OpenSourceOrg / licenses

machine readable OSI license information

Home Page:https://opensource.org/licenses/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Is this still not authoritative?

abenkovskii opened this issue · comments

Hi. Your README says that this is not an authoritative source of information. I think you might have forgot to update the status after this got published. Note that the page contains two links to this repository in the last and second to last paragraphs.

It's still not authoritative, correct;

I need to spend more time weeding out any last issues and moving the OSI site to use this

@paultag let us know if there is anything we can do to help.

@paultag Can you give me a quick status check here? It appears this and the OSI site never synced up. We have multiple interests (ClearlyDefined, web updates, etc.) in standardizing the license text and I do not want to break/abandon/neglect this work. Any updates appreciated. Thanks - Patrick

API is missing at least

  • 0BSD
  • CECILL-2.1
  • EPL-2.0
  • EUPL-1.2
  • UPL-1.0

Any update on the status of the API would be appreciated.
I have found issues with the https://github.com/spdx/license-list-data OSI approved tag which could be easily fixed by having the API updated.
For a project I needed to find OSI approved licenses from the https://github.com/github/choosealicense.com and had to scrape the OSI website and perform some manual fixes given the lack of the API.

Hi @Nosferican, no one is currently allocated to work on this, so unfortunately I don't have any updates for you.

Can you let us know what issues you found with the SPDX license list?

I could contribute to the project whenever I find time if there is public access to the data or specific tasks in the roadmap.
I have transitioned to using SPDX data files which are perfect for my task now. I believe there were some issues when I tried using it for that project last year. The one thing I recall that was somewhat weird was that the count of OSI approved licenses on the SPDX data files was considerably larger than the count at the OSI website. It could potentially be various versions of the licenses or issues on the OSI data side.
For example, EUPL-1.1 is not listed in the OSI website but it is tagged as OSI approved on the SPDX data files.

I can confirm it is now OSI's intent to make this resource authoritative and to maintain it.

Question is better directed at smaffulli (I can't figure out how to reassign). The plan is for an authoritative resource, I just can't speak to whether this will be it.