Skip to main content

FOSS License Additional Metadata

Project description

FOSS Licenses

FOSS Licenses consists of:

  • license meta data for FOSS licenses adding useful information to existing licenses aiming at simplifying compliance work.

  • flame - command line program

  • Python API

License meta data

The meta data can be found in the var directory. Each license has a JSON file with meta information and a LICENSE file with the license text. The meta data consists of:

  • other names or aliases for licenses (e.g. "GNU GPL v. 2" is replaced by "GPL-2.0-only")

  • fixes for compound license written as one single license or using faulty syntax (e.g. "GPL-2.0-with-classpath-exception" -> "GPL-2.0-only WITH Classpath-exception-2.0")

  • other names for operators (e.g. "||" is replaced by "OR")

  • translation of license with dual license features to a compound license expression (e.g. "GPL-2.0-or-later" -> "GPL-2.0-only OR GPL-3.0-only")

  • compatibility as another license (e.g. "X11-Style (Keith Packard)" is compatibility wise the same as "HPND")

  • ambiguous license name (e.g. "GNU General Public License", which misses the version number)

  • license text

Background

There are lots of software licenses out there (e.g. see ScanCode LicenseDB), some of them are FOSS and some not. In this project we primarily focus on FOSS licenses.

License name proliferation

When you're working with compliance you are used to licenses called differently in source code or by tools (e.g. GPLv2, GPL (v2) and GNU General Public License Version 2) when all you really want too see is the SPDX identifier GPL-2.0-only. A seasoned compliance engineer or lawyer knows this already, but we need this information to be machine readable.

License proliferation

Another problem you face when working with compliance is the need to check whether the licenses in a combined work are compatible. One example is the X11-Style (Keith Packard) license, which really is the same license as the Historical Permission Notice and Disclaimer - sell variant. X11-Style (Keith Packard) is not supported for example in the OSADL matrix, but HPND-sell-variant is. Again, a seasoned license engineer or lawyer knows which licenses are compatible and which are not, but we need to make it possible for a machine to assist us.

Status

Current support:

Type Number
Licenses 184
Aliases 2508
Compatibilities 23
Operators 14
Ambiguities 139
Compounds 29

About

This project aims at providing a database with:

  • "all" different names for a license in a database

  • mappings from one license to another license which is supported by the OSADL matrix

and, to make the database easier to use:

  • a Python API

  • command line tool

Contributions

You are more than welcome to contribute.

License reviews

It would be great if you could check the licenses and feedback us (see HOW below).

Hacking

If you find a bug and have a fix or have written a new feature you want addded. Create a PR and we'll have a look..

Suggest new features and report bugs

We need input from you on how you use or would like to use foss-licenses.

Suggest new license to support

Do you miss a license that you want support for. Create an issue with the following information:

  • SPDX identifier (if any)

  • Scancode identifier (if any)

  • License text (or a URL)

  • Aliases you would like to add (if any)

  • Same compatibility as another license (if any)

How

  • create an issue

  • create PR for code or license contributions

CLA?

We do not have a CLA or similar, but we assume your contributions are made under our license (for the code and data).

Related tools and projects

Acknowledgements

Technical notes

Normalizing license expressions

We fix your license expressions with the following methods (listed in order)

Normalize aliases

With our database we can replace a license like "GPLv2+" to the SPDX identifier "GPL-2.0-or-later". We do this by searching for needles and replace them. To search for needles, in our case license expressions, (e.g. "BSD 0-Clause") to replace (with e.g. "0BSD") we use the following strategy:

  • list all needles in order of length, longest first

  • for each needle find and replace

This is a naive approach but given the limited data at hand it should work.

Normalize compound license expressions

Some compound licenses (e.g. "GPL-2.0-only WITH Classpath-exception-2.0") are stated incorrectly (e.g. "GPL-2.0-only AND Classpath-exception-2.0") or as a singe license (""GPL-2.0-with-classpath-exception). The license expression is scanned for licenses as listed in var/compounds.json and replaced accordingly.

Normalize operators

The license expression is scanned for operators as listed in var/operators.json and replaced accordingly (e.g. "||" is replaced by "OR").

Normalize dual licenses

Some licenses have a built in dual license feature (e.g. "GPL-2.0-or-later"). We replace such licenses with the corresponding dual licenses.

As an example: "GPL-2.0-or-later" is replacde by "(GPL-2.0-only OR GPL-3.0-only")

Insert same compatibility as another license

Some licenses are not supported by the OSADL license matrix (e.g. "X11-Style (Keith Packard)") but the license is very similar and has the same compatibility towards other licenses as another license (e.g. "HPND").

To allow for tools (e.g. flict) to check compatibility of an inbound license expression against an outbound license expression we replace the unknown license with the known and with same compatibility.

Extending flame

Python API

See Python API

Command line program

You can extend flame, the command line program, in two different ways:

  • using the option additional-license-dir

  • using the environment variable FLAME_USER_CONFIG

Using the option additional-license-dir

Assuming you want to extend flame with the licenses located in the directory more-licenses and then list the licenses (using the command licenses):

flame --additional-license-dir more-licenses licenses

Using the environment variable FLAME_USER_CONFIG

You have a config file, called flame-config.json, with the variable additional-license-dirset to more-licenses, like this:

{
    "additional-license-dir": "./more-licenses/"
}

then you can start flame to read the config file like this:

FLAME_USER_CONFIG=flame-config.json flame licenses

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

foss-flame-0.20.7.tar.gz (369.2 kB view details)

Uploaded Source

Built Distribution

foss_flame-0.20.7-py2.py3-none-any.whl (574.8 kB view details)

Uploaded Python 2 Python 3

File details

Details for the file foss-flame-0.20.7.tar.gz.

File metadata

  • Download URL: foss-flame-0.20.7.tar.gz
  • Upload date:
  • Size: 369.2 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/5.1.1 CPython/3.12.7

File hashes

Hashes for foss-flame-0.20.7.tar.gz
Algorithm Hash digest
SHA256 cb759182032ff4c57dfab5c1da56c0d627a267a17deab08a481e7a6bf89a06b1
MD5 9c7feb647e6111d7f4789505e777d160
BLAKE2b-256 1c7bf6a39dd664cdc5b7fd66f5e5c503f50de0423c5b4ad6e3b50f43eb589c52

See more details on using hashes here.

File details

Details for the file foss_flame-0.20.7-py2.py3-none-any.whl.

File metadata

File hashes

Hashes for foss_flame-0.20.7-py2.py3-none-any.whl
Algorithm Hash digest
SHA256 b0c75de7fd7e4b6f7c1f15c798db9c8c9eb4cd89fb65e47d9947d26bd73550e9
MD5 1dac2ee0d54c16e6871d826b06ba3407
BLAKE2b-256 2ba524737435481abb03da83059c94fd052d8a7ed11f4b75e525568d1d135586

See more details on using hashes here.

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page