Enhance Request for Java's JCP-based license

[reversi-fun]

Description

Since Java 10, the java library is changing from .jar format to .mod format, the license is also changing. Popular licenses for the java library are:

• CDDL-1.1 + GPL-2.0 with ClassPath Exception , spdx/Apache-2.0 , spdx/CPL-1.0, spdx/OSL-2.1,spdx/SISSL-1.2,spdx/SPL-1.0, spdx/SPL(Sun Public License), SCSL(Sun Community Source License=scancode-toolkit/src/licensedcode/data/licenses/scsl-3.0.LICENSE)

Projects that collect a large number of license names for each artifact ID, such as Black Duck, are at an increased risk of incorrectly displaying Java library license names, such as the latest version of the license that replaces Apache-2.0.

The license to be revised in the Java JCP process is Based on several types of templates, various variations are made. In my analysis, I think that there are probably six types of templates. However, the appropriate number of classifications depends on the expressive power of scanCode-ToolKit's RULE-engine.

• Java-BCL(Oracle Binary Code License Agreement)
• Java-RL(Java Research License)
• Java-DL(Java Distribution License)
• Java-Spec-Eval(JSR Spec Evaluation License
• Java-Spec-RI(JSR Specification Reference Implementation License Agreement) (JSR 349 Bbean Validation 1.1 Final Release Spec Evaluation License)
• Java-Spec-doc(java documentated Specification License) (JavaSE10 spec license-4417634,JavaSE8 spec license-2158700,JavaSE9 spec license-3903847,JavaSE10 spec license-4417634,license template for implementing final JSRs)

It is my essential request to transform the habit of using the name of the work as the license name to the template name of the license text. As a means of doing this, rather than adding a lot of .RULE files, I would like to improve the matching ability of the RULE engine to suppress the explosion of .Rule files.

System configuration

The above original text can be downloaded from the link below.

• Spec Leads License Reference https://jcp.org/en/resources/license_reference

  • JSRs: Java Specification Requests List of all JSRs https://jcp.org/en/jsr/all

    • Java(TM) Telephony API (JTAPI) Specification 1.4 Final Release 2 https://download.oracle.com/otndocs/jcp/7035-jtapi-1.4-fr2-spec-oth-JSpec/

    https://download.oracle.com/otndocs/jcp/7035-jtapi-1.4-fr2-spec-oth-JSpec/7035-jtapi-1.4-fr2-spec-oth-JSpec-license.html

  • Java Distribution License

    • JSR-925 JavaBeans(TM) Activation Framework Specification ("Specification") Version: 1.2 LIMITED LICENSE GRANTS 　 https://download.oracle.com/otn-pub/jcp/jaf-1_2-mrel2-eval-spec/JAF-1.2.pdf?AuthParam=1554636818_3dad69b54b9a49cf1fe9f593094d1980

[pombredanne]

@reversi-fun excellent! I am on hand to help in anyway shape or form I can. Note also that we have a chat at https://gitter.im/aboutcode-org/discuss

[reversi-fun]

My directed graph will be useful for classifying JCP-based licenses.

If you open the following file in a browser and search for "/ JSR", you may be able to estimate the distance of the goal.

https://github.com/reversi-fun/license_doc_similality1/blob/master/data/lic_graph.sfdp.svg

[reversi-fun]

Sorry, If my broken English breaks SPDX-members mood, I want you to compensate. https://github.com/spdx/license-list-XML/issues/847

[reversi-fun]

I could not get approval. https://github.com/spdx/license-list-XML/issues/847

[pombredanne]

@reversi-fun not a problem. I can still accept these licenses here alright even if they are not approved at SPDX.

[pombredanne]

@reversi-fun so which license should I add to ScanCode?

[reversi-fun]

@pombredanne,Thanks for the response. My enhancement request is to add:

• Java-Spec-doc(java documentated Specification License) (Regarding the "specification license" of Google and Oracle dispute)
• Java-Spec-RI(JSR Specification Reference Implementation License Agreement)
• Java-BCL(Oracle Binary Code License Agreement)
• Java-RL(Java Research License)
• Java-DL(Java Distribution License)
• Java-Spec-Eval(JSR Spec Evaluation License)

In addition, the rules engine needs to be improved in its ability to classify similarity.

[in-fke]

So if these SPDX Identifiers are not introduced, what do you guys take as a "proxy" replacement? CDDL-1.1?