From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2 ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id +s/KMhL6lmBJawEAgWs5BA (envelope-from ) for ; Sat, 08 May 2021 22:52:34 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2 with LMTPS id 6F7CLRL6lmCsSAAAB5/wlQ (envelope-from ) for ; Sat, 08 May 2021 20:52:34 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 419951774B for ; Sat, 8 May 2021 22:52:34 +0200 (CEST) Received: from localhost ([::1]:43576 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lfTw9-00048k-GK for larch@yhetil.org; Sat, 08 May 2021 16:52:33 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:46126) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lfTw0-00048U-0R for guix-devel@gnu.org; Sat, 08 May 2021 16:52:24 -0400 Received: from baptiste.telenet-ops.be ([2a02:1800:120:4::f00:13]:40926) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lfTvx-0005K3-LL for guix-devel@gnu.org; Sat, 08 May 2021 16:52:23 -0400 Received: from butterfly.local ([213.119.233.112]) by baptiste.telenet-ops.be with bizsmtp id 2LsF2500E2SA7zH01LsGyr; Sat, 08 May 2021 22:52:17 +0200 Message-ID: <9b059ccb9cc50e27329824f88d9d049072d30f23.camel@telenet.be> Subject: Re: The purpose of the "license" list of a Guix package (Was: Re: Jam: which licence is this?) From: Maxime Devos To: Leo Prikler , Chris Marusich , Leo Famulari Date: Sat, 08 May 2021 22:52:08 +0200 In-Reply-To: References: <87tunuq1ei.fsf@elephly.net> <87sg3ejmxv.fsf@netris.org> <87h7juje1a.fsf@netris.org> <874kflrb1t.fsf@netris.org> <871rai2y5f.fsf_-_@gmail.com> Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-mv8BDulDoNHfgVyNV8vo" User-Agent: Evolution 3.34.2 MIME-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=telenet.be; s=r21; t=1620507137; bh=RREgVapHzklNfG5Dnzpp2m2gsLziQKB1k4q1UbQNmFc=; h=Subject:From:To:Cc:Date:In-Reply-To:References; b=YNJ+cLiXB/3gn2c1id8+eC1zgfRkfbEbVOxyshLdB3vjUBQ86Rz4vPvgtpkPaFPUp Afm98iMjMlpn/25rbad1CWXDF2q1GOZ3BLYVn6LLfWDZ2/KBNl6+nTHDoNcujhvRnE c+l/NhG0kicsLA5yccj2zymnCROSjtcFxOUnTL/eMS7JgV1wc/n2NVrBZ8K6vp0OWc VAe9mq+6Ug+9eOrsn122eUb5J1XKpOKsJdlUTCAAyPCCqe2HesZyxtNYTtEx0Q1YW+ SmKGPGSf0OL0uA3Y60ACE5q6IhjKXmU8F2z1SUh9yPukmQ8jIGWkok6J/d0R03FvtR KHsVK32+J610g== Received-SPF: pass client-ip=2a02:1800:120:4::f00:13; envelope-from=maximedevos@telenet.be; helo=baptiste.telenet-ops.be X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: guix-devel@gnu.org Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1620507154; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=RREgVapHzklNfG5Dnzpp2m2gsLziQKB1k4q1UbQNmFc=; b=PQW/6PoxWYxv1zAoqdQAp6T0NilsspKUa6emaUFLRHh2FmDRv/C7fb0y5BdRg+gUwxDmwd CukHXhK0GV5yAG9t3x1/WXC9TKDkqmGgvgKQa9x2Xne7Oyd4BD3vO9AUyqE1o8QFr4+oJz RZoOwUhQKRSe4ymkr+a22yZWyFrWgsdBQo2ycXKmNo1VSA+X0rwmxkg6oDXyAs6u5kEjJ2 tbrv+V3g4+hw0IR3DY1j7kbG2miHVPyoRgH56YwYt/0TOUlboF6Q02qR628fdRNfW6HkKM VwB0kneZe+y5Hj9kj5voG312q6K5B7IzXRKaDfHWK9ojXarmdttoFZvQaecbnQ== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1620507154; a=rsa-sha256; cv=none; b=eASMIGIKTq09s4LurtmHU8CiB3/UZYx+MemA5OOIzDYOuBaCeMknF10FFImE4UYb+YuGWk yfbzkvO9J5jSSTBCUVce2K4g1LusoIictvW41VzWEE8tNjDKNoZF6gyRzrn/qZEYpt0h9r eV/dIgL1v5gOP7q621eXNxEn1OvnWuyzXaDp38Q7m7LZCxt+BgjraECW8ZEZObr0GxPuP+ hRURoVh0mc24JIpTDMf09BaU3jgrN6DamlXoYZcz6NM4V4yu3yFDZrxFs2f2yBCGRYPHAh /IdC84Sfa2sm/1myyKIReMox9vqUeQM9HGDAXtE9ZBgIBlKJ2Ht9Cx715Vj//A== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=telenet.be header.s=r21 header.b=YNJ+cLiX; dmarc=pass (policy=none) header.from=telenet.be; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Spam-Score: -5.25 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=telenet.be header.s=r21 header.b=YNJ+cLiX; dmarc=pass (policy=none) header.from=telenet.be; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Queue-Id: 419951774B X-Spam-Score: -5.25 X-Migadu-Scanner: scn0.migadu.com X-TUID: yhluAtlDpve0 --=-mv8BDulDoNHfgVyNV8vo Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Leo Prikler schreef op za 08-05-2021 om 12:16 [+0200]: > [... something about dependencies and copyleft ...] > [...] > However, compliance is not *that* simple. If you're dealing with > copyleft, providing the source is not enough, you also need to license > your own work under that copyleft license, e.g. the GPL. [...] Just checking if our understanding is the same, as I have seen a discussion on IRC where people the situation described below was _not_ legally accepta= ble. Suppose we have a GPLv3+ library, say guile-jwt. Suppose there is a (group of) developer(s) writing an application using guile-jwt. Let's call the application APP, and the developer(s) DEV. A hypothetical situation: * Suppose DEV is not very fond of licensing APP under a copyleft license, and insteads prefers something with basically no licenses. * DEV wants to choose, say, license:expat. * license:expat is not license:gpl3 * Would this be a problem? I would think not. While APP used guile-jwt, it doesn't include or modify its source code. So I would think DEV must still respect GPL for the combination (e.g., if DEV provides binar= ies for APP, they must include source code for guile-jwt *and* APP), and theoretically someone may fork APP to replace guile-jwt with a hypothetical guile-jwt/expat, and at that point the GPL doesn't apply anymore to the combination APP-with-guile-jwt/expat. I would find it interesting to know if some =E2=80=98legal people=E2=80=99 = have worked out this situation. Greetings, Maxime. --=-mv8BDulDoNHfgVyNV8vo Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- iI0EABYKADUWIQTB8z7iDFKP233XAR9J4+4iGRcl7gUCYJb5+BccbWF4aW1lZGV2 b3NAdGVsZW5ldC5iZQAKCRBJ4+4iGRcl7negAQDGVKz2XC8nHqxBXXDAlt55NH4/ ucDGodlTRnIoe93G6wEAz9e/lsVOpAyx7UHPwBaosvOIIb3gHw6y0mrG0UbogAU= =Egz6 -----END PGP SIGNATURE----- --=-mv8BDulDoNHfgVyNV8vo--