agherzan / meta-raspberrypi

Yocto/OE BSP layer for the Raspberry Pi boards
https://www.yoctoproject.org/
MIT License
539 stars 415 forks source link

Follow-up REUSE specifications #1091

Open lnceballosz opened 2 years ago

lnceballosz commented 2 years ago

Hi

I'm Lina Ceballos from the Free Software Foundation Europe, and the REUSE Booster program. As promised, here it's a cleaner and more updated merge request which suggests the REUSE specifications that make licensing and copyright information unambiguous and perfectly human- and machine-readable ^0. This MR is a follow-up from the one I closed some weeks ago.

Some important notes in this regard:

There are still some files that I didn't touch: The imagine files img/LF_17_02_Yocto-Badge-Update_Compatible_Final_Blank.png andimg/balena.png, since I don't know who the copyright holder is and under what license they are. Please feel free to add this information by creating a .license file for those two image files.

For the files: recipes-bsp/bootfiles/rpi-bootfiles.bb recipes-graphics/vc-graphics/vc-graphics.inc

Keeping in mind that they have a special license situation, my suggestions here remain as follows:

You can keep the license MIT for those files since they are licensed under MIT although the components they build are under the custom license: Broadcom-RPi license.

In this regard, I noticed that the text of the custom license makes it a proprietary license. This apart, to be more precise:

"This software may only be used for the purposes of developing for, running, or using a Raspberry Pi device."

The custom license still has to be part of the LICENSE directory, you can add it following these steps, but in this case, I would suggest you make sure to clarify in the READMEfile the context where this license is used and applied and that it refers to the binary component involved in booting Raspberry Pi devices. Something like "The custom proprietary license in the LICENSES directory is part of the build system functionality and refers to closed source components involved in running or using a Raspberry Pi device"

The copyright tag in the text file of this custom license itself refers only to the license text, so no other action is required.

Please bear in mind that this is meant to be a practical example of how the REUSE specifications would look like, feel free to implement them or some, but also feel free to proceed to do so on your own.

I would like to note that while reaching REUSE compliance is a larger one-time chunk, maintaining this status is fairly simple: inclusion in CI pipelines, pre-commit hooks, badges, you-name-it, everything possible ^1.

Please also note that REUSE is an established practice with a lot of organisations using it, among them the KDE community, curl, GNUHealth (in progress), Linux kernel, companies such as Siemens, SAP, and LGE, as well as numerous smaller and larger projects. We would be happy to have you on board as well!

If there is something we can help with, feel free to reach out, we are more than happy to help!

lnceballosz commented 2 years ago

Hi @agherzan! Uff what a journey, I have to say :) I'm not a git expert that's why I took a while to work on the changes you have requested. I think they are all addressed and solved. (Hope so)

All the best, Lina

agherzan commented 1 year ago

This needs more work because the changes include git conflict marker that would break the layers.