Comment 3 for bug 1781267

Revision history for this message
Daniel Manrique (roadmr) wrote :

Looks like *this* is the "bumping the spdx version" discussion, and the point we're having it at is the point when users are starting to use non-SPDX 2.x identifiers and complaining about it.

Clearly stating "we only support SPDX 2.x identifiers" is a possible solution. I'm not opposed to it and if you think that's reasonable that can be done, which would, I think, result on the snapd bug (this) being closed and the store bug being updated to say it's about clarifying which version we support.

Using the same validation code would not have helped the user who reported this; that's something we can discuss separately. The forum thread https://forum.snapcraft.io/t/keeping-up-with-spdx-license-identifier-updates/7095/4 mentions that as a possibility but in order for it to help keep up with SPDX updates, other changes are also needed.

Let me know if you think mentioning "only accept SPDX 2.x identifiers and be clear about it" as a solution in the forum thread makes sense, it's a bit repeaty but some people follow snapd bugs and some follow the forum, so it doesn't seem out of the question.

Thanks for your reply!