search

dapphub / dpack

simple lockfile for your dapp's addresses and artifacts
46 stars 9 forks source link

feat: license the repo #46

Closed sambacha closed 2 years ago

sambacha commented 2 years ago

Motivation:

Currently there is no license for dpack in the repository. Contributing to the repository and using the application carry an unknown legal risk. Therefore it is desirable to explicitly license the repository under some well-established software license.

Personally I am in favor of Apache-2.0 for something like this. BSD3/ISC are also good. If you prefer GPL, GPL-2.0-Only with the notification exception is friendly as well. I am a fan however of MPL-2.0 more so than GPL-3.0 fwiw.

BSD4 includes a clause to prevent the name of the author and contributors being used in promotion.

The question really is what terms do you want to focus on?

SPDX

The SPDX License List itself is a list of commonly found licenses and exceptions used in free and open or collaborative software, data, hardware, or documentation. The SPDX License List includes a standardized short identifier, the full name, the license text, and a canonical permanent URL for each license and exception.

The purpose of the SPDX License List is to enable efficient and reliable identification of such licenses and exceptions in an SPDX document, in source files or elsewhere.

see https://spdx.org/licenses/

SPDX Format (example)

LICENSE.spdx

SPDXVersion: SPDX-2.0
Creator: dapphub
PackageName: dpack
PackageOriginator: dpack contributors
PackageHomePage: https://github.com/$GITHUB_ORG/$REPO
PackageLicenseDeclared: MPL-2.0
sambacha commented 2 years ago

Just to clarify, I am referring to the contents of the dpack, ie have license populated to the top as part of a proper Bill of Materials function