License clarification

[stratakis]

Cryptography is also using code from the CPython codebase added in 2e71776

On setup.cfg the SPDX license identifier is BSD-3-Clause OR Apache-2.0.

Should it be (Apache-2.0 OR BSD-3-Clause) AND PSF-2.0? Or (Apache-2.0 OR BSD-3-Clause) AND Python-2.0.1?

[stratakis]

See also the relevant discussions on Fedora legal and the SPDX repos

[alex]

Yes, I believe that's correct.

[hroncok]

Which one of those?

[alex]

The former -- our code is under the PSF license. The Python 2.0.1 license is literally the license of Python 2.0.1 AFAIK.

[hroncok]

The difference between the two is that Python 2.0.1 also includes the other licenses listed at https://docs.python.org/3/license.html like beopen etc.

[hroncok]

See the difference between https://spdx.org/licenses/Python-2.0.1.html and https://spdx.org/licenses/PSF-2.0.html

Don't confuse the 2.0.1 with current Python version. It's just because the license was different before.

[alex]

Ah yes, still PSF-2.0 is correct.

…

On Mon, Dec 19, 2022 at 5:22 PM Miro Hrončok ***@***.***> wrote: See the difference between https://spdx.org/licenses/Python-2.0.1.html and https://spdx.org/licenses/PSF-2.0.html Don't confuse the 2.0.1 with current Python version. It's just because the license was different before. — Reply to this email directly, view it on GitHub <#7912 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAAAGBAJZ2Q6JA27IINPOMTWODNY5ANCNFSM6AAAAAATDNCIPE> . You are receiving this because you commented.Message ID: ***@***.***>

-- All that is necessary for evil to succeed is for good people to do nothing.