Re: FreeBSD ports call OSSP software "LICENSE= MIT" (&c.), but OSSP software isn't MIT (&c.)

From: Rodrigo Osorio <rodrigo_at_FreeBSD.org>
Date: Tue, 10 Sep 2024 22:08:32 UTC
Hi,

I was thinking about adding the OSSP licence into our catalog
to fix this request once fo all until I realized by reading
the ossp.org website, the the license we are talking about
is considered as a BSD licence by the creators themselves.

So basically, if we respect their will, the license is basically
a BSD license with 4 clauses : http://www.ossp.org/doc/license.html

Cheers,
-- rodrigo

On 09/09/24 21:05, наб wrote:
> Hi!
>
> I'm the new upstream for all OSSP software (https://sr.ht/~nabijaczleweli/ossp).
> As part of this, I am surveying downstream packaging
> (to see if I need to thaw anything beside ossp-uuid).
>
> The mirror URL acceptable for Mk/bsd.sites.mk is
>    https://lfs.nabijaczleweli.xyz/0022-OSSP.org-mirror/ftp.ossp.org/ossp-ftp/pkg/%SUBDIR%/
>
> Of interest here are:
>    devel/mm           https://git.sr.ht/~nabijaczleweli/ossp-mm
>    devel/ossp-al      https://git.sr.ht/~nabijaczleweli/ossp-al
>    devel/ossp-cfg     https://git.sr.ht/~nabijaczleweli/ossp-cfg
>    devel/ossp-ex      https://git.sr.ht/~nabijaczleweli/ossp-ex
>    devel/ossp-l2      https://git.sr.ht/~nabijaczleweli/ossp-l2
>    devel/ossp-val     https://git.sr.ht/~nabijaczleweli/ossp-val
>    devel/ossp-var     https://git.sr.ht/~nabijaczleweli/ossp-var
>    devel/ossp-xds     https://git.sr.ht/~nabijaczleweli/ossp-xds
>    devel/shtool       https://git.sr.ht/~nabijaczleweli/ossp-shtool
>    devel/str          https://git.sr.ht/~nabijaczleweli/ossp-str
>    lang/p5-ePerl      https://git.sr.ht/~nabijaczleweli/ossp-eperl
>    mail/lmtp2nntp     https://git.sr.ht/~nabijaczleweli/ossp-lmtp2nntp
>    misc/iselect       https://git.sr.ht/~nabijaczleweli/ossp-iselect
>    misc/ossp-uuid     https://git.sr.ht/~nabijaczleweli/ossp-uuid
>    misc/p5-OSSP-uuid  https://git.sr.ht/~nabijaczleweli/ossp-uuid
>    net/ossp-sa        https://git.sr.ht/~nabijaczleweli/ossp-sa
>
> Which say
>    $ for f in $p; do git grep -i lic HEAD:$f/Makefile; done
>    HEAD:devel/mm/Makefile:LICENSE= BSD4CLAUSE
>    HEAD:devel/mm/Makefile:LICENSE_FILE=    ${WRKSRC}/LICENSE
> this is wrong, ossp-mm/LICENSE says:
>    ====================================================================
>    Copyright (c) 1999-2007 Ralf S. Engelschall <rse@engelschall.com>
>    Copyright (c) 1999-2007 The OSSP Project <http://www.ossp.org/>
>
>    Redistribution and use in source and binary forms, with or without
>    modification, are permitted provided that the following conditions
>    are met:
>
>    1. Redistributions of source code must retain the above copyright
>       notice, this list of conditions and the following disclaimer.
>
>    2. Redistributions in binary form must reproduce the above copyright
>       notice, this list of conditions and the following disclaimer in
>       the documentation and/or other materials provided with the
>       distribution.
>
>    3. All advertising materials mentioning features or use of this
>       software must display the following acknowledgment:
>       "This product includes software developed by
>        Ralf S. Engelschall <rse@engelschall.com>."
>
>    4. Redistributions of any form whatsoever must retain the following
>       acknowledgment:
>       "This product includes software developed by
>        Ralf S. Engelschall <rse@engelschall.com>."
>
>    THIS SOFTWARE IS PROVIDED BY RALF S. ENGELSCHALL ``AS IS'' AND ANY
>    EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
>    IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
>    PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL RALF S. ENGELSCHALL OR
>    ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
>    SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
>    NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
>    LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
>    HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
>    STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
>    ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
>    OF THE POSSIBILITY OF SUCH DAMAGE.
>    ====================================================================
> point 4 is different from BSD-4-Clause.
>
>    HEAD:devel/ossp-xds/Makefile:LICENSE=   MIT
>    HEAD:devel/ossp-xds/Makefile:LICENSE_FILE=      ${WRKSRC}/LICENSE
> this is wrong, ossp-xds/LICENSE is rse's OSSP licence (see below).
>   
>    HEAD:devel/shtool/Makefile:LICENSE=     GPLv2+
>    HEAD:devel/shtool/Makefile:LICENSE_FILE=        ${WRKSRC}/COPYING
> this is correct
> (notably there is an exception in the README,
>   but that applies to users that embed shtool only).
>
>    HEAD:lang/p5-ePerl/Makefile:LICENSE=    ART10 GPLv2
>    HEAD:lang/p5-ePerl/Makefile:LICENSE_COMB=       dual
> this is correct
> (and eperl embeds shtool which is GPL2+;
>   the exception applies so it doesn't poison eperl,
>   but it is nevertheless a GPL2+ file;
>   unclear to me how accurate you like the LICENSE stanzas to be,
>   but GPL2 is already mentioned, so it's fine probably).
>
>    HEAD:mail/lmtp2nntp/Makefile:LICENSE=   GPLv2+
>    HEAD:mail/lmtp2nntp/Makefile:LICENSE_FILE=      ${WRKSRC}/COPYING
> this is correct.
>
>    HEAD:misc/iselect/Makefile:LICENSE=     GPLv2
>    HEAD:misc/iselect/Makefile:LICENSE_FILE=        ${WRKSRC}/COPYING
> mostly correct, but iselect embeds GNU getopt and which is GPL2+
> (and iselect embeds shtool, but iselect is already GPL so it's ok i think).
>
>    HEAD:misc/ossp-uuid/Makefile:LICENSE=   MIT
>    HEAD:misc/ossp-uuid/Makefile:LICENSE_FILE=      ${WRKSRC}/../README
>    HEAD:misc/ossp-uuid/Makefile:LICENSE_FILE=      ${WRKSRC}/README
> this is wrong, uuid uses rse's OSSP licence:
>    Permission to use, copy, modify, and distribute this software for
>    any purpose with or without fee is hereby granted, provided that
>    the above copyright notice and this permission notice appear in all
>    copies.
>    
>    THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED
>    WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
>    MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
>    IN NO EVENT SHALL THE AUTHORS AND COPYRIGHT HOLDERS AND THEIR
>    CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
>    SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
>    LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
>    USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
>    ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
>    OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
>    OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
>    SUCH DAMAGE.
> this is not in any licence corpus I'm aware of,
> but it's most similar to 0BSD (but 0BSD post-dates it by 5+ years).
>
> Of note are the ports that don't seem to specify a licence at all, too.
>
> It's unclear to me how to query for reverse dependencies,
> but most OSSP libraries are without a maintainer in FreeBSD,
> and tend to be obsolete in the modern world,
> having really only archival value.
> Rather than fixing the licences, it may be prudent to kill them outright.
>
> Best,
> наб