Re: Licensing of licenses

Hello,

Am 17.05.26 um 08:54 schrieb [email protected]:
> Hello togehter,
> 
> I am the upstream author of "spdx2debian" and beside of that not 
> involved in Debian Maintaining.
> 
> The resue-tool itself "ignores" license files when validating the SPDX- 
> compliance of a project.
> As some of you pointed out it is tricky to add a license to a license 
> file. So why not exclude license files from lintian (and other similiar 
> tools) and modify the Debian policy accordingly.
> Adding a license to a license feels like a workaround to me.
> 
> On the other hand, "reuse-tool" does not recognize "d/copyright" as a 
> license file, so it warns if there is no license for that file. 
> Therefore, "spdx2debian" currently generates a license file for it using 
> "CC0-1.0" as license and "None" as copyright holder. It is also a 
> workaround.

The file d/copyright can't be licensed under CC0-1.0.

Reason:
The freedoms granted by CC0-1.0 can't be applied.
CC0-1.0 grants the freedom to use, understand, distribute, and modify 
the source code. However, it is precisely this last freedom that is 
absent from most licenses.

On the other side it is a legal requirement to include the licenses in 
the package(s) to the user.

I believe this fact must be explicitly taken into consideration in every 
tool.

> 
> Regards,
> Christian Buhtz
> 

Regards

-- 
Mechtilde Stehmann
## Debian Developer
## PGP encryption welcome
## F0E3 7F3D C87A 4998 2899  39E7 F287 7BBA 141A AD7F

-----BEGIN PGP SIGNATURE-----
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=lGHR
-----END PGP SIGNATURE-----