Update license.json to include entries for all SPDX 3.21 License templates
mrutkows opened this issue · comments
Support the latest SPDX license templates: https://github.com/spdx/license-list-data
Which were made official in this tagged release: https://github.com/spdx/license-list-data/releases/tag/v3.20
The "Delta" of missing licenses is contained within this JSON file:
https://github.com/CycloneDX/sbom-utility/blob/main/docs/spdx-licenses-3-20-delta.json
It would be interesting to write a script to take the published JSON index from SPDX vX.X and produce a merged (must be a merge, not an overwrite or custom notes/annotations would be lost)license.json. This should improve future version updates.
Please note that the MIT-equivalent "children" need a review as we have no verifiable reference to where these were found:
"children": [
"MIT-iOS",
"MIT-1.0",
"MIT-1.1",
"MIT-2.0"
],
Also, along the MIT-equivalent "children" review please verify this:
{
"id": "",
"name": "BSD-equivalent",
"family": "BSD-equivalent",
"reference": "",
"osi": false,
"fsf": false,
"usagePolicy": "allow",
"annotationRefs": [
"APPROVED",
"NO-SPDX-ID"
],
"notes": [
"No SPDX IDs for 18 \"BSD-equivalent\" variants listed here:",
"BSD Facebook",
"BSD Google Patents File",
"BSD Antlr",
"BSD Bootstrap",
"BSD Bzip2",
"BSD DOM4J",
"BSD Eclipse Distribution License (EDL)",
"BSD HSQLDB",
"BSD Infozip",
"BSD Jaxen",
"BSD JSch",
"BSD NetSNMP",
"BSD OpenLayers",
"BSD Openssl",
"BSD Rene Nyffenegger license",
"BSD Sqlite3-ruby",
"BSD XStream",
"BSD YUI"
]
},
Update: Should now look to use the latest 3.21 templates