From nobody Tue Sep 10 22:08:32 2024 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4X3HsT56SDz5TdQp for ; Tue, 10 Sep 2024 22:08:45 +0000 (UTC) (envelope-from rodrigo@FreeBSD.org) Received: from smtp.osorio.me (mvd.osorio.me [37.187.111.94]) by mx1.freebsd.org (Postfix) with ESMTP id 4X3HsR6SqJz4rmK; Tue, 10 Sep 2024 22:08:43 +0000 (UTC) (envelope-from rodrigo@FreeBSD.org) Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=fail reason="No valid SPF, No valid DKIM" header.from=freebsd.org (policy=none); spf=softfail (mx1.freebsd.org: 37.187.111.94 is neither permitted nor denied by domain of rodrigo@FreeBSD.org) smtp.mailfrom=rodrigo@FreeBSD.org Received: from [192.168.1.39] (lfbn-idf1-1-971-net.w86-238.abo.wanadoo.fr [86.238.50.0]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384) (No client certificate requested) by smtp.osorio.me (Postfix) with ESMTPSA id 5A3F6A8041; Tue, 10 Sep 2024 22:08:44 +0000 (UTC) Message-ID: Date: Wed, 11 Sep 2024 00:08:32 +0200 List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-ports@freebsd.org Sender: owner-freebsd-ports@FreeBSD.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Reply-To: rodrigo@FreeBSD.org Subject: Re: FreeBSD ports call OSSP software "LICENSE= MIT" (&c.), but OSSP software isn't MIT (&c.) To: =?UTF-8?B?0L3QsNCx?= , vd@freebsd.org, ports@freebsd.org Cc: ~nabijaczleweli/ossp@lists.sr.ht References: Content-Language: en-US, fr, es-AR From: Rodrigo Osorio In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Spamd-Bar: + X-Spamd-Result: default: False [1.23 / 15.00]; VIOLATED_DIRECT_SPF(3.50)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_SHORT(-1.00)[-0.997]; NEURAL_HAM_MEDIUM(-0.48)[-0.479]; MIME_GOOD(-0.10)[text/plain]; DMARC_POLICY_SOFTFAIL(0.10)[freebsd.org : No valid SPF, No valid DKIM,none]; ONCE_RECEIVED(0.10)[]; RCVD_NO_TLS_LAST(0.10)[]; XM_UA_NO_VERSION(0.01)[]; FROM_HAS_DN(0.00)[]; ARC_NA(0.00)[]; RCPT_COUNT_THREE(0.00)[4]; TO_DN_SOME(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_COUNT_ONE(0.00)[1]; RCVD_VIA_SMTP_AUTH(0.00)[]; ASN(0.00)[asn:16276, ipnet:37.187.0.0/16, country:FR]; R_SPF_SOFTFAIL(0.00)[~all]; REPLYTO_ADDR_EQ_FROM(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; FREEFALL_USER(0.00)[rodrigo]; TO_MATCH_ENVRCPT_SOME(0.00)[]; R_DKIM_NA(0.00)[]; MLMMJ_DEST(0.00)[ports@freebsd.org]; MID_RHS_MATCH_FROM(0.00)[]; HAS_REPLYTO(0.00)[rodrigo@FreeBSD.org] X-Rspamd-Queue-Id: 4X3HsR6SqJz4rmK Hi, I was thinking about adding the OSSP licence into our catalog to fix this request once fo all until I realized by reading the ossp.org website, the the license we are talking about is considered as a BSD licence by the creators themselves. So basically, if we respect their will, the license is basically a BSD license with 4 clauses : http://www.ossp.org/doc/license.html Cheers, -- rodrigo On 09/09/24 21:05, наб wrote: > Hi! > > I'm the new upstream for all OSSP software (https://sr.ht/~nabijaczleweli/ossp). > As part of this, I am surveying downstream packaging > (to see if I need to thaw anything beside ossp-uuid). > > The mirror URL acceptable for Mk/bsd.sites.mk is > https://lfs.nabijaczleweli.xyz/0022-OSSP.org-mirror/ftp.ossp.org/ossp-ftp/pkg/%SUBDIR%/ > > Of interest here are: > devel/mm https://git.sr.ht/~nabijaczleweli/ossp-mm > devel/ossp-al https://git.sr.ht/~nabijaczleweli/ossp-al > devel/ossp-cfg https://git.sr.ht/~nabijaczleweli/ossp-cfg > devel/ossp-ex https://git.sr.ht/~nabijaczleweli/ossp-ex > devel/ossp-l2 https://git.sr.ht/~nabijaczleweli/ossp-l2 > devel/ossp-val https://git.sr.ht/~nabijaczleweli/ossp-val > devel/ossp-var https://git.sr.ht/~nabijaczleweli/ossp-var > devel/ossp-xds https://git.sr.ht/~nabijaczleweli/ossp-xds > devel/shtool https://git.sr.ht/~nabijaczleweli/ossp-shtool > devel/str https://git.sr.ht/~nabijaczleweli/ossp-str > lang/p5-ePerl https://git.sr.ht/~nabijaczleweli/ossp-eperl > mail/lmtp2nntp https://git.sr.ht/~nabijaczleweli/ossp-lmtp2nntp > misc/iselect https://git.sr.ht/~nabijaczleweli/ossp-iselect > misc/ossp-uuid https://git.sr.ht/~nabijaczleweli/ossp-uuid > misc/p5-OSSP-uuid https://git.sr.ht/~nabijaczleweli/ossp-uuid > net/ossp-sa https://git.sr.ht/~nabijaczleweli/ossp-sa > > Which say > $ for f in $p; do git grep -i lic HEAD:$f/Makefile; done > HEAD:devel/mm/Makefile:LICENSE= BSD4CLAUSE > HEAD:devel/mm/Makefile:LICENSE_FILE= ${WRKSRC}/LICENSE > this is wrong, ossp-mm/LICENSE says: > ==================================================================== > Copyright (c) 1999-2007 Ralf S. Engelschall > Copyright (c) 1999-2007 The OSSP Project > > Redistribution and use in source and binary forms, with or without > modification, are permitted provided that the following conditions > are met: > > 1. Redistributions of source code must retain the above copyright > notice, this list of conditions and the following disclaimer. > > 2. Redistributions in binary form must reproduce the above copyright > notice, this list of conditions and the following disclaimer in > the documentation and/or other materials provided with the > distribution. > > 3. All advertising materials mentioning features or use of this > software must display the following acknowledgment: > "This product includes software developed by > Ralf S. Engelschall ." > > 4. Redistributions of any form whatsoever must retain the following > acknowledgment: > "This product includes software developed by > Ralf S. Engelschall ." > > THIS SOFTWARE IS PROVIDED BY RALF S. ENGELSCHALL ``AS IS'' AND ANY > EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE > IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR > PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL RALF S. ENGELSCHALL OR > ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, > SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT > NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; > LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) > HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, > STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) > ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED > OF THE POSSIBILITY OF SUCH DAMAGE. > ==================================================================== > point 4 is different from BSD-4-Clause. > > HEAD:devel/ossp-xds/Makefile:LICENSE= MIT > HEAD:devel/ossp-xds/Makefile:LICENSE_FILE= ${WRKSRC}/LICENSE > this is wrong, ossp-xds/LICENSE is rse's OSSP licence (see below). > > HEAD:devel/shtool/Makefile:LICENSE= GPLv2+ > HEAD:devel/shtool/Makefile:LICENSE_FILE= ${WRKSRC}/COPYING > this is correct > (notably there is an exception in the README, > but that applies to users that embed shtool only). > > HEAD:lang/p5-ePerl/Makefile:LICENSE= ART10 GPLv2 > HEAD:lang/p5-ePerl/Makefile:LICENSE_COMB= dual > this is correct > (and eperl embeds shtool which is GPL2+; > the exception applies so it doesn't poison eperl, > but it is nevertheless a GPL2+ file; > unclear to me how accurate you like the LICENSE stanzas to be, > but GPL2 is already mentioned, so it's fine probably). > > HEAD:mail/lmtp2nntp/Makefile:LICENSE= GPLv2+ > HEAD:mail/lmtp2nntp/Makefile:LICENSE_FILE= ${WRKSRC}/COPYING > this is correct. > > HEAD:misc/iselect/Makefile:LICENSE= GPLv2 > HEAD:misc/iselect/Makefile:LICENSE_FILE= ${WRKSRC}/COPYING > mostly correct, but iselect embeds GNU getopt and which is GPL2+ > (and iselect embeds shtool, but iselect is already GPL so it's ok i think). > > HEAD:misc/ossp-uuid/Makefile:LICENSE= MIT > HEAD:misc/ossp-uuid/Makefile:LICENSE_FILE= ${WRKSRC}/../README > HEAD:misc/ossp-uuid/Makefile:LICENSE_FILE= ${WRKSRC}/README > this is wrong, uuid uses rse's OSSP licence: > Permission to use, copy, modify, and distribute this software for > any purpose with or without fee is hereby granted, provided that > the above copyright notice and this permission notice appear in all > copies. > > THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED > WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF > MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. > IN NO EVENT SHALL THE AUTHORS AND COPYRIGHT HOLDERS AND THEIR > CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, > SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT > LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF > USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND > ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, > OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT > OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF > SUCH DAMAGE. > this is not in any licence corpus I'm aware of, > but it's most similar to 0BSD (but 0BSD post-dates it by 5+ years). > > Of note are the ports that don't seem to specify a licence at all, too. > > It's unclear to me how to query for reverse dependencies, > but most OSSP libraries are without a maintainer in FreeBSD, > and tend to be obsolete in the modern world, > having really only archival value. > Rather than fixing the licences, it may be prudent to kill them outright. > > Best, > наб