FS#80153 - [libjpeg-turbo] License IJG should probably be custom:IJG

Attached to Project: Arch Linux
Opened by Phillip Pearson (myelin) - Friday, 03 November 2023, 18:53 GMT
Last edited by Toolybird (Toolybird) - Friday, 03 November 2023, 21:01 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To No-one
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

The license list for libjpeg-turbo was recently changed from just BSD to BSD, IJG, Zlib:

https://gitlab.archlinux.org/archlinux/packaging/packages/libjpeg-turbo/-/commit/bb0caa4466eff611f81587b72e90b3cbe05caae7

BSD and Zlib are special-case licenses as mentioned in https://wiki.archlinux.org/title/PKGBUILD#license, which are treated as custom licenses without having to be specified as custom:BSD or custom:Zlib. IIUC IJG needs to be specified as custom:IJG, though.

Changes required to fix this:

- Change "license = IJG" to "license = custom:IJG" in .SRCINFO

- Change "IJG" to "custom:IJG" in PKGBUILD

[ Why am I being pedantic about this? I work on a project which has license extraction tooling that is getting confused by IJG being specified as a common license without being present in /usr/share/licenses/common, /usr/share/licenses/spdx, or being in the list at https://wiki.archlinux.org/title/PKGBUILD#license :) ]
This task depends upon

Closed by  Toolybird (Toolybird)
Friday, 03 November 2023, 21:01 GMT
Reason for closing:  Not a bug
Additional comments about closing:  Thanks for reporting, but as per the comments, change are afoot.
Comment by loqs (loqs) - Friday, 03 November 2023, 19:01 GMT
IJG is the SPDX identified [1][2][3].

[1]: https://gitlab.archlinux.org/archlinux/packaging/packages/libjpeg-turbo/-/commit/bb0caa4466eff611f81587b72e90b3cbe05caae7
[2]: https://spdx.org/licenses/IJG.html
[3]: https://gitlab.archlinux.org/archlinux/rfcs/-/blob/master/rfcs/0016-spdx-license-identifiers.rst
Comment by Phillip Pearson (myelin) - Friday, 03 November 2023, 20:12 GMT
In that case, does the licenses package need to have IJG.txt from https://github.com/spdx/license-list-data/blob/main/text/IJG.txt added to /usr/share/licenses/spdx?
Comment by Toolybird (Toolybird) - Friday, 03 November 2023, 20:56 GMT
As alluded to in the Arch RFC pointed out by @loqs, all the License stuff is currently in a state of flux i.e. it's being worked on. See also the "Outdated" note in the Wiki link you referred to.

Sorry if that mucks up your extraction tooling...but progress is being made (I believe). Have CC'd @dvzrv just in case, but the changes in question here are valid.

> Change <...> in .SRCINFO

Sidenote FYI, .SRCINFO is a generated file and is never edited directly.

Loading...