-
Notifications
You must be signed in to change notification settings - Fork 135
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Check license headers with reuse #704
base: main
Are you sure you want to change the base?
Conversation
@@ -1,3 +1,7 @@ | |||
# SPDX-FileCopyrightText: 2023 spdx contributors |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This file looks like it may have been copied from dependabot (due to the comments below), so I am not sure if this license and copyright is correct.
Copyright: 2023 spdx contributors | ||
License: Apache-2.0 | ||
|
||
Files: assets/* |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The assets
folder currently contains a single png image, which is an example output of the graph generation. What license should this have?
Copyright: 2023 spdx contributors | ||
License: Apache-2.0 | ||
|
||
Files: *.md |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should documentation have a separate license, or is sticking to Apache ok?
Copyright: 2023 spdx contributors | ||
License: Apache-2.0 | ||
|
||
Files: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
These files are generated/derived from spdx-3-model, which is covered by the Community Specification License.
afd0aef
to
38fabb7
Compare
Signed-off-by: Holger Frydrych <[email protected]>
…not feasible (e.g. test data, generated files, documentation and images) Signed-off-by: Holger Frydrych <[email protected]>
…expects it for full reuse compliance Signed-off-by: Holger Frydrych <[email protected]>
Signed-off-by: Holger Frydrych <[email protected]>
Signed-off-by: Holger Frydrych <[email protected]>
38fabb7
to
a18830d
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
This is a follow-up to #703. Closes #689.
This PR adds missing license and copyright information for all files (either by adding a license header or bulk-marking the files in
.reuse/dep5
where license headers are not possible/undesired) and attempts to achieve full compliance with the reuse-tool. Reuse is now also called in the GitHub actions pipeline to ensure compliance going forward.I am marking this PR as a draft because I am not entirely sure about the correct license for some of these files, but I hope that this PR can serve as a discussion on what the correct choices should be.