spdx-3-model icon indicating copy to clipboard operation
spdx-3-model copied to clipboard

Where are the SPDX Matching Guidelines?

Open vargenau opened this issue 1 year ago • 5 comments

In licenseText, it says:

Users of the licenseText for a License can apply the SPDX Matching Guidelines when comparing it to another text for matching purposes.

I cannot find the Matching Guidelines in the SPDX 3.0 spec.

vargenau avatar Apr 29 '24 15:04 vargenau

They are not part of the spec. They are part of the SPDX License List, at https://spdx.org/licenses/

zvr avatar Apr 29 '24 20:04 zvr

Hi @zvr

They were part of the spec. It was Annex B in SPDX 2.3.

And in https://spdx.org/licenses/ the link "matching guidelines" points to SPDX 2.3.

It should be clarified.

vargenau avatar Apr 30 '24 07:04 vargenau

Yes, in SPDXv2 the License List was part of the spec. In SPDXv3 it's not.

I agree that it should be stated in the changes between versions 2 and 3.

zvr avatar Apr 30 '24 08:04 zvr

The text in the first paragraph of https://spdx.org/licenses/ should also be edited as well.

Currently it says:

The SPDX License List is an integral part of the SPDX Specification.

bact avatar Apr 30 '24 15:04 bact

Thank you @zvr

What we should do:

  • create a web page containing the matching guidelines independent of SPDX 2.3
  • have a link in licenseText to this page
  • document in https://spdx.github.io/spdx-spec/v3.0/annexes/diffs-from-previous-editions/ that the license list and the matching guidelines are no longer part of the spec.

vargenau avatar Apr 30 '24 15:04 vargenau

Will be fixed by https://github.com/spdx/spdx-spec/pull/968

bact avatar Jun 05 '24 20:06 bact

Fixed by https://github.com/spdx/spdx-spec/pull/968 (merged) - can be closed?

bact avatar Jul 23 '24 04:07 bact

Closing as fixed by #968

@vargenau - if you disagree or see any additional issues, please open a new issue

goneall avatar Jul 23 '24 17:07 goneall