Nokia Open Source License]
| Nokia
|
[http://www.spdx.org/licenses/Nokia#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/NPOSL-3.0 Non-Profit Open Software License 3.0]
| NPOSL-3.0
|
[http://www.spdx.org/licenses/NPOSL-3.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/NTP NTP License]
| NTP
|
[http://www.spdx.org/licenses/NTP#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/OCLC-2.0 OCLC Research Public License 2.0]
| OCLC-2.0
|
[http://www.spdx.org/licenses/OCLC-2.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/OGTSL Open Group Test Suite License]
| OGTSL
|
[http://www.spdx.org/licenses/OGTSL#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/OSL-1.0 Open Software License 1.0]
| OSL-1.0
|
[http://www.spdx.org/licenses/OSL-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/OSL-2.0 Open Software License 2.0]
| OSL-2.0
|
[http://www.spdx.org/licenses/OSL-2.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/OSL-3.0 Open Software License 3.0]
| OSL-3.0
|
[http://www.spdx.org/licenses/OSL-3.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/OLDAP-2.8 OpenLDAP Public License v2.8]
| OLDAP-2.8
|
[http://www.spdx.org/licenses/OLDAP-2.8#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/OpenSSL OpenSSL License]
| OpenSSL
|
[http://www.spdx.org/licenses/OpenSSL#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/PHP-3.0 PHP License v3.0]
| PHP-3.0
|
[http://www.spdx.org/licenses/PHP-3.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/PostgreSQL PostgreSQL License]
| PostgreSQL
|
[http://www.spdx.org/licenses/PostgreSQL#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/Python-2.0 Python Software Foundation License v2]
| Python-2.0
|
[http://www.spdx.org/licenses/Python-2.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/QPL-1.0 Q Public License 1.0]
| QPL-1.0
|
[http://www.spdx.org/licenses/QPL-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/RPSL-1.0 RealNetworks Public Source License v1.0]
| RPSL-1.0
|
[http://www.spdx.org/licenses/RPSL-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/RPL-1.5 Reciprocal Public License 1.5 ]
| RPL-1.5
|
[http://www.spdx.org/licenses/RPL-1.5#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/RHeCos-1.1 Red Hat eCos Public License v1.1]
| RHeCos-1.1
|
[http://www.spdx.org/licenses/RHeCos-1.1#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/RSCPL Ricoh Source Code Public License]
| RSCPL
|
[http://www.spdx.org/licenses/RSCPL#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/Ruby Ruby License]
| Ruby
|
[http://www.spdx.org/licenses/Ruby#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/OFL-1.1 SIL Open Font License 1.1]
| OFL-1.1
|
[http://www.spdx.org/licenses/OFL-1.1#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/Simple-2.0 Simple Public License 2.0]
| Simple-2.0
|
[http://www.spdx.org/licenses/Simple-2.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/Sleepycat Sleepycat License]
| Sleepycat
|
[http://www.spdx.org/licenses/Sleepycat#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/SugarCRM-1.1.3 SugarCRM Public License v1.1.3]
| SugarCRM-1.1.3
|
[http://www.spdx.org/licenses/SugarCRM-1.1.3#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/SPL Sun Public License]
| SPL
|
[http://www.spdx.org/licenses/SPL#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/Watcom-1.0 Sybase Open Watcom Public License 1.0]
| Watcom-1.0
|
[http://www.spdx.org/licenses/Watcom-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/NCSA University of Illinois/NCSA Open Source License]
| NCSA
|
[http://www.spdx.org/licenses/NCSA#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/VSL-1.0 Vovida Software License v1.0]
| VSL-1.0
|
[http://www.spdx.org/licenses/VSL-1.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/W3C W3C Software and Notice License]
| W3C
|
[http://www.spdx.org/licenses/W3C#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/WXwindows wxWindows Library License]
| WXwindows
|
[http://www.spdx.org/licenses/WXwindows#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/Xnet X.Net License]
| Xnet
|
[http://www.spdx.org/licenses/Xnet#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/XFree86-1.1 XFree86 License 1.1]
| XFree86-1.1
|
[http://www.spdx.org/licenses/XFree86-1.1#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/YPL-1.1 Yahoo! Public License v1.1]
| YPL-1.1
|
[http://www.spdx.org/licenses/YPL-1.1#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/Zimbra-1.3 Zimbra Publice License v1.3]
| Zimbra-1.3
|
[http://www.spdx.org/licenses/Zimbra-1.3#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/Zlib zlib License]
| Zlib
|
[http://www.spdx.org/licenses/Zlib#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/ZPL-1.1 Zope Public License 1.1]
| ZPL-1.1
|
[http://www.spdx.org/licenses/ZPL-1.1#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/ZPL-2.0 Zope Public License 2.0]
| ZPL-2.0
|
[http://www.spdx.org/licenses/ZPL-2.0#licenseText License Text]
|-
|
[http://www.spdx.org/licenses/ZPL-2.1 Zope Public License 2.1]
| ZPL-2.1
|
[http://www.spdx.org/licenses/ZPL-2.1#licenseText License Text]
|}


===Parsing operations===
===Parsing operations===


====Example====
The LICENSE field is parsed by converting the field to a [http://docs.python.org/library/ast.html Python Abstract Syntax Tree]. ASTs are internal to the python compiler and are used by python in the generation of python bytecode. We create, from the LICENSE field after attempting to turn it more "pythonesque", an abstract syntax tree via ast.parse. Using an AST Visitor class, we then dump the ast and visit each node of the tree.
 
What this means is that, since we are using the python compiler components to parse the LICENSE field, it should be syntactically valid python.
 
===License v2===
 
 
==Current License Issues==
*  Parallel bitbake causes inconsistent license reporting
** This is because we're doing this in the wrong place. During do_rootfs is where we need to do this as the package populates the rootfs.
*  License decision making is non-existent
** Right now, we just grab all licenses listed in the license field. We need to have a decision made based on:
***  Tie this in to incompatible license. If something is dual licensed and we *can* restrict this to a different license, do so
***  License legal priority (Which license overrides another license?)
***  License user priority (All things being equal try to provide something under X license first and Y license second)
*  Add licenses to the image as a conf option
*  Possible (generate spdx license files as part of the manifest). SPDX or not, we need a manifest.
*  We have some problematic licenses. [[License Audit]]
 
 
==License v2 Plan==
Stage One - Fix current defects:
* Fix where the license collection occurs. This needs to occur during the creation of the rootfs.
* Ensure that we can use this during a parallel bitbake
* Incorporate a flag to allow the image to contain collected licenses.
* Ensure that we've gotten rid of all license WARNINGS. (Add license text, correct recipes)
* Create a way to add additional licenses.
Stage Two - License decision making:
* Check to see if the package license field contains an incompatible license. If it does, toss a warning.
* Check user/legal license priority.
** When given FOOv2 | BARv1, where the user has weighted BARv1 as higher than FOOv2, we would choose BAR.
** When given FOOv2 & BARv1, where FOOv2 overrides BARv1, use FOOv2 even if the user has weighted BARv1 as higher.
Stage Three - Manifest:
* As we do_rootfs we should:
** Check to see if the package has an SPDX meta-data file.
*** If it does, use it.
*** If it doesn't, generate one but mark it as automatically generated and not an official spdx file.
** Gather up spdx files into a work dir
* Once the image is finished gather up all the spdx licenses and create an spdx manifest for the image
* Once the image is finished gather up all the spdx licenses and create a raw text manifest for the image

Latest revision as of 19:21, 30 May 2012

Overview

This group is for discussion of all things having to do with licenses, specifically, license wrangling, field parsing, possible SPDX implementation, etc.

SPDX

The Software Package Data Exchange® (SPDX™) specification is a standard format for communicating the components, licenses and copyrights associated with a software package. For the common-licenses used for the Yocto Project, we should, when possible, use the SPDX generic licenses for Yocto's license wrangling. As well, we should also use the SPDX Identifier field to identify the license fields within LICENSE

LICENSE Field Standard

Packages with known LICENSE issues

  • none

Naming

All names should adhere to the textfile name of the common-license as defined in poky/meta/files/common-licenses. These file names follow the SPDX naming standard when an SPDX license file is available. If no SPDX file exists, we should:

  • Attempt to get a generic license from the license provider
  • Offer the generic upstream to SPDX (to be defined)

This following is a list of all liceneses currently registered with SPDX.

Licenses

Full name Identifier Text
Academic Free License v1.1 AFL-1.1

License Text

Academic Free License v1.2

AFL-1.2

License Text

Academic Free License v2.0

AFL-2.0

License Text

Academic Free License v2.1

AFL-2.1

License Text

Adaptive Public License

APL-1.0

License Text

Apache License 1.0

Apache-1.0

License Text

Apache License 1.1

Apache-1.1

License Text

Apache License 2.0

Apache-2.0

License Text

Apple Public Source License 1.0

APSL-1.0

License Text

Apple Public Source License 1.1

APSL-1.1

License Text

Apple Public Source License 1.2

APSL-1.2

License Text

Apple Public Source License 2.0

APSL-2.0

License Text

Artistic License 1.0

Artistic-1.0

License Text

Artistic License 2.0

Artistic-2.0

License Text

Attribution Assurance License

AAL

License Text

Boost Software License 1.0

BSL-1.0

License Text

BSD 2-clause "Simplified" or "FreeBSD" License

BSD-2-Clause

License Text

BSD 3-clause "New" or "Revised" License

BSD-3-Clause

License Text

BSD 4-clause "Original" or "Old" License

BSD-4-Clause

License Text

CeCILL Free Software License Agreement v1.0

CECILL-1.0

License Text

CeCILL Free Software License Agreement v2.0

CECILL-2.0

License Text

CeCILL-B Free Software License Agreement

CECILL-B

License Text

CeCILL-C Free Software License Agreement

CECILL-C

License Text

Clarified Artistic License

ClArtistic

License Text

Common Development and Distribution License 1.0

CDDL-1.0

License Text

Common Public Attribution License 1.0

CPAL-1.0

License Text

Common Public License 1.0

CPL-1.0

License Text

Computer Associates Trusted Open Source License 1.1

CATOSL-1.1

License Text

Creative Commons Attribution 1.0

CC-BY-1.0

License Text

Creative Commons Attribution 2.0

CC-BY-2.0

License Text

Creative Commons Attribution 2.5

CC-BY-2.5

License Text

Creative Commons Attribution 3.0

CC-BY-3.0

License Text

Creative Commons Attribution No Derivatives 1.0

CC-BY-ND-1.0

License Text

Creative Commons Attribution No Derivatives 2.0

CC-BY-ND-2.0

License Text

Creative Commons Attribution No Derivatives 2.5

CC-BY-ND-2.5

License Text

Creative Commons Attribution No Derivatives 3.0

CC-BY-ND-3.0

License Text

Creative Commons Attribution Non Commercial 1.0

CC-BY-NC-1.0

License Text

Creative Commons Attribution Non Commercial 2.0

CC-BY-NC-2.0

License Text

Creative Commons Attribution Non Commercial 2.5

CC-BY-NC-2.5

License Text

Creative Commons Attribution Non Commercial 3.0

CC-BY-NC-3.0

License Text

Creative Commons Attribution Non Commercial No Derivatives 1.0

CC-BY-NC-ND-1.0

License Text

Creative Commons Attribution Non Commercial No Derivatives 2.0

CC-BY-NC-ND-2.0

License Text

Creative Commons Attribution Non Commercial No Derivatives 2.5

CC-BY-NC-ND-2.5

License Text

Creative Commons Attribution Non Commercial No Derivatives 3.0

CC-BY-NC-ND-3.0

License Text

Creative Commons Attribution Non Commercial Share Alike 1.0

CC-BY-NC-SA-1.0

License Text

Creative Commons Attribution Non Commercial Share Alike 2.0

CC-BY-NC-SA-2.0

License Text

Creative Commons Attribution Non Commercial Share Alike 2.5

CC-BY-NC-SA-2.5

License Text

Creative Commons Attribution Non Commercial Share Alike 3.0

CC-BY-NC-SA-3.0

License Text

Creative Commons Attribution Share Alike 1.0

CC-BY-SA-1.0

License Text

Creative Commons Attribution Share Alike 2.0

CC-BY-SA-2.0

License Text

Creative Commons Attribution Share Alike 2.5

CC-BY-SA-2.5

License Text

Creative Commons Attribution Share Alike 3.0

CC-BY-SA-3.0

License Text

CUA Office Public License v1.0

CUA-OPL-1.0

License Text

Eclipse Public License 1.0

EPL-1.0

License Text

eCos license version 2.0

eCos-2.0

License Text

Educational Community License v1.0

ECL-1.0

License Text

Educational Community License v2.0

ECL-2.0

License Text

Eiffel Forum License v1.0

EFL-1.0

License Text

Eiffel Forum License v2.0

EFL-2.0

License Text

Entessa Public License

Entessa

License Text

Erlang Public License v1.1

ErlPL-1.1

License Text

EU DataGrid Software License

EUDatagrid

License Text

European Union Public License 1.0

EUPL-1.0

License Text

European Union Public License 1.1

EUPL-1.1

License Text

Fair License

Fair

License Text

Frameworx Open License 1.0

Frameworx-1.0

License Text

GNU Affero General Public License v3

AGPL-3.0

License Text

GNU Free Documentation License v1.1

GFDL-1.2

License Text

GNU Free Documentation License v1.2

GFDL-1.2

License Text

GNU Free Documentation License v1.3

GFDL-1.3

License Text

GNU General Public License v1.0 only

GPL-1.0

License Text

GNU General Public License v1.0 or later

GPL-1.0

#licenseText License Text

GNU General Public License v2.0 only

GPL-2.0

License Text

GNU General Public License v2.0 or later

GPL-2.0

#licenseText License Text

GNU General Public License v2.0 w/Autoconf exception

GPL-2.0-with-autoconf-exception

License Text

GNU General Public License v2.0 w/Bison exception

GPL-2-with-bison-exception

License Text

GNU General Public License v2.0 w/Classpath exception

GPL-2.0-with-classpath-exception

License Text

GNU General Public License v2.0 w/GCC Runtime Library exception

GPL-2,0-with-GCC-exception

License Text

GNU General Public License v2.0 w/Font exception

GPL-2,0-with-font-exception

License Text

GNU General Public License v3.0 only

GPL-3.0

License Text

GNU General Public License v3.0 or later

GPL-3.0

#licenseText License Text

GNU General Public License v3.0 w/Autoconf exception

GPL-3.0-with-autoconf-exception

License Text

GNU General Public License v3.0 w/GCC Runtime Library exception

GPL-3.0-with-GCC-exception

License Text

GNU Lesser General Public License v2.1 only

LGPL-2.1

License Text

GNU Lesser General Public License v2.1or later

LGPL-2.1

#licenseText License Text

GNU Lesser General Public License v3.0 only

LGPL-3.0

License Text

GNU Lesser General Public License v3.0 or later

LGPL-3.0

#licenseText License Text

GNU Library General Public License v2 only

LGPL-2.0

License Text

GNU Library General Public License v2 or later

LGPL-2.0

#licenseText License Text

gSOAP Public License v1.b

gSOAP-1.3b

License Text

Historic Permission Notice and Disclaimer

HPND

License Text

IBM Public License v1.0

IPL-1.0

License Text

IPA Font License

IPA

License Text

ISC License (Bind, DHCP Server)

ISC

License Text

LaTeX Project Public License v1.0

LPPL-1.0

License Text

LaTeX Project Public License v1.1

LPPL-1.1

License Text

LaTeX Project Public License v1.2

LPPL-1.2

License Text

LaTeX Project Public License v1.3c

LPPL-1.3c

License Text

libpng License

Libpng

License Text

Lucent Public License v1.02 (Plan9)

LPL-1.02

License Text

Microsoft Public License

MS-PL

License Text

Microsoft Reciprocal License

MS-RL

License Text

MirOS Licence

MirOS

License Text

MIT license (also X11)

MIT

License Text

Motosoto License

Motosoto

License Text

Mozilla Public License 1.0

MPL-1.0

License Text

Mozilla Public License 1.1

MPL-1.1

License Text

Multics License

Multics

License Text

NASA Open Source Agreement 1.3

NASA-1.3

License Text

Naumen Public License

Nauman

License Text

Nethack General Public License

NGPL

License Text

Nokia Open Source License

Nokia

License Text

Non-Profit Open Software License 3.0

NPOSL-3.0

License Text

NTP License

NTP

License Text

OCLC Research Public License 2.0

OCLC-2.0

License Text

Open Group Test Suite License

OGTSL

License Text

Open Software License 1.0

OSL-1.0

License Text

Open Software License 2.0

OSL-2.0

License Text

Open Software License 3.0

OSL-3.0

License Text

OpenLDAP Public License v2.8

OLDAP-2.8

License Text

OpenSSL License

OpenSSL

License Text

PHP License v3.0

PHP-3.0

License Text

PostgreSQL License

PostgreSQL

License Text

Python Software Foundation License v2

Python-2.0

License Text

Q Public License 1.0

QPL-1.0

License Text

RealNetworks Public Source License v1.0

RPSL-1.0

License Text

Reciprocal Public License 1.5

RPL-1.5

License Text

Red Hat eCos Public License v1.1

RHeCos-1.1

License Text

Ricoh Source Code Public License

RSCPL

License Text

Ruby License

Ruby

License Text

SIL Open Font License 1.1

OFL-1.1

License Text

Simple Public License 2.0

Simple-2.0

License Text

Sleepycat License

Sleepycat

License Text

SugarCRM Public License v1.1.3

SugarCRM-1.1.3

License Text

Sun Public License

SPL

License Text

Sybase Open Watcom Public License 1.0

Watcom-1.0

License Text

University of Illinois/NCSA Open Source License

NCSA

License Text

Vovida Software License v1.0

VSL-1.0

License Text

W3C Software and Notice License

W3C

License Text

wxWindows Library License

WXwindows

License Text

X.Net License

Xnet

License Text

XFree86 License 1.1

XFree86-1.1

License Text

Yahoo! Public License v1.1

YPL-1.1

License Text

Zimbra Publice License v1.3

Zimbra-1.3

License Text

zlib License

Zlib

License Text

Zope Public License 1.1

ZPL-1.1

License Text

Zope Public License 2.0

ZPL-2.0

License Text

Zope Public License 2.1

ZPL-2.1

License Text

Parsing operations

The LICENSE field is parsed by converting the field to a Python Abstract Syntax Tree. ASTs are internal to the python compiler and are used by python in the generation of python bytecode. We create, from the LICENSE field after attempting to turn it more "pythonesque", an abstract syntax tree via ast.parse. Using an AST Visitor class, we then dump the ast and visit each node of the tree.

What this means is that, since we are using the python compiler components to parse the LICENSE field, it should be syntactically valid python.

License v2

Current License Issues

  • Parallel bitbake causes inconsistent license reporting
    • This is because we're doing this in the wrong place. During do_rootfs is where we need to do this as the package populates the rootfs.
  • License decision making is non-existent
    • Right now, we just grab all licenses listed in the license field. We need to have a decision made based on:
      • Tie this in to incompatible license. If something is dual licensed and we *can* restrict this to a different license, do so
      • License legal priority (Which license overrides another license?)
      • License user priority (All things being equal try to provide something under X license first and Y license second)
  • Add licenses to the image as a conf option
  • Possible (generate spdx license files as part of the manifest). SPDX or not, we need a manifest.
  • We have some problematic licenses. License Audit


License v2 Plan

Stage One - Fix current defects:

  • Fix where the license collection occurs. This needs to occur during the creation of the rootfs.
  • Ensure that we can use this during a parallel bitbake
  • Incorporate a flag to allow the image to contain collected licenses.
  • Ensure that we've gotten rid of all license WARNINGS. (Add license text, correct recipes)
  • Create a way to add additional licenses.

Stage Two - License decision making:

  • Check to see if the package license field contains an incompatible license. If it does, toss a warning.
  • Check user/legal license priority.
    • When given FOOv2 | BARv1, where the user has weighted BARv1 as higher than FOOv2, we would choose BAR.
    • When given FOOv2 & BARv1, where FOOv2 overrides BARv1, use FOOv2 even if the user has weighted BARv1 as higher.

Stage Three - Manifest:

  • As we do_rootfs we should:
    • Check to see if the package has an SPDX meta-data file.
      • If it does, use it.
      • If it doesn't, generate one but mark it as automatically generated and not an official spdx file.
    • Gather up spdx files into a work dir
  • Once the image is finished gather up all the spdx licenses and create an spdx manifest for the image
  • Once the image is finished gather up all the spdx licenses and create a raw text manifest for the image