Make hse-project repositories REUSE compliant

tristan957 commented 1 year ago

What is REUSE?

Copyright and licensing is difficult, especially when reusing software from different projects that are released under various different licenses. REUSE was started by the Free Software Foundation Europe (FSFE) to provide a set of recommendations to make licensing your Free Software projects easier. Not only do these recommendations make it easier for you to declare the licenses under which your works are released, but they also make it easier for a computer to understand how your project is licensed.

REUSE FAQ:

https://reuse.software/faq/

Who is using REUSE?

SAP
curl
Eclipse Foundation
Siemens
FSF Europe

See https://github.com/curl/curl for how the repository is laid out while being REUSE-compliant.

Main Benefits (imo)

Reduces the overhead of the checkoss script
Ability to generate a bill of materials for a user (important in certain contexts)
Standard way of specifying multiple licenses (Apache-2.0 and LGPLv3 (potentially needed for mariadb/mysql support))

Becoming REUSE Compliant

https://reuse.software/tutorial/

Time Estimate

1-2 days.

What is this not?

This proposal is not a relicensing of any software or materials belonging to hse-project. This proposal will also not touch hse-mongo, hse-ycsb, or any other future forks of software.

tristan957 commented 1 year ago

Alex asked me for an example bill of materials. My website is Reuse compliant, so I ran reuse spdx on it.

SPDXVersion: SPDX-2.1
DataLicense: CC0-1.0
SPDXID: SPDXRef-DOCUMENT
DocumentName: tristan.partin.io
DocumentNamespace: http://spdx.org/spdxdocs/spdx-v2.1-a1db0b29-36b5-4eed-ac87-b674f5581b9c
Creator: Person: Anonymous ()
Creator: Organization: Anonymous ()
Creator: Tool: reuse-1.0.0
Created: 2023-01-19T16:03:09Z
CreatorComment: <text>This document was created automatically using available reuse information consistent with REUSE.</text>
Relationship: SPDXRef-DOCUMENT describes SPDXRef-fe32b292422973c391234c88f905b187
Relationship: SPDXRef-DOCUMENT describes SPDXRef-cae7677bc547cff374a4b1a813aed50b
Relationship: SPDXRef-DOCUMENT describes SPDXRef-66e40a0a40dc08c22a6e3eba3c128fcb
Relationship: SPDXRef-DOCUMENT describes SPDXRef-1948b76b9467768c259a34838a25cd2e
Relationship: SPDXRef-DOCUMENT describes SPDXRef-640371f2f0a69f2965cb57cdfa390600
Relationship: SPDXRef-DOCUMENT describes SPDXRef-0c7ed1ca4da02563c484ead2fc050135
Relationship: SPDXRef-DOCUMENT describes SPDXRef-68cd4d0862feef653ee639c7010ef283
Relationship: SPDXRef-DOCUMENT describes SPDXRef-9ae85449aede196d4d7819c61ac0cc51
Relationship: SPDXRef-DOCUMENT describes SPDXRef-8acd5a134d68fc800b5bace1bcb1a16a
Relationship: SPDXRef-DOCUMENT describes SPDXRef-d7ab35922c42a10cfe62cc67b3b13ea5
Relationship: SPDXRef-DOCUMENT describes SPDXRef-5fb381e8d0e323f24ca185e9ee9f3032
Relationship: SPDXRef-DOCUMENT describes SPDXRef-8bc29b97a478452940f33c84f6d3d64e
Relationship: SPDXRef-DOCUMENT describes SPDXRef-cb32fcd94fb70eabb457bca45f7f8fb1
Relationship: SPDXRef-DOCUMENT describes SPDXRef-c66157232f9c48d622172cf5724f6d0a
Relationship: SPDXRef-DOCUMENT describes SPDXRef-ad985356a4e685ba668ab52e1e6b9423
Relationship: SPDXRef-DOCUMENT describes SPDXRef-f97787212f16fe06cef2d1684b1cb54d
Relationship: SPDXRef-DOCUMENT describes SPDXRef-e8d9c9a6d6d7053f957ef10d575f2259
Relationship: SPDXRef-DOCUMENT describes SPDXRef-7a1604fdc1d2ea6c8e339afa9aca536b
Relationship: SPDXRef-DOCUMENT describes SPDXRef-4c631ed62aa4cc87a9bcd254d58bf6e8
Relationship: SPDXRef-DOCUMENT describes SPDXRef-9ae9008c0f9304533e21976441b8dc1a
Relationship: SPDXRef-DOCUMENT describes SPDXRef-3a6ca0f42c7fb11fe1d763d405b92803
Relationship: SPDXRef-DOCUMENT describes SPDXRef-bc0c0ceb3a60552cc2e421640c06c119
Relationship: SPDXRef-DOCUMENT describes SPDXRef-0262dbf3933065b72a298d8479d613b8
Relationship: SPDXRef-DOCUMENT describes SPDXRef-42b18b7f3135118c0f0be239e73039a3
Relationship: SPDXRef-DOCUMENT describes SPDXRef-7aad410bcb93e69fcfa39f40f7de55ec
Relationship: SPDXRef-DOCUMENT describes SPDXRef-62c5810b64967a7f3e93f8154fd65e9e
Relationship: SPDXRef-DOCUMENT describes SPDXRef-3c3b5ac5716c1652d78d11327ddbe94c
Relationship: SPDXRef-DOCUMENT describes SPDXRef-333c9f7571d98c9262f1b12e66754856
Relationship: SPDXRef-DOCUMENT describes SPDXRef-5ba4bfeb91dcc4a69beab250f22c6f5d
Relationship: SPDXRef-DOCUMENT describes SPDXRef-104e0862f89598402a2e67350228263f
Relationship: SPDXRef-DOCUMENT describes SPDXRef-159e37223ceb69a500e22a1382f0a3cd
Relationship: SPDXRef-DOCUMENT describes SPDXRef-5a87d79cfe68f4cd30b6285783f8787f
Relationship: SPDXRef-DOCUMENT describes SPDXRef-ffaaf1e83ada2f25b711f20080022d7c
Relationship: SPDXRef-DOCUMENT describes SPDXRef-02ee75c7c2a58480178705f01252e908
Relationship: SPDXRef-DOCUMENT describes SPDXRef-6c0af744b5a345179b00edba51674a46
Relationship: SPDXRef-DOCUMENT describes SPDXRef-c12b94a483f5cf86e28deaf866f4f8b8
Relationship: SPDXRef-DOCUMENT describes SPDXRef-e43c512060e8351a3081b1b91a53449f
Relationship: SPDXRef-DOCUMENT describes SPDXRef-e698bd57a8c360a205be3da72a9112ab
Relationship: SPDXRef-DOCUMENT describes SPDXRef-325797e065425cabde16b5506621953e
Relationship: SPDXRef-DOCUMENT describes SPDXRef-2b0a00ff76eb0bb4599627e71ba62e3a
Relationship: SPDXRef-DOCUMENT describes SPDXRef-97e56e7a597ab8ca83ee20014262ba2f
Relationship: SPDXRef-DOCUMENT describes SPDXRef-f880e0965c2c6c6121f54625d0b1a4de
Relationship: SPDXRef-DOCUMENT describes SPDXRef-b4824a9ff75a8d755a35377ea0294431
Relationship: SPDXRef-DOCUMENT describes SPDXRef-a95ae0f95a9d938f3f7a7f84959c947a
Relationship: SPDXRef-DOCUMENT describes SPDXRef-76729a7712c0ec32495e37f47fab1131
Relationship: SPDXRef-DOCUMENT describes SPDXRef-45b9b25e7a0f17a414b39d0364261f52
Relationship: SPDXRef-DOCUMENT describes SPDXRef-01631a21919d42c5daa2401f08074747
Relationship: SPDXRef-DOCUMENT describes SPDXRef-26ad1ec7c324ff8e22527d18c57d96ed
Relationship: SPDXRef-DOCUMENT describes SPDXRef-4cc9fb31536590c2c3d0d0d8e4ded3de
Relationship: SPDXRef-DOCUMENT describes SPDXRef-0643c313892dbd2a5f08ee0505acd0c2
Relationship: SPDXRef-DOCUMENT describes SPDXRef-61174782ddb63382ff406fde2c3bd692
Relationship: SPDXRef-DOCUMENT describes SPDXRef-16ce26bccc70f398ffe30eb919370977
Relationship: SPDXRef-DOCUMENT describes SPDXRef-5e92062167a848f4b609499895afee9f
Relationship: SPDXRef-DOCUMENT describes SPDXRef-6da089a85bc456f25254adec8fbba7b3
Relationship: SPDXRef-DOCUMENT describes SPDXRef-cc014741021995292e03d9baac8eeff4
Relationship: SPDXRef-DOCUMENT describes SPDXRef-2b35f6ca6dc776efb4c4b37630a98983
Relationship: SPDXRef-DOCUMENT describes SPDXRef-ceea50f029c1857df992113d75158069
Relationship: SPDXRef-DOCUMENT describes SPDXRef-ab6ad9ff26476ee773f1040308fdb4fe
Relationship: SPDXRef-DOCUMENT describes SPDXRef-38a4b167a50588b190a975425144013f
Relationship: SPDXRef-DOCUMENT describes SPDXRef-be041e98fadccb485f464af52d672fdc
Relationship: SPDXRef-DOCUMENT describes SPDXRef-42f4436d6708be2b9eb9ea0cdf8d5787
Relationship: SPDXRef-DOCUMENT describes SPDXRef-d069e6c5cae0c463b14ae1b2ff688385
Relationship: SPDXRef-DOCUMENT describes SPDXRef-e3b0a6f1f27ba2c009ba2f567b992697
Relationship: SPDXRef-DOCUMENT describes SPDXRef-78fe81902fe4bac159052889f83d3954
Relationship: SPDXRef-DOCUMENT describes SPDXRef-384b26a8e2ffd28689afebd201eee0e5
Relationship: SPDXRef-DOCUMENT describes SPDXRef-c7993f04e0753a38ba5f908dfee7dcf1
Relationship: SPDXRef-DOCUMENT describes SPDXRef-7728c641bf0cc4132b37bbf45d1d649a
Relationship: SPDXRef-DOCUMENT describes SPDXRef-2383729928e7dc37d947b438f11e13de
Relationship: SPDXRef-DOCUMENT describes SPDXRef-31b57d378b6ba82ad32d02916b557164
Relationship: SPDXRef-DOCUMENT describes SPDXRef-8983636b76637997fd3820a0f6545b3c
Relationship: SPDXRef-DOCUMENT describes SPDXRef-82b0e1afb813dd4e7b0a9d95691440e8
Relationship: SPDXRef-DOCUMENT describes SPDXRef-b469448adc2eb54ee029fb0383c37c4c
Relationship: SPDXRef-DOCUMENT describes SPDXRef-5e261499f3688df3f0d141ad72d51f97
Relationship: SPDXRef-DOCUMENT describes SPDXRef-c8af5b3f2a88ee838daf49ff30749c7c
Relationship: SPDXRef-DOCUMENT describes SPDXRef-8ec4dabec49ec33b8fa0c08cde34758a
Relationship: SPDXRef-DOCUMENT describes SPDXRef-cdbb6155ad0f286679b2df378da8f8c4
Relationship: SPDXRef-DOCUMENT describes SPDXRef-7721f8a67ed6324fab1a470085fc7bb0
Relationship: SPDXRef-DOCUMENT describes SPDXRef-da8f1c8a9b5d4aba4e47e644ca7c9a51
Relationship: SPDXRef-DOCUMENT describes SPDXRef-389988a400f2a3ed263989fdd5ddb9ac
Relationship: SPDXRef-DOCUMENT describes SPDXRef-7d65a5568df57ff6b80de035b29b508d
Relationship: SPDXRef-DOCUMENT describes SPDXRef-de7fee2509a13520643fcd5eb0550d11

FileName: ./.build.yml
SPDXID: SPDXRef-fe32b292422973c391234c88f905b187
FileChecksum: SHA1: 997f096a227b85df6ae68307e63fd702b35c30d6
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>SPDX-FileCopyrightText: Tristan Partin <tristan@partin.io></text>

FileName: ./.codespellignore
SPDXID: SPDXRef-cae7677bc547cff374a4b1a813aed50b
FileChecksum: SHA1: 35a948aa351a6d8343690647e5a397e3b8b81760
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>SPDX-FileCopyrightText: Tristan Partin <tristan@partin.io></text>

FileName: ./.codespellrc
SPDXID: SPDXRef-66e40a0a40dc08c22a6e3eba3c128fcb
FileChecksum: SHA1: 96fcaf6b17c31d681d68e36a4798d7238177084a
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>SPDX-FileCopyrightText: Tristan Partin <tristan@partin.io></text>

FileName: ./.gitattributes
SPDXID: SPDXRef-1948b76b9467768c259a34838a25cd2e
FileChecksum: SHA1: 1f5a12b769304608e83c2196f2833783d316213c
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>SPDX-FileCopyrightText: Tristan Partin <tristan@partin.io></text>

FileName: ./.gitignore
SPDXID: SPDXRef-640371f2f0a69f2965cb57cdfa390600
FileChecksum: SHA1: bf9d9a803563de84a20fdf0ff0a5d1328265fa34
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>SPDX-FileCopyrightText: Tristan Partin <tristan@partin.io></text>

FileName: ./.gitmodules
SPDXID: SPDXRef-0c7ed1ca4da02563c484ead2fc050135
FileChecksum: SHA1: 0555c9ff6623c1158d585733ed439fd6c723d357
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>SPDX-FileCopyrightText: Tristan Partin <tristan@partin.io></text>

FileName: ./.prettierignore
SPDXID: SPDXRef-68cd4d0862feef653ee639c7010ef283
FileChecksum: SHA1: 23bdd5d0d39c55d9d7612b8500e5d462a71244ab
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>SPDX-FileCopyrightText: Tristan Partin <tristan@partin.io></text>

FileName: ./.prettierrc.yml
SPDXID: SPDXRef-9ae85449aede196d4d7819c61ac0cc51
FileChecksum: SHA1: 34229fc90a736b087d9fbc1359a17bc01f8d4b9f
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>SPDX-FileCopyrightText: Tristan Partin <tristan@partin.io></text>

FileName: ./.vscode/settings.json
SPDXID: SPDXRef-8acd5a134d68fc800b5bace1bcb1a16a
FileChecksum: SHA1: a2813d1f04fb2462d3e01c4982503c3577e0cf7e
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./BACKLOG.md
SPDXID: SPDXRef-d7ab35922c42a10cfe62cc67b3b13ea5
FileChecksum: SHA1: b35a28cea9bb63ff4673742c9814a04acc51cb49
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>SPDX-FileCopyrightText: Tristan Partin <tristan@partin.io></text>

FileName: ./README.md
SPDXID: SPDXRef-5fb381e8d0e323f24ca185e9ee9f3032
FileChecksum: SHA1: 8775c99c1075db5ad1a98aa945d8583f9b0dda2b
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>SPDX-FileCopyrightText: Tristan Partin <tristan@partin.io></text>

FileName: ./archetypes/default.md
SPDXID: SPDXRef-8bc29b97a478452940f33c84f6d3d64e
FileChecksum: SHA1: ae04529bfd5b1ee62f713755bcb200455df0a400
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./assets/css/style.css
SPDXID: SPDXRef-cb32fcd94fb70eabb457bca45f7f8fb1
FileChecksum: SHA1: d58d629567c83b71f6acf59c053fe0a86f1c8cd0
LicenseConcluded: NOASSERTION
LicenseInfoInFile: AGPL-3.0-or-later
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./assets/css/syntax-dark.css
SPDXID: SPDXRef-c66157232f9c48d622172cf5724f6d0a
FileChecksum: SHA1: e3191c7aacc61f9d34a681f57e32033c1ae55b23
LicenseConcluded: NOASSERTION
LicenseInfoInFile: AGPL-3.0-or-later
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./assets/css/syntax-light.css
SPDXID: SPDXRef-ad985356a4e685ba668ab52e1e6b9423
FileChecksum: SHA1: a68c861dde08e0ba9a0dafa6277c24fae7a78792
LicenseConcluded: NOASSERTION
LicenseInfoInFile: AGPL-3.0-or-later
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./assets/images/astronaut-on-the-moon-with-a-beer-looking-at-earth.jpg
SPDXID: SPDXRef-f97787212f16fe06cef2d1684b1cb54d
FileChecksum: SHA1: 9e7b3de2f7e4c31a8a10bb7c05781268273c1f4f
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./assets/images/profile.webp
SPDXID: SPDXRef-e8d9c9a6d6d7053f957ef10d575f2259
FileChecksum: SHA1: 8dcbd40c57d98dbac05cfb3d81df4f41f6fc637a
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./config/development/server.toml
SPDXID: SPDXRef-7a1604fdc1d2ea6c8e339afa9aca536b
FileChecksum: SHA1: cb5392e6c8037778102fc4fe2356b85c3c538fac
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>SPDX-FileCopyrightText: Tristan Partin <tristan@partin.io></text>

FileName: ./content/archives/_index.md
SPDXID: SPDXRef-4c631ed62aa4cc87a9bcd254d58bf6e8
FileChecksum: SHA1: 7d3383ff89dc2ce9e9bee7ed493af517b4579a3c
LicenseConcluded: NOASSERTION
LicenseInfoInFile: CC-BY-SA-4.0
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./content/archives/blog.md
SPDXID: SPDXRef-9ae9008c0f9304533e21976441b8dc1a
FileChecksum: SHA1: a44e3cd353a60bc6a8f3a7feb6d2dac49c4499c3
LicenseConcluded: NOASSERTION
LicenseInfoInFile: CC-BY-SA-4.0
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./content/blog/_index.md
SPDXID: SPDXRef-3a6ca0f42c7fb11fe1d763d405b92803
FileChecksum: SHA1: 819c356af3671e50a62ebc4d8c905eeb5ff900cd
LicenseConcluded: NOASSERTION
LicenseInfoInFile: CC-BY-SA-4.0
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./content/blog/analysis-of-the-daniel-craig-james-bond/index.md
SPDXID: SPDXRef-bc0c0ceb3a60552cc2e421640c06c119
FileChecksum: SHA1: b4f99a9270e9398d9ee10792adeb8447a2bc0527
LicenseConcluded: NOASSERTION
LicenseInfoInFile: CC-BY-SA-4.0
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./content/blog/electron-linux-and-your-file-chooser/index.md
SPDXID: SPDXRef-0262dbf3933065b72a298d8479d613b8
FileChecksum: SHA1: 2228bbbd9519d3e275612f6f97e4180f186e8b9a
LicenseConcluded: NOASSERTION
LicenseInfoInFile: CC-BY-SA-4.0
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./content/blog/green-versus-blue/index.md
SPDXID: SPDXRef-42b18b7f3135118c0f0be239e73039a3
FileChecksum: SHA1: 4decbabe153bdc240d91b707e28001cbf210df88
LicenseConcluded: NOASSERTION
LicenseInfoInFile: CC-BY-SA-4.0
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./content/blog/iceland-vacation/index.md
SPDXID: SPDXRef-7aad410bcb93e69fcfa39f40f7de55ec
FileChecksum: SHA1: 1dda8d25120a30aea74503a042da50d41f6d5d71
LicenseConcluded: NOASSERTION
LicenseInfoInFile: CC-BY-SA-4.0
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./content/blog/introduction.md
SPDXID: SPDXRef-62c5810b64967a7f3e93f8154fd65e9e
FileChecksum: SHA1: 27d191c5e7890bdef0618dc73e0d2036f63fe413
LicenseConcluded: NOASSERTION
LicenseInfoInFile: CC-BY-SA-4.0
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./content/blog/motorcycle-crash-post-mortem-2/index.md
SPDXID: SPDXRef-3c3b5ac5716c1652d78d11327ddbe94c
FileChecksum: SHA1: ac913a98e9f6f04d3de207e7501285d1048b7d77
LicenseConcluded: NOASSERTION
LicenseInfoInFile: CC-BY-SA-4.0
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./content/blog/moving-to-fosstodon/index.md
SPDXID: SPDXRef-333c9f7571d98c9262f1b12e66754856
FileChecksum: SHA1: d0920e61fc9f328c4d2b690b3edc9045f30e0ee7
LicenseConcluded: NOASSERTION
LicenseInfoInFile: CC-BY-SA-4.0
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./content/blog/nashvegas/index.md
SPDXID: SPDXRef-5ba4bfeb91dcc4a69beab250f22c6f5d
FileChecksum: SHA1: 66082e3d3c705282d83be66046153d97d06bb898
LicenseConcluded: NOASSERTION
LicenseInfoInFile: CC-BY-SA-4.0
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./content/blog/no-more-analytics/index.md
SPDXID: SPDXRef-104e0862f89598402a2e67350228263f
FileChecksum: SHA1: 3fc2f0c63d8a803515f1bd34307b9db896d46b7f
LicenseConcluded: NOASSERTION
LicenseInfoInFile: CC-BY-SA-4.0
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./content/blog/oak-hill-cemetery/fence-line.jpg
SPDXID: SPDXRef-159e37223ceb69a500e22a1382f0a3cd
FileChecksum: SHA1: e5b2eb5f389c2e1f39764784f1c987f9f32a17ef
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./content/blog/oak-hill-cemetery/index.md
SPDXID: SPDXRef-5a87d79cfe68f4cd30b6285783f8787f
FileChecksum: SHA1: d7d9ae9e5e81ae27ba1433e00d3f89d89f972531
LicenseConcluded: NOASSERTION
LicenseInfoInFile: CC-BY-SA-4.0
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./content/blog/october-2020-update/friends.webp
SPDXID: SPDXRef-ffaaf1e83ada2f25b711f20080022d7c
FileChecksum: SHA1: 0fabde3e5172ef20692953a4cd439bbb4ffd0cbb
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./content/blog/october-2020-update/index.md
SPDXID: SPDXRef-02ee75c7c2a58480178705f01252e908
FileChecksum: SHA1: 8c2d7cfdeedeea5e8d2202163ed0c64a45dd8c6c
LicenseConcluded: NOASSERTION
LicenseInfoInFile: CC-BY-SA-4.0
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./content/blog/october-2020-update/leather-jacket.webp
SPDXID: SPDXRef-6c0af744b5a345179b00edba51674a46
FileChecksum: SHA1: 6677e00cc2a54f05735170229945411ef1205d0d
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./content/blog/personal-site-architecture-v2.md
SPDXID: SPDXRef-c12b94a483f5cf86e28deaf866f4f8b8
FileChecksum: SHA1: 706231e5bbf74693cf8d2f3884d3edc118b1e045
LicenseConcluded: NOASSERTION
LicenseInfoInFile: CC-BY-SA-4.0
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./content/blog/tale-of-two-opolies/index.md
SPDXID: SPDXRef-e43c512060e8351a3081b1b91a53449f
FileChecksum: SHA1: d55c4ba9b92f9f6120a0107563bf578a3f46a601
LicenseConcluded: NOASSERTION
LicenseInfoInFile: CC-BY-SA-4.0
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./content/blog/the-church-of-big-tech/index.md
SPDXID: SPDXRef-e698bd57a8c360a205be3da72a9112ab
FileChecksum: SHA1: ad58171c7fc43f66767a8557516c6651d761ddf9
LicenseConcluded: NOASSERTION
LicenseInfoInFile: CC-BY-SA-4.0
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./content/blog/the-worst-performing-website-i-have-ever-found/index.md
SPDXID: SPDXRef-325797e065425cabde16b5506621953e
FileChecksum: SHA1: e538d5fdda0005843242225efb0a994e55d3b042
LicenseConcluded: NOASSERTION
LicenseInfoInFile: CC-BY-SA-4.0
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./content/blog/what-social-media-has-become/index.md
SPDXID: SPDXRef-2b0a00ff76eb0bb4599627e71ba62e3a
FileChecksum: SHA1: 1ad5efa46cef05b95f380fcda507356e8a24c6a0
LicenseConcluded: NOASSERTION
LicenseInfoInFile: CC-BY-SA-4.0
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./content/blog/writing-an-api-client-in-c-the-api-client.md
SPDXID: SPDXRef-97e56e7a597ab8ca83ee20014262ba2f
FileChecksum: SHA1: 5e9f221a7500010284095d278ab2d927b4d00d9d
LicenseConcluded: NOASSERTION
LicenseInfoInFile: CC-BY-SA-4.0
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./content/uses.md
SPDXID: SPDXRef-f880e0965c2c6c6121f54625d0b1a4de
FileChecksum: SHA1: 666160c0a2ff0bc244f3b41f5ca7e0e9e044cf4d
LicenseConcluded: NOASSERTION
LicenseInfoInFile: CC-BY-SA-4.0
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./hugo.toml
SPDXID: SPDXRef-b4824a9ff75a8d755a35377ea0294431
FileChecksum: SHA1: 01e5e8dadc2e9ebfe65dc9d17f1c15a7b5c0d701
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>SPDX-FileCopyrightText: Tristan Partin <tristan@partin.io></text>

FileName: ./include/webring-in.html
SPDXID: SPDXRef-a95ae0f95a9d938f3f7a7f84959c947a
FileChecksum: SHA1: b3ceab8a7928b7300a77f1f2750afdcc0235b71b
LicenseConcluded: NOASSERTION
LicenseInfoInFile: AGPL-3.0-or-later
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./layouts/404.html
SPDXID: SPDXRef-76729a7712c0ec32495e37f47fab1131
FileChecksum: SHA1: c971af69912e9eca03e7cf13707412890e2f65fd
LicenseConcluded: NOASSERTION
LicenseInfoInFile: AGPL-3.0-or-later
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./layouts/_default/_markup/render-heading.html
SPDXID: SPDXRef-45b9b25e7a0f17a414b39d0364261f52
FileChecksum: SHA1: f251fa22ece1be721c1ac1e5c36dd7731e073aaf
LicenseConcluded: NOASSERTION
LicenseInfoInFile: AGPL-3.0-or-later
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./layouts/_default/_markup/render-image.html
SPDXID: SPDXRef-01631a21919d42c5daa2401f08074747
FileChecksum: SHA1: 361ed9f1eb6e9f20eca36cd316c7f092439aee5a
LicenseConcluded: NOASSERTION
LicenseInfoInFile: AGPL-3.0-or-later
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./layouts/_default/_markup/render-link.html
SPDXID: SPDXRef-26ad1ec7c324ff8e22527d18c57d96ed
FileChecksum: SHA1: 8bba01fc48e43c7a55e114cdd9387636cb25ccf2
LicenseConcluded: NOASSERTION
LicenseInfoInFile: AGPL-3.0-or-later
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./layouts/_default/_markup/render-link.rss.xml
SPDXID: SPDXRef-4cc9fb31536590c2c3d0d0d8e4ded3de
FileChecksum: SHA1: 3ae1855d2d3d8b49cc56b0b69a011f216be3d725
LicenseConcluded: NOASSERTION
LicenseInfoInFile: AGPL-3.0-or-later
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./layouts/_default/baseof.html
SPDXID: SPDXRef-0643c313892dbd2a5f08ee0505acd0c2
FileChecksum: SHA1: e49860ed93f9ae29adf5ad19c31d0848fdf12364
LicenseConcluded: NOASSERTION
LicenseInfoInFile: AGPL-3.0-or-later
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./layouts/_default/list.html
SPDXID: SPDXRef-61174782ddb63382ff406fde2c3bd692
FileChecksum: SHA1: 1553bf563c921d74f45e81ab014bc8b3c51c0e7f
LicenseConcluded: NOASSERTION
LicenseInfoInFile: AGPL-3.0-or-later
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./layouts/_default/single.html
SPDXID: SPDXRef-16ce26bccc70f398ffe30eb919370977
FileChecksum: SHA1: d0a8a4fa862efb95cdedcfd77a51e2d0b2bed43e
LicenseConcluded: NOASSERTION
LicenseInfoInFile: AGPL-3.0-or-later
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./layouts/_default/terms.html
SPDXID: SPDXRef-5e92062167a848f4b609499895afee9f
FileChecksum: SHA1: f0a009ad98bf392ce3ab5e73504e519c0cd36a6e
LicenseConcluded: NOASSERTION
LicenseInfoInFile: AGPL-3.0-or-later
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./layouts/archives/list.html
SPDXID: SPDXRef-6da089a85bc456f25254adec8fbba7b3
FileChecksum: SHA1: f2428e9b182111085ddd1d73b89dae1902a60434
LicenseConcluded: NOASSERTION
LicenseInfoInFile: AGPL-3.0-or-later
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./layouts/archives/single.html
SPDXID: SPDXRef-cc014741021995292e03d9baac8eeff4
FileChecksum: SHA1: 8a560226df55f60a05ffd98a7b711c4bd4841f6c
LicenseConcluded: NOASSERTION
LicenseInfoInFile: AGPL-3.0-or-later
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./layouts/index.html
SPDXID: SPDXRef-2b35f6ca6dc776efb4c4b37630a98983
FileChecksum: SHA1: e664c2ee9fb4bec4670a13b958fb5557c516cec0
LicenseConcluded: NOASSERTION
LicenseInfoInFile: AGPL-3.0-or-later
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./layouts/partials/head.html
SPDXID: SPDXRef-ceea50f029c1857df992113d75158069
FileChecksum: SHA1: 8626a3c6afc917cc8d27c302f67bd90c92b39429
LicenseConcluded: NOASSERTION
LicenseInfoInFile: AGPL-3.0-or-later
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./layouts/partials/nav.html
SPDXID: SPDXRef-ab6ad9ff26476ee773f1040308fdb4fe
FileChecksum: SHA1: 137e7d0089edd6592d4741181e4d94dfcbb09caf
LicenseConcluded: NOASSERTION
LicenseInfoInFile: AGPL-3.0-or-later
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./layouts/partials/page-controls.html
SPDXID: SPDXRef-38a4b167a50588b190a975425144013f
FileChecksum: SHA1: 6878016d364997d2c99aa1104aa960cc772d9016
LicenseConcluded: NOASSERTION
LicenseInfoInFile: AGPL-3.0-or-later
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./layouts/partials/page-title.html
SPDXID: SPDXRef-be041e98fadccb485f464af52d672fdc
FileChecksum: SHA1: 775fbabb4ef6dd7f64654533ecb4fd9d423fd981
LicenseConcluded: NOASSERTION
LicenseInfoInFile: AGPL-3.0-or-later
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./layouts/partials/sidebar.html
SPDXID: SPDXRef-42f4436d6708be2b9eb9ea0cdf8d5787
FileChecksum: SHA1: 97ac8a1d4cc1bafa264fdb02f43c3587293bcb3e
LicenseConcluded: NOASSERTION
LicenseInfoInFile: AGPL-3.0-or-later
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./layouts/partials/summary.html
SPDXID: SPDXRef-d069e6c5cae0c463b14ae1b2ff688385
FileChecksum: SHA1: 5216227b03c3b55f6aab78e753696bb1ccddf792
LicenseConcluded: NOASSERTION
LicenseInfoInFile: AGPL-3.0-or-later
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./layouts/partials/taxonomies.html
SPDXID: SPDXRef-e3b0a6f1f27ba2c009ba2f567b992697
FileChecksum: SHA1: 73b012be1255286d53758bf8a7725a1f6107dd65
LicenseConcluded: NOASSERTION
LicenseInfoInFile: AGPL-3.0-or-later
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./layouts/partials/webring-out.html
SPDXID: SPDXRef-78fe81902fe4bac159052889f83d3954
FileChecksum: SHA1: 6187ebb05080ea29d9a6413e776fc763b1f4d89a
LicenseConcluded: NOASSERTION
LicenseInfoInFile: AGPL-3.0-or-later
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./layouts/robots.txt
SPDXID: SPDXRef-384b26a8e2ffd28689afebd201eee0e5
FileChecksum: SHA1: a2c06142f9efd1c0103f631446314a1ded9e2b2d
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./layouts/shortcodes/time.html
SPDXID: SPDXRef-c7993f04e0753a38ba5f908dfee7dcf1
FileChecksum: SHA1: d6a4d4305133b07d5aa23d35ed3e6c23cea00bdd
LicenseConcluded: NOASSERTION
LicenseInfoInFile: AGPL-3.0-or-later
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./layouts/sitemap.xml
SPDXID: SPDXRef-7728c641bf0cc4132b37bbf45d1d649a
FileChecksum: SHA1: 8aca6b7792802265174b7726e94308dd9afa0c18
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./package.json
SPDXID: SPDXRef-2383729928e7dc37d947b438f11e13de
FileChecksum: SHA1: ccce13c7c1e4b7f9d394a0034b35cd1c54143344
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./scripts/bootstrap.sh
SPDXID: SPDXRef-31b57d378b6ba82ad32d02916b557164
FileChecksum: SHA1: 122a42add94361c1bbb7b35ce0deba358bf753d0
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>SPDX-FileCopyrightText: Tristan Partin <tristan@partin.io></text>

FileName: ./scripts/gen-chromastyles.sh
SPDXID: SPDXRef-8983636b76637997fd3820a0f6545b3c
FileChecksum: SHA1: 6a02b39b5cdbd2225c7070488f64b32c1c3805ad
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>SPDX-FileCopyrightText: Tristan Partin <tristan@partin.io></text>

FileName: ./scripts/hooks/pre-commit
SPDXID: SPDXRef-82b0e1afb813dd4e7b0a9d95691440e8
FileChecksum: SHA1: faeae1062a7a8e6e548b53228810fde1e6c59339
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>SPDX-FileCopyrightText: Tristan Partin <tristan@partin.io></text>

FileName: ./scripts/hooks/pre-push
SPDXID: SPDXRef-b469448adc2eb54ee029fb0383c37c4c
FileChecksum: SHA1: 85d2520933b1a068327e8143a2dffe85d8752755
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>SPDX-FileCopyrightText: Tristan Partin <tristan@partin.io></text>

FileName: ./scripts/hugo/build.sh
SPDXID: SPDXRef-5e261499f3688df3f0d141ad72d51f97
FileChecksum: SHA1: 9323897bba5f5f1cb2cb284d7d477d3059af55cf
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>SPDX-FileCopyrightText: Tristan Partin <tristan@partin.io></text>

FileName: ./scripts/openring/build.sh
SPDXID: SPDXRef-c8af5b3f2a88ee838daf49ff30749c7c
FileChecksum: SHA1: 3aa972213df8cac65d2caf475fda98a3f449d366
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>SPDX-FileCopyrightText: Tristan Partin <tristan@partin.io></text>

FileName: ./scripts/openring/generate.sh
SPDXID: SPDXRef-8ec4dabec49ec33b8fa0c08cde34758a
FileChecksum: SHA1: 3c04adc8eb2821d1ecdbd0b4fcb6cb5fc43002d8
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>SPDX-FileCopyrightText: Tristan Partin <tristan@partin.io></text>

FileName: ./static/documents/Tristan_Partin_Resume.pdf
SPDXID: SPDXRef-cdbb6155ad0f286679b2df378da8f8c4
FileChecksum: SHA1: fd321f1e796ce7363b3108253d778deadcf03b3c
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./static/favicon.ico
SPDXID: SPDXRef-7721f8a67ed6324fab1a470085fc7bb0
FileChecksum: SHA1: 3a63cfff4fb4f4374c63314a01df712439b7f87c
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./static/gpg.txt
SPDXID: SPDXRef-da8f1c8a9b5d4aba4e47e644ca7c9a51
FileChecksum: SHA1: 431f1d0722bee290155da0d1b7a61c69738d6a53
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./vercel.json
SPDXID: SPDXRef-389988a400f2a3ed263989fdd5ddb9ac
FileChecksum: SHA1: 01d40068b329cd2b512c1130f106633900569b14
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./webring.txt
SPDXID: SPDXRef-7d65a5568df57ff6b80de035b29b508d
FileChecksum: SHA1: 892229d5ea99341526685a516ae6cfb2321bc710
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

FileName: ./yarn.lock
SPDXID: SPDXRef-de7fee2509a13520643fcd5eb0550d11
FileChecksum: SHA1: 537cdfc2e15aaa59a90c16e066b37b457eafcbf0
LicenseConcluded: NOASSERTION
LicenseInfoInFile: Unlicense
FileCopyrightText: <text>Tristan Partin <tristan@partin.io></text>

alexttx commented 1 year ago

From what I can tell, to be REUSE compliant we would do the following:

Remove existing copyright comments and replace with SPDX-FileCopyrightText: <year-range> Miron Technology, Inc.. Maybe we can leave the year range out.
For binary files add corresponding files named <binary_file>.license with SPDX tags.
Create top level LICENSES dir. Add copies of license files there.
Update CI to verify compliance.

Am I missing anything?

Questions:

What do we do with subprojects and LICENSE.3rdparty.md? Can we make use of .reuse/dep5?
Can we rely on .reuse/dep5 for binary files instead of using auxiliary <binary_file>.license files?

tristan957 commented 1 year ago

For binary files add corresponding files named .license with SPDX tags.

I would recommend marking this in .reuse/dep5. See this file for examples: https://github.com/tristan957/tristan.partin.io/blob/master/.reuse/dep5. That way you don't litter the repo with .license files all over the place.

Create top level LICENSES dir. Add copies of license files there.

Reuse will scan all your SPDX identifiers, and automatically download those for you.

reuse download --all I believe.

What do we do with subprojects and LICENSE.3rdparty.md? Can we make use of .reuse/dep5?

Remove LICENSE.3rdparty.md and use .reuse/dep5 exclusively.

Can we rely on .reuse/dep5 for binary files instead of using auxiliary .license files?

See above, but yes.

alexttx commented 1 year ago

I support this RFC.

The benefits:

License and copyrights can be verified on GitHub using python based REUSE tools.
Supports multi-license nicely.
Can peek into LICENSE subdir to easily see (and read) what licenses are used.
Handles subprojects in a uniform way instead of our ad hoc LICENSE.3rdparty.md
Can simplify the homegrown checkoss script.

The downsides:

Will touch every file, but only to update the SPDX tags
Yet another tool to work with (REUSE python scripts)
Another way for CI to fail -- which is entirely justified wrt licenses and copyrights.

tristan957 commented 1 year ago

Assuming @smoyergh sees value, I propose this work just be tacked onto NFSE-5419. We will have to update the SPDX stuff anyways. And if we decide to remove copyright years, now would be a good opportunity as well.

smoyergh commented 1 year ago

Agreed. For the SPDX-FileCopyrightText we can use the initial year and skip the range since it is good for 95 years from date of first publication. One question is how this is going to show up in GitHub, does it grok REUSE?

This adheres to all of REUSE, SPDX, and the US government.

tristan957 commented 1 year ago

It looks like not if I look at my own repo (https://github.com/tristan957/tristan.partin.io).

I did create a discussion though: https://github.com/orgs/community/discussions/44922.

hse-project / rfcs