Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

add operator for "only this version" #2472

Open
jlovejoy opened this issue May 12, 2024 · 3 comments
Open

add operator for "only this version" #2472

jlovejoy opened this issue May 12, 2024 · 3 comments

Comments

@jlovejoy
Copy link
Member

See discussion here: https://lists.spdx.org/g/Spdx-legal/topic/105846418#msg3552

TL;DR - EUPL-1.1 and EUPL-1.2 have a default position of "or any later version" and if one wants to limit to that version only, they must indicate this. I believe there may be another license with this scenario.

Adding an operator like + to signify only-this-version would provide flexibility for such licenses.

This would require an update to the spec for the license expression annex, but we can begin the discussion here/ on the spdx-legal calls or mailing list

@swinslow
Copy link
Member

@jlovejoy I'm not sure I'm in favor of adding a new operator for this use case:

  • As you mentioned, it would require modifying the spec. But not only the license expression annex -- also the underlying SPDX 3.0 model (e.g., adding a new class comparable to OrLaterOperator).
  • The spec adjustment would also require adjusting tooling to handle the new syntax.
  • And, it would likely result in having three different forms for the GPL family of license IDs going forwards:
    1. original style (GPL-2.0, GPL-2.0+)
    2. current style (GPL-2.0-only, GPL-2.0-or-later)
    3. version with new operator (if the operator is e.g. =, then presumably something like GPL-2.0=)

If all of this is just because of EUPL, personally I'd be more inclined to go the -only and -or-later route, for the use cases where this comes up. As opposed to introducing a new syntax element that everyone has to parse going forward. I'm open to discussing it, but that's my immediate gut reaction.

@jlovejoy jlovejoy added this to the 3.25 milestone May 14, 2024
@karsten-klein
Copy link

karsten-klein commented May 17, 2024

If all of this is just because of EUPL, personally I'd be more inclined to go the -only and -or-later route, for the use cases where this comes up. As opposed to introducing a new syntax element that everyone has to parse going forward. I'm open to discussing it, but that's my immediate gut reaction.

Please not! Btw, in my eyes the '+' extension (to indicate 'or any later version' as pointed out in the spec in D.3 Simple license expressions) is already possible. See https://spdx.github.io/spdx-spec/v2.3/SPDX-license-expressions/:

image

See line

simple-expression = license-id / license-id"+" / license-ref

@Pizza-Ria
Copy link
Contributor

"+" for "-or-later" either intuitively makes sense or is just so widely used that it practically amounts to being intuitive. Looking at my keyboad, I don't see anything that definitely indicates ONLY so I'd be concerned that a new operator may introduce confusion or mislabelling.

@jlovejoy jlovejoy modified the milestones: 3.25.0, 3.26.0 Aug 2, 2024
@jlovejoy jlovejoy self-assigned this Sep 12, 2024
# for free to join this conversation on GitHub. Already have an account? # to comment
Projects
None yet
Development

No branches or pull requests

4 participants