1. Forum
  2. Usenet
  3. LINUX.DEBIAN.DEVEL.MENTOR

  • Re: parse SPDX-License-Identifier to produce copyright file

    From Dominik George@21:1/5 to All on Mon Aug 22 21:30:02 2022
    Hi,


    Does there exist a tool for Debian that will parse a package directory (its source files), extract the "SPDX-License-Identifier:" and produce something that would fit into a machine-readable debian/copyright file?

    AFAIK, the reuse tool (which also generates these annoying headers) can do that. At least, it has some sort of DEP-5 mode.

    -nik

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Fab Stz@21:1/5 to All on Mon Aug 22 21:20:01 2022
    Hi all,

    Does there exist a tool for Debian that will parse a package directory (its source files), extract the "SPDX-License-Identifier:" and produce something that would fit into a machine-readable debian/copyright file?

    Thanks
    Fab

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Paul Wise@21:1/5 to Fab Stz on Wed Aug 24 02:30:01 2022
    On Mon, 2022-08-22 at 21:00 +0200, Fab Stz wrote:

    Does there exist a tool for Debian that will parse a package directory (its source files), extract the "SPDX-License-Identifier:" and produce something that would fit into a machine-readable debian/copyright file?

    For the more general question of generating debian/copyright, there is
    this wiki page listing different options. The best one is allegedly
    scancode but that isn't available in Debian yet.

    https://wiki.debian.org/CopyrightReviewTools

    --
    bye,
    pabs

    https://wiki.debian.org/PaulWise

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEYQsotVz8/kXqG1Y7MRa6Xp/6aaMFAmMFcBsACgkQMRa6Xp/6 aaMPuw/7BHqsXhqNZkEQIM14yRqUBQd7OBdno+to6t5wiysSsx42TXEY9+y2U6rJ XwqmSAkE0zMx1bEcVNGYmPHpZqfVQ0WScKvJkkboFHmdskEX3zdoIGazLCFtxb0x /lZIGZZnHtx0LykWB3hCZY0DApMqOeWqlkAtpWoYqKNa8qpxkb0WhdAg5VcmV23H A24eqgS4kZSMp0mqvuF2Avuda6jhoT2hinHekZ4ikQbgdmE+K8PTJC1Ljc7vzRCT yYHfCpuxEVlywnDKiJeDBcktRUNdHqx4mVl4baTU0xGBDtcA2qZ1KWWdoKLakU+z Ek4uk5pZD8ZCnrepvd5R+Aw34FlzAd12nCm9sZhOnsmzwcTgiViW2cbTigVsr3TD hdh0XYatsswqh1PsvHpgcgU0wc+WHbj76Av1PKNRmVYHoJFCm9yUWorBih/cslDF Z14/6d832N8wpjOC0rA7mcVMFuGT6I3GJHXYiVBrXQsI5JRTs0hcRuqn1VFFOZyt YW3JCwLWOSt0gpEVxUy40VbdIoFEtUSURy9IHXRoaXObgyIuUxBJrIpVtBHsPUR+ W/cs2j8KutN1xPlV+Nm+nPWglevWljYD/5pHQh4u6nCeRMJueQVnmKJkRv6e6tb3 PyImLzKJLt0quUI18/mOXOCWbYxo30GprfDG+V3QO1gERivJS4A=
    =gnEp
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ryan Pavlik@21:1/5 to [email protected] on Wed Aug 24 21:00:01 2022
    Better yet, if you use the REUSE tool to extract an SPDX file, this
    utility I wrote can coalesce it into a more human-usable DEP5-format debian/copyright file:

    https://github.com/rpavlik/spdx-to-dep5

    It's not suitable for use directly in a package, but it's a good
    starting point and can be filled out further.

    Allegedly SPDX support is in progress for the normal Debian license
    scanning toolchain (used by cme among other tools) but I'm not sure of
    the status nor do I have a bug number immediately available.

    Ryan

    On Mon, Aug 22, 2022 at 2:26 PM Dominik George <[email protected]> wrote:

    Hi,


    Does there exist a tool for Debian that will parse a package directory (its source files), extract the "SPDX-License-Identifier:" and produce something that would fit into a machine-readable debian/copyright file?

    AFAIK, the reuse tool (which also generates these annoying headers) can do that. At least, it has some sort of DEP-5 mode.

    -nik


    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)