Locate shards that use non-standard strings for licenses or without licenses.

shardbox / shardbox-web

Webapp for shardbox.org

https://www.shardbox.org/

MIT License

10 stars 3 forks source link

Locate shards that use non-standard strings for licenses or without licenses. #11

Open szabgab opened 3 years ago

szabgab commented 3 years ago

Create a list of standard license strings (it can later be moved to the shards tool) with links to the full license text.
List all the shards that have no license in the shard.yml or that it uses a string that is not one of known strings. See https://github.com/crystal-lang/shards/issues/29

straight-shoota commented 3 years ago

The specification for shard.yml says:

An http://opensource.org/[OSI license] name or an URL to a license file (string, recommended).

I would expect the value to typically be a valid SPDX short identifier and we can probably just use that as our list. That should probably be clarified in the specification.

Of course, people can still choose licenses that are not OSI registered. And some OSI licenses don't have an SPDX identifier. We could consider adding additional values to our list when appropriate.

szabgab commented 3 years ago

I think it would be nice if there was some way for the authors to indicated that they are aware that they used a non-standard identifier or string. So any tool that verifies the license field will be able to differentiate between mistake and intentionally different strings.

straight-shoota commented 3 years ago

Not sure if that makes sense. But it would be a discussion for shards in general, not shardbox.