Skip to content

Consider moving licenses to SPDX 3.0 compliant short identifiers #593

@chadlwilson

Description

@chadlwilson

Currently the licenses enumeration has licenses such as LGPL-3.0 which are SPDX-deprecated due to being ambiguous.

https://github.com/OWASP/nest-schema/blob/main/docs/project.md#10-property-owasp-project--license

I'm not sure the process for schema agreement and evolution, but given I believe it's rathere new, perhaps you'd make lives easier for future if you use non-deprecated SPDX identifiers (i.e 3.0 compliant).

https://spdx.org/licenses/

Deprecated:

  • AGPL-3.0 -> AGPL-3.0-only
  • GPL-2.0 -> GPL-2.0-only
  • GPL-3.0 -> GPL-3.0-only
  • LGPL-2.1 -> LGPL-2.1-only
  • LGPL-3.0 -> LGPL-3.0-only

You may also need to add the -or-later variants.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions