Hi, I would like to give a short update about what currently is happening in KDE regarding SPDX markers and REUSE. -- If this is not the right list, please tell me; but right now I assume that you are interested :)
In KDE, with 24 years of source code files in our repositories, we have collected quite a zoo of different license headers over the years that are supposed to be cleaned up. Moreover, one product that we offer explicitly for usage by developers outside the KDE community are the KDE frameworks, which is a set of libraries on top of Qt that shall simplify the life of every Qt developer (all licensed as LGPL, contrary to the most other parts of KDE which are mostly GPL).
During the last months we converted all of our KDE frameworks to REUSE compatible license information and copyright statements (at least those files that contain copyright information for now). A short status update is here: https://cordlandwehr.wordpress.com/2020/08/14/spdx-for-kf5-kf6-status-update...
During this conversion, I worked on two tools that might be also interested for people outside of KDE:
1. License-Digger: This small tool was developed to do automatic conversions of code bases to REUSE compatible license statements. Note that the approach is different to the Linux Kernel, which used two existing license detection tools, compared both results, generated a conversion table and had a script that applied these changes. My approach is to trust more in the (very intense unit tested) tool and do a direct conversion but be much more restrictive about how licenses are detected: https://invent.kde.org/sdk/licensedigger
2. Build-System-Tooling for Compatibility Testing: This is still an early version, but the idea is automatically generated unit tests for checking compatibility with outbound licenses of libraries/executables. Actually, is is meant as regressions testing that added source files do not prevent the legal distribution of a binary artifact with a specific outbound license (internally it runs "reuse spdx" and uses the generated BOM file): https://invent.kde.org/frameworks/extra-cmake-modules/-/merge_requests/21
Cheers, Andreas
Hello Andreas,
Thank you for the update and sharing the tools you used. I am happy to see such a progress at KDE.
I know some people who will be very interested in that are currently on vacation. So please expect a longer response time over the next two to three weeks.
All the best, Matthias
PS: I like the dentist analogy in your post.
Hi Andreas,
~ Andreas Cord-Landwehr [2020-08-16 08:27 +0200]:
Hi, I would like to give a short update about what currently is happening in KDE regarding SPDX markers and REUSE. -- If this is not the right list, please tell me; but right now I assume that you are interested :)
That's the best place for such news, good choice! :)
During the last months we converted all of our KDE frameworks to REUSE compatible license information and copyright statements (at least those files that contain copyright information for now). A short status update is here: https://cordlandwehr.wordpress.com/2020/08/14/spdx-for-kf5-kf6-status-update...
Woah, that's wonderful news! Congratulations, and thanks for writing up your experiences. It is also amazing that other KDE repos are in the process of adopting the REUSE best practices.
Side question: on the REUSE website, we are planning to highlight some prominent adopters. May I add KDE's logo to this section?
Best, Max
On Donnerstag, 10. September 2020 14:17:52 CEST Max Mehl wrote:
Hi Andreas,
~ Andreas Cord-Landwehr [2020-08-16 08:27 +0200]:
Hi, I would like to give a short update about what currently is happening in KDE regarding SPDX markers and REUSE. -- If this is not the right list, please tell me; but right now I assume that you are interested :)
That's the best place for such news, good choice! :)
During the last months we converted all of our KDE frameworks to REUSE compatible license information and copyright statements (at least those files that contain copyright information for now). A short status update is here: https://cordlandwehr.wordpress.com/2020/08/14/spdx-for-kf5-kf6-status-upd ate/
Woah, that's wonderful news! Congratulations, and thanks for writing up your experiences. It is also amazing that other KDE repos are in the process of adopting the REUSE best practices.
Side question: on the REUSE website, we are planning to highlight some prominent adopters. May I add KDE's logo to this section?
Hi Max,
I briefly discussed this with the KDE e.V. board and we think that it would be good to have the KDE logo there.
Will keep you updated then on this list, when we reach our next milestones.
Cheers, Andreas
Hi Andreas,
~ Andreas Cord-Landwehr [2020-09-19 10:51 +0200]:
I briefly discussed this with the KDE e.V. board and we think that it would be good to have the KDE logo there.
Excellent, good decision! Thank you for discussing this with the KDE board so swiftly.
I just added your logo to the footer of the REUSE website, next to some other prominent adopters and sponsors: https://reuse.software/supporters/
Will keep you updated then on this list, when we reach our next milestones.
Very good, I am looking forward to it. Please let me/us know if you need help :)
Best, Max