You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
in python packaging, the metadata License: field(s) is either a SPDX id/expression, or it is a license text.
current implementation causes it to be a declared license name, instead of a license text.
this needs to be fixed. this does not affect concluded licenses!
expected outcome:
license name is Declared license of <package>
license text is attached
content is the declared license
content type: text/plain
could be base64-encoded, though this is not needed - as per all relevant specs the text is expected to be UTF8 string already.
Text indicating the license covering the distribution where the license is not a selection from the “License” Trove classifiers. See “Classifier” below. This field may also be used to specify a particular version of a license which is named via the Classifier field, or to indicate a variation or exception to such a license.
The text was updated successfully, but these errors were encountered:
jkowalleck
changed the title
have declared non-SPDX license result in wrong-structured CDX
declared non-SPDX license shoud result in text attachment
Mar 15, 2024
in python packaging, the metadata
License:
field(s) is either a SPDX id/expression, or it is a license text.current implementation causes it to be a declared license name, instead of a license text.
this needs to be fixed. this does not affect concluded licenses!
expected outcome:
Declared license of <package>
this is partially related to #570
see https://packaging.python.org/en/latest/specifications/core-metadata/#license
The text was updated successfully, but these errors were encountered: