Re: compatibility matrix for /usr/share/common-licenses

hi Nicolas,

thanks for the feedback!

On Tue Jul 2, 2024 at 10:24 PM CEST, Nicholas D Steeves wrote:
> > right, I guess that's why the wikipedia diagram distinguishes between MPL-2 and
> > MPL-2-no-copyleft-exception. I think that we don't have to worry about that
> > because spdx.org/licenses defines a distinct license identifier for the
> > -no-copyleft-exception variant, and dep5 requires the use of spdx identifiers.
> > (which is to say that we can assume that MPL-2 is in fact MPL-2 without the
> > copyleft exception and therefore GPL compatible)
>
> Would you please provide a citation for this update, because it looks to
> me like DEP 5 only prohibits the redefinition of "a standard short
> name", as well as defining the "trailing dot-zeroes" case.  "Standard
[..]

no, you're right -- and I've only now read
https://wiki.debian.org/Proposals/CopyrightFormat which makes abundantly clear
that we care little about spdx.

that brings us back to the question of what to do with MPL-2. my inclination is
to KISS and assume that all "License: MPL-2" is without the copyleft
restriction, and only assume otherwise if we ever encounter
MPL-2-no-copyleft-exception (which does not seem to be used anywhere today,
according to codesearch.debian.net)

if that sounds reasonable to you, I'll update accordingly the relevant FAQ entry
in the tech note.

-----BEGIN PGP SIGNATURE-----

iQIzBAABCAAdFiEEA2RWqo7IwLCLSFYbT59tVQ7WEioFAmaIYtEACgkQT59tVQ7W
EioCgg//dBdOFXleHEdlB44e0xylTlChw/hYQNaUon7ql/Cx0Bvads1ZUHH3I5/w
uDXhOoIZKlWDquIOIk8tB4WwGNEKgKmBOfLtf6/tNTsVJrfeE5f78D4jOCC640JS
4cfHcQizcMZPKr6wvL12EsMnTgqsLRp8eJzNavLTgNWpMQstn22n40DrmvUv3Qye
6gRWAD0PLkr9cYPyXnUfUXI6BOeraBtokK+AILpuoafck5eHK6xHPcCFq60OIgzu
aJHUF7k2MlwJ+DavcVsFHeSfx6Bx3lnGlac3K/Ky9WCNz9cn57LC6woIJC5QIGSC
q8zeeW7hDniFMrXkh3h7jPZmH1C+S1rhDoJnzK93PZYnZhtSG9+iEqU3DzRjDsI7
MpOvX3+E75A/0+U/vGcATwJXs/T5bnZwR3Fe9eON9Tt7qqZmr7WA5/44scH+p3EL
vk/JOaPmCrC2wK6FVH3oVV2ptOL3/+n90KOwN709NJg4UhGb4PebVwY6ZMvqn0od
DgWSfrDqiCvXKPFodvIecuozq25StY0Vv8xawsCz1Bxb+tZC5cm1ewzanpXWhQZd
VzrgU0Lye7JNC1I1nhay6+JGQK6js2f/J1pi7EzEW5LW/2T/3hZpwYaij1ytlMth
gVY9/G6MWWj55VEFe5n7sTiG8ZrKRDTicJP6FNxykOLKmFH6Bg4=
=TrAA
-----END PGP SIGNATURE-----