<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-2">
<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>Greetings all,<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>+1 on not defining overlapping or duplicating terms with SPDX. REUSE and SPDX are already reasonably well aligned in terms of definitions, so I don’t think it would be too much of a stretch to leverage some of the formats.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>The one feature missing from SPDX is a pattern match for the files – this may be a useful feature to add to SPDX in general.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I completely agree with the concern on too many required fields. The SPDX community has removed many of the mandatory fields when a “filesAnalyzed=false” is used. Of course this does require the “filesAnalyzed” field since the default is set to true for compatibility. Somewhat inconvenient and perhaps something we should address in SPDX 3.0.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Another mandatory field which can be problematic is the SPDX document namespace. The value of this is required to be in a URI format and is required to be unique.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Let me know if there are other fields which are of concern.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>One other thing to note, we are adding profiles in SPDX 3.0. Profiles is a defined subset of fields for a specific purpose. A group of automotive manufacturers are already using a profile for “SDPX Lite” in SPDX version 2.2 (see <a href="https://spdx.github.io/spdx-spec/appendix-VIII-SPDX-Lite/">https://spdx.github.io/spdx-spec/appendix-VIII-SPDX-Lite/</a>). SPDX Lite is a valid SPDX document intended to be built with minimal or no tools.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Let me know if there is interest in creating a REUSE profile in SPDX. The REUSE group could determine which fields are mandatory and which fields are optional. Myself and the SPDX tech team would be happy to collaborate on the effort.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Best regards,<br>Gary<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><div style='border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt'><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> REUSE <reuse-bounces@lists.fsfe.org> <b>On Behalf Of </b>Geyer-Blaumeiser Lars (IOC/PDL4)<br><b>Sent:</b> Thursday, July 23, 2020 7:22 AM<br><b>To:</b> Max Mehl <max.mehl@fsfe.org>; reuse@lists.fsfe.org<br><b>Subject:</b> Re: [REUSE] REUSE.yaml<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><div><div id="x_divtagdefaultwrapper"><p><span style='font-size:12.0pt;color:black'>Hello Max, Matija,<o:p></o:p></span></p><p><span style='font-size:12.0pt;color:black'><o:p> </o:p></span></p><p><span style='font-size:12.0pt;color:black'>from what I understand there will be further changes in SPDX 3.0 that will remove some of the mandatory stuff. I absolutely agree, that using SPDX should not add stuff not needed for the use case. And if this means that the SPDX file is not correct because some mandatory stuff is not included, this is a good hint for the SPDX community to think about the need for a mandatory field for the information.<o:p></o:p></span></p><p><span style='font-size:12.0pt;color:black'><o:p> </o:p></span></p><p><span style='font-size:12.0pt;color:black'>Saying that, my basic intention is, that a REUSE.yaml file should not define fields and structures, which have the same meaning but are defined differently from SPDX. This would improve readability and processability of the files.<o:p></o:p></span></p><p><span style='font-size:12.0pt;color:black'><o:p> </o:p></span></p><div id="x_Signature"><div id="x_divtagdefaultwrapper"><div name="x_divtagdefaultwrapper"><div><p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-size:10.0pt;color:black'>Mit freundlichen Grüßen / Best regards </span><span style='font-size:12.0pt;color:black'><br><br></span><b><span style='font-size:10.0pt;color:black'>Dr. Lars Geyer-Blaumeiser</span></b><span style='font-size:12.0pt;color:black'><br><br></span><span style='font-size:10.0pt;color:black'>Project Delivery - Open Source Services (IOC/PDL4) </span><span style='font-size:12.0pt;color:black'><br></span><span style='font-size:10.0pt;color:black'>Bosch.IO GmbH | Stuttgarter Straße 130 | 71332 Waiblingen | GERMANY | <a href="http://www.bosch.io">www.bosch.io</a> </span><span style='font-size:12.0pt;color:black'><br></span><span style='font-size:10.0pt;color:black'>Mobil +49 172 4815079 | <a href="mailto:lars.geyer-blaumeiser@bosch.io">lars.geyer-blaumeiser@bosch.io</a> </span><span style='font-size:12.0pt;color:black'><br><br></span><span style='font-size:8.0pt;color:black'>Sitz: Berlin, Registergericht: Amtsgericht Charlottenburg; HRB 148411 B</span><span style='font-size:12.0pt;color:black'><br></span><span style='font-size:8.0pt;color:black'>Aufsichtsratsvorsitzender: Dr.-Ing. Thorsten Lücke; Geschäftsführung: Dr. Stefan Ferber, Dr. Aleksandar Mitrovic, Yvonne Reckling</span><span style='font-size:12.0pt;color:black'><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:12.0pt;color:black'><o:p> </o:p></span></p></div></div></div></div></div><div class=MsoNormal align=center style='text-align:center'><hr size=2 width="98%" align=center></div><div id="x_divRplyFwdMsg"><p class=MsoNormal><b><span style='color:black'>Von:</span></b><span style='color:black'> REUSE <<a href="mailto:reuse-bounces@lists.fsfe.org">reuse-bounces@lists.fsfe.org</a>> im Auftrag von Max Mehl <<a href="mailto:max.mehl@fsfe.org">max.mehl@fsfe.org</a>><br><b>Gesendet:</b> Donnerstag, 23. Juli 2020 15:04:02<br><b>An:</b> <a href="mailto:reuse@lists.fsfe.org">reuse@lists.fsfe.org</a><br><b>Betreff:</b> Re: [REUSE] REUSE.yaml</span> <o:p></o:p></p><div><p class=MsoNormal> <o:p></o:p></p></div></div></div><div><p class=MsoNormal><span style='font-size:10.0pt'>~ Matija ©uklje [2020-07-22 13:54 +0200]:<br>> Die 21. 07. 20 et hora 08:44 Geyer-Blaumeiser Lars (IOC/PDL4) scripsit:<br>>> I like the idea, but just a thought. There is the new yaml format in SPDX<br>>> 2.2, and we are thinking around using this format to mark certain folders<br>>> as open source component,<br>> <br>> That is a great idea.<br><br>Yes, thanks for sharing this idea! Being compatible with other<br>compliance projects is one of our core goals.<br><br>> But you’d really go make a full SPDX valid file for that? How? There are <br>> quite a few fields there that are obligatory.<br>> <br>> One potential issue might be the hash value. For marking 3rd party code that’s <br>> a great boon, but for marking your own living code that might be a bit of a <br>> issue, if you need to change the hash value every time the code changes.<br><br>I see the same issues. Additionally, I am always having<br>user-friendliness in mind which is another big goal of REUSE. The SPDX<br>document seems to work with e.g. "licenseId", "licenseConcluded",<br>"licenseDeclared". While these make sense in the SPDX radius, REUSE<br>users are used to work with License-Identifier and FileCopyrightText.<br>Just like with the snippets I am afraid of different "keys" for the same<br>information.<br><br>Best,<br>Max<br><br>-- <br>Max Mehl - Programme Manager - Free Software Foundation Europe<br>Contact and information: <a href="https://fsfe.org/about/mehl">https://fsfe.org/about/mehl</a> | @mxmehl<br>Become a supporter of software freedom: <a href="https://fsfe.org/join">https://fsfe.org/join</a><br>_______________________________________________<br>REUSE mailing list<br><a href="mailto:REUSE@lists.fsfe.org">REUSE@lists.fsfe.org</a><br><a href="https://lists.fsfe.org/mailman/listinfo/reuse">https://lists.fsfe.org/mailman/listinfo/reuse</a><br><br>This mailing list is covered by the FSFE's Code of Conduct. All<br>participants are kindly asked to be excellent to each other:<br><a href="https://fsfe.org/about/codeofconduct">https://fsfe.org/about/codeofconduct</a><o:p></o:p></span></p></div></div></div></body></html>