Re: How to handle copyright notices in testdata intended for license validation tools?

Simon Josefsson <[email protected]> Mon, 24 Nov 2025 23:03:19 +0100

Newsgroups	gmane.linux.debian.devel.legal
Message-ID	<[email protected]>

Richard Laager <[email protected]> writes:

> Files: testdata/valid-evidence.json
> Copyright: OWASP Foundation
> License: Apache-2.0
> Comment:
>   This file contains strings that are test copyright statements, which
>   are being used as a test vector for proper license/copyright parsing.
>   They do not correspond to any copyright of this package.
>
> That way, you are really explicit about which files have the issue.

Thank you Richard -- this seems reasonable, so I used it.

https://salsa.debian.org/go-team/packages/golang-github-cyclonedx-cyclonedx-go/-/commit/515c349e1d8c0f1ba6dde892b7f1b79696f01ab3

/Simon

signature.asc (application/pgp-signature, 1.2 KB)

-----BEGIN PGP SIGNATURE-----
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=XGyQ
-----END PGP SIGNATURE-----