[Freedesktop-sdk] license-checking script for BuildStream projects

[Valentin David]

On Fri, Aug 14, 2020 at 09:27, Douglas Winship 
<douglas.winship at codethink.co.uk> wrote:
> A) Would this script be useful for freedesktop-sdk?

Yes. One likely thing we want to check is libraries linking to other 
libraries with more restrictive licenses.

> B) Would this script be useful in CI?

To publish manifests, yes.

> C) What sort of format would be good for the machine-readable 
> summary? json? YAML?

json is so much easier and faster to parse. So for machine-readable, 
json.

> D) What sort of format would be good for the human-readable summary? 
> markdown? html?

markdown would be nice. But if it has limitation for formatting, you 
can go for html.

> E) What would be a more useful output for freedesktop-sdk: just the 
> summaries?
> or should we also include the raw licensecheck output?

To be published? The summaries, I suppose. But I suppose we want to be 
able to get the output in a way.


We probably need to have a way to annotate the licensecheck data in the 
elements. For example build scripts that are intermediate stage within 
a project are not important for the result. Other cases are we do not 
build some of the code (for example FFmpeg). We still want to tell the 
license of the source code. But we should also say what applies to the 
element's artifact. Optionally, specify it for each split domain. There 
is also documentation which usually has difference licensing.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/freedesktop-sdk/attachments/20200814/845977aa/attachment.htm>