C2SP / CCTV

Community Cryptography Test Vectors
https://c2sp.org/CCTV
64 stars 6 forks source link

Clarify license conditions #14

Open jas4711 opened 3 weeks ago

jas4711 commented 3 weeks ago

Hi! I'm considering packaging this project for Debian, since it appears to be required for the age self-tests in v1.2.0. The alternative is to patch age to avoid using this package, but that doesn't sound ideal. However the license terms are not clear.

Could you clarify what license this project generally uses, and review each file if it is actually is consistent with that license? Or add per-file license statements. Or at least add some guidance on how license matters are dealt with in this project.

There are some license statements today, but they are a bit confusing. For example, there is a BSD-3-Clause statement in age/internal/LICENSE but the file age/internal/bech32/bech32.go has a Expat license.

Thanks, Simon

FiloSottile commented 3 weeks ago

Hello! First of all, thank you for packaging age.

CCTV in general doesn't have a global license, and shouldn't be packaged as a whole, so for example you will want to package c2sp-org-cctv-age.

The licenses of the age directory are admittedly a bit complicated.

Note that age/internal is a generator, you can patch it out and age tests will work fine, at which point the entire package will be 0BSD OR CC0 OR Unlicense.