From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0.migadu.com ([2001:41d0:403:58f0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms13.migadu.com with LMTPS id EPmnCCe3cWbD3QAAqHPOHw:P1 (envelope-from ) for ; Tue, 18 Jun 2024 16:34:47 +0000 Received: from aspmx1.migadu.com ([2001:41d0:403:58f0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0.migadu.com with LMTPS id EPmnCCe3cWbD3QAAqHPOHw (envelope-from ) for ; Tue, 18 Jun 2024 18:34:47 +0200 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=none ("invalid DKIM record") header.d=msavoritias.me header.s=20210930 header.b=ndFXQEnu; dmarc=fail reason="SPF not aligned (relaxed)" header.from=msavoritias.me (policy=none); spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1718728470; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=AtMDG/bHHDbwsqFqUPLSIVUod6Yh2t4nnCJFjRIchFY=; b=D32T4bvgzfxdZQ6foyfQN56IC5ccpHyJrPfgjlaomqeqZxhwD9EkXgyVhu/o1+VZw364UB a+3/4TeBm5Vk55H+kz2ZoNKDZfTQ2cKTNRSyOY3YDXYMQ4giW3AaF/jBAVfLaqKgUxtHrq xVckKMkle+eB+EI2T03bwuKz1wCGhQoIz8vKpPKsE4pNCfCJ2ZEhZvJQxBbkLfKR1c+Baj +rFIlgOlf+QvRcyjiWut9fjzzSAJkk2WWEP3Y7hD4BQrQGM+/df0lT9pcmglfP1+hMB2Oh X+67LAXOqI+jxiSRuN/zmQaJCY6S2Iq9AGpFeOpGAoola5VqSkuXVcscQ4U66g== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1718728470; a=rsa-sha256; cv=none; b=RzPr3e/g3/SP7ogwFM+nF4KVqzb+6ihnYtGQ/FvH9svS5ht4E0zCjOQPMlI/wyU/+vaZfr 9RHfUsyn6Kvr2Hz7GdBEIWyqgb20MiY1xVkUKWAIemWCWdt0knpEuUVtRLRPf3DIgyoiEJ 4Le1EFRPzvPCm6MniUE+EV9rF3b6ODwyodsBDL94ACfpTrvZB1Am0RCg4h4WuEoM1sBqOC gmzI2vLB7q7c0vPbidj8V6+EjRIU4yUlewoG5Zi5YJAgaMpHK1SnhCgOUcNG4yW0vrpN8o om9OalsWZkvVsLzZNZJLG3uchkus5silMHmiPysmvPFQZSBUCOnNWfTSbUXvlg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none ("invalid DKIM record") header.d=msavoritias.me header.s=20210930 header.b=ndFXQEnu; dmarc=fail reason="SPF not aligned (relaxed)" header.from=msavoritias.me (policy=none); spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 3A55A3A978 for ; Tue, 18 Jun 2024 18:34:30 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1sJbmK-0003Ac-OE; Tue, 18 Jun 2024 12:33:52 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sJbmJ-0003AR-Ss for guix-devel@gnu.org; Tue, 18 Jun 2024 12:33:52 -0400 Received: from mail.webarch.email ([81.95.52.48]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sJbmI-00045Z-11 for guix-devel@gnu.org; Tue, 18 Jun 2024 12:33:51 -0400 Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id 716071A8890F; Tue, 18 Jun 2024 17:33:40 +0100 (BST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=msavoritias.me; s=20210930; t=1718728427; h=from:subject:date:message-id:to:cc:mime-version:content-type: content-transfer-encoding:in-reply-to:references; bh=AtMDG/bHHDbwsqFqUPLSIVUod6Yh2t4nnCJFjRIchFY=; b=ndFXQEnutL+F6bdA6JlXuQIDykUMjsbSR5m4tDgqIuz83sbCKmtjegFksqNKAk0VmosvTB j9Jpf/CruJn1M/X1cae6q03gtfhUM1wjOpi/EfZF5d5TbAz9/2ZgxcvaS23pMylVnhMU1I auJ5NfK12aL2lb4q9U1Q57B+NN6dNfJkKyEqJaItBiV6hYwkYX3rFFN9gQ2dxhZ167sCYq 49P06pjtz0eyZ+NWAJBYeUIgJCFp1qEkQdbg/MukJjpa+vbz/lT7v9RhixKQmVXocTjvaI B0otOnLEAKemHUYxR5KZI7B8x0YePma2NViGO/9jrBC1TqYpbE10BMcNRnKDqg== Date: Tue, 18 Jun 2024 19:33:28 +0300 From: MSavoritias To: Greg Hogan Cc: MSavoritias , guix-devel@gnu.org Subject: Re: Next Steps For the Software Heritage Problem Message-ID: <20240618193328.14f05913@fannys.me> In-Reply-To: References: <20240618113717.4a6bad2b@fannys.me> X-Mailer: Claws Mail 4.1.1 (GTK 3.24.41; x86_64-pc-linux-gnu) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Last-TLS-Session-Version: TLSv1.3 Received-SPF: pass client-ip=81.95.52.48; envelope-from=email@msavoritias.me; helo=mail.webarch.email X-Spam_score_int: -16 X-Spam_score: -1.7 X-Spam_bar: - X-Spam_report: (-1.7 / 5.0 requ) BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=no autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Spam-Score: -3.26 X-Spam-Score: -3.26 X-Migadu-Queue-Id: 3A55A3A978 X-Migadu-Scanner: mx11.migadu.com X-TUID: sD2ErMvAPaOP On Tue, 18 Jun 2024 12:21:33 -0400 Greg Hogan wrote: > On Tue, Jun 18, 2024 at 4:37=E2=80=AFAM MSavoritias > wrote: > > > > 1. Add a clear disclaimer/requirment that any new package that is > > added in Guix, the person has to give consent or get consent from > > the person that the package is written in. This needs to be added > > in the docs and in the email procedures. =20 >=20 > You will be happy to know that Guix has always had this requirement > [1] by only packaging software licensed with the four essential > freedoms [2]. It's the first item on the Guix homepage. >=20 > [1] https://guix.gnu.org/manual/en/html_node/Software-Freedom.html > [2] https://www.gnu.org/philosophy/free-sw.en.html Ah it seems I wasn't clear enough. I meant write something like: By packaging a software project for Guix you are exposing said software to a code harvesting project (also known as LLMs or "AI") run by Software Heritage and/or their partners. Make sure you have gotten fully informed consent and that the author of this package fully understands what the implications are. Something like that. To make it clear that the package that is about to be added to Guix is going to be harvested for the LLM models Software Heritage decided to share the code with. Hope this is more clear. MSavoritias