Gary O'Neall

icon indicating a website link sourceauditor.com icon indicating an email [email protected]

icon company Source Auditor Inc. icon location San Francisco Bay Area icon location Contributor to Linux Foundation @spdx and @OpenChain-Project projects. Consultant providing technical due diligence and open source compliance services.

Results 1059 comments of Gary O'Neall

Formatting of plain license text in JSON data is broken

@jlovejoy > if we do that, then the formatting will show up better at https://github.com/spdx/license-list-data/tree/master/text. Close - the specific issue is related to the JSON files, but the formatting for...

Discrepancies between GPL 1.0 & 2.0 canonical texts and their associated SPDX templates

@pmonks - I just added a comment to the PR - I think this is now fixed, we just need to re-run the CI to be sure

Discrepancies between GPL 1.0 & 2.0 canonical texts and their associated SPDX templates

> @goneall not sure if I'm jumping the gun, but I reran these tests with license list v3.27.0 and Spdx-Java-Library v2.0.1 and this issue is still occurring. Does it need...

Official MIT license text is not recognized as MIT by LicenseCompareHelper.isStandardLicenseWithinText

Thanks @sdheh for the detailed analysis! This could explain some of the other issues. It may be a little while before I can work on a fix myself since I'm...

Official MIT license text is not recognized as MIT by LicenseCompareHelper.isStandardLicenseWithinText

> By the way, the regex match will always include the first 5000 characters before the word "permission" because the beginning is optional and `.{0,5000}` is greedy. Is this intended?...

JSON and website inexactly match for AGPL-1.0 which forbids non-verbatim copies

The text in the JSON file actually come from a text file and not the XML. For context, please refer to this pull request for the tool that generates the...

Provide machine-readable info about to which licenses an exception applies

> Just to mention one example that comes to my mind: When expressing relations between packages, you can either say A DEPENDS_ON B or B DEPENDENCY_OF A. There are several...

Suggested changes for SoftwareService description

Good points @swinslow One aspect of the SoftwareService I would like to emphasize is the link between the service and the software which "powers" the service. Especially if there are...

Suggested changes for SoftwareService description

Agree - closing the issue

Link in IANA media type registration seems to contain a dead link

Thanks @RingoDev for reporting this. I looks like we broke this when we published SPDX 3.0.0. I don't think we have the JSON schema published on github.io, but we could...