csaf_distribution icon indicating copy to clipboard operation
csaf_distribution copied to clipboard

Licensing of generated files

Open JanHoefelmeyer opened this issue 10 months ago • 2 comments

Looking at e.g. https://github.com/csaf-poc/csaf_distribution/blob/main/csaf/generate_cvss_enums.go, this will generate another file using the MIT License. Should generated files also use the Apache2.0 License and should this be changed as a part of https://github.com/csaf-poc/csaf_distribution/issues/532, or should this be left as-is?

JanHoefelmeyer avatar Apr 22 '24 11:04 JanHoefelmeyer

There are two generates files in the code base:

  • https://github.com/csaf-poc/csaf_distribution/blob/main/csaf/cvss20enums.go
  • https://github.com/csaf-poc/csaf_distribution/blob/main/csaf/cvss3enums.go with both, a lot of the content comes from the input files, e.g.
  • https://github.com/csaf-poc/csaf_distribution/blob/main/csaf/schema/cvss-v2.0.json

but the input file comes with a different license. The one function copied over into the output comes from Intevation, but the source file is not and has a different license.

It seems a good solution to not create a full header.

bernhardreiter avatar Apr 22 '24 13:04 bernhardreiter

Added label service+dev as this is part of the licensing change.

bernhardreiter avatar May 03 '24 16:05 bernhardreiter

@JanHoefelmeyer I explained the expected go generate behavior to @bernhardreiter I will adjust the generator to stamp the right license in generated files.

s-l-teichmann avatar Jun 21 '24 05:06 s-l-teichmann