Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

License expressions of system packages (as in Debian) are too hairy #2993

Open
pombredanne opened this issue Jun 13, 2022 · 2 comments
Open

Comments

@pombredanne
Copy link
Member

(lgpl-2.1-plus AND gpl-3.0-plus AND (lgpl-3.0-plus AND gpl-2.0-plus)) AND lgpl-2.1-plus AND gpl-3.0-plus AND gfdl-1.1-plus AND gfdl-1.3-plus AND (lgpl-2.0-plus AND lgpl-3.0 AND gpl-1.0-plus AND gpl-3.0 AND gfdl-1.3) AND lgpl-2.1-plus AND (lgpl-3.0-plus OR gpl-2.0-plus) AND lgpl-2.0-plus AND gpl-3.0 AND (bsd-new OR gpl-1.0-plus) AND bsd-simplified AND public-domain AND isc AND cc0-1.0 AND mit AND mit AND agpl-3.0 AND agpl-3.0 AND agpl-3.0 AND (lgpl-3.0-plus AND gpl-2.0-plus) AND apache-2.0 AND apache-2.0 AND apache-2.0 AND apache-2.0 AND mit AND mit AND (lgpl-3.0-plus AND gpl-2.0-plus) AND (lgpl-3.0-plus AND gpl-2.0-plus) AND (lgpl-3.0-plus AND gpl-2.0-plus) AND (lgpl-3.0-plus AND gpl-2.0-plus) AND (lgpl-3.0-plus AND gpl-2.0-plus) AND (lgpl-3.0-plus AND gpl-2.0-plus) AND (lgpl-3.0-plus AND gpl-2.0-plus) AND (lgpl-3.0-plus AND gpl-2.0-plus) AND (lgpl-3.0-plus AND gpl-2.0-plus) AND (lgpl-3.0-plus AND gpl-2.0-plus) AND (lgpl-3.0-plus AND gpl-2.0-plus) AND (lgpl-3.0-plus AND gpl-2.0-plus) AND (lgpl-3.0-plus AND gpl-2.0-plus) AND (lgpl-3.0-plus AND gpl-2.0-plus) AND (lgpl-3.0-plus AND gpl-2.0-plus) AND (lgpl-3.0-plus AND gpl-2.0-plus) AND (lgpl-3.0-plus AND gpl-2.0-plus) AND (lgpl-3.0-plus AND gpl-2.0-plus) AND (lgpl-3.0-plus AND gpl-2.0-plus) AND (lgpl-3.0-plus AND gpl-2.0-plus) AND (lgpl-3.0-plus AND gpl-2.0-plus) AND (lgpl-3.0-plus AND gpl-2.0-plus) AND (lgpl-3.0-plus AND gpl-2.0-plus) AND mit AND mit AND lgpl-2.1-plus AND (lgpl-3.0-plus AND gpl-2.0-plus) AND (lgpl-3.0-plus OR gpl-2.0-plus) AND gpl-3.0-plus AND gpl-3.0-plus AND gpl-3.0-plus

could be deduped to:

'(lgpl-2.1-plus AND gpl-3.0-plus AND (lgpl-3.0-plus AND gpl-2.0-plus)) AND lgpl-2.1-plus AND gpl-3.0-plus AND gfdl-1.1-plus AND gfdl-1.3-plus AND (lgpl-2.0-plus AND lgpl-3.0 AND gpl-1.0-plus AND gpl-3.0 AND gfdl-1.3) AND (lgpl-3.0-plus OR gpl-2.0-plus) AND lgpl-2.0-plus AND gpl-3.0 AND (bsd-new OR gpl-1.0-plus) AND bsd-simplified AND public-domain AND isc AND cc0-1.0 AND mit AND agpl-3.0 AND (lgpl-3.0-plus AND gpl-2.0-plus) AND apache-2.0'

or simplified to:

'agpl-3.0 AND apache-2.0 AND bsd-simplified AND cc0-1.0 AND gfdl-1.1-plus AND gfdl-1.3 AND gfdl-1.3-plus AND gpl-1.0-plus AND gpl-2.0-plus AND gpl-3.0 AND gpl-3.0-plus AND isc AND lgpl-2.0-plus AND lgpl-2.1-plus AND lgpl-3.0 AND lgpl-3.0-plus AND mit AND public-domain'

And this without even applying any transform.

We should return a simplified version of every license expression.

@AyanSinhaMahapatra
Copy link
Member

This is aboutcode-org/license-expression#67

@AyanSinhaMahapatra AyanSinhaMahapatra modified the milestones: v32.0, v32.1 Jan 4, 2023
@mjherzog
Copy link
Member

mjherzog commented Mar 1, 2023

I am in favor of presenting a streamlined license expression, but the "hairy" version is also useful as a digest of the number of license detections so I do not think that we should lose that data completely. We need to show the raw detection data and somehow mark that we applied streamlining (summarization) to the license expression.

@AyanSinhaMahapatra AyanSinhaMahapatra modified the milestones: v32.2, v32.1 Jan 15, 2024
@AyanSinhaMahapatra AyanSinhaMahapatra modified the milestones: v32.1, v32.2 Feb 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants