Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Is DataLicense wrong more often than it’s right? #595

Closed
Jayman2000 opened this issue Oct 30, 2021 · 5 comments
Closed

Is DataLicense wrong more often than it’s right? #595

Jayman2000 opened this issue Oct 30, 2021 · 5 comments
Milestone

Comments

@Jayman2000
Copy link
Contributor

This PR removed the following text from chapters/document-creation-information.md:

By using this document, or any portion hereof, you hereby agree that any copyright rights (as determined by your jurisdiction) in any SPDX-Metadata, including without limitation explanatory text, shall be subject to the terms of the Creative Commons CC0 1.0 Universal license. For SPDX-Metadata not containing any copyright rights, you hereby agree and acknowledge that the SPDX-Metadata is provided to you "as-is" and without any representations or warranties of any kind concerning the SPDX-Metadata, express, implied, statutory or otherwise, including without limitation warranties of title, merchantability, fitness for a particular purpose, non-infringement, or the absence of latent or other defects, accuracy, or the presence or absence of errors, whether or not discoverable, all to the greatest extent permissible under applicable law.

The DataLicense field still has to be “CC0-1.0”. I have some questions about this change:

  1. How likely is it that CC0-1.0 truly applies to some specific metadata created using using SPDX v2.2 (which included that language)? I would think that that depends on what jurisdiction the specific metadata was created in.
  2. How likely is it that CC0-1.0 truly applies to some specific metadata created using using SPDX v2.2.1 (which didn’t include that language)?
  3. Is there any way to tell the difference between a document created using SPDX v2.2 and a document created using SPDX v2.2.1?

I bring up those questions to make a point: it seems like the DataLicense field might wrong more often than it’s right. If it is wrong more often than not, then I don’t think that it makes sense to force DataLicense to be “CC0-1.0”. It just seems misleading that way.

@zvr
Copy link
Member

zvr commented Oct 30, 2021

I don't understand the question. All SPDX data are under CC0-1.0.
Why would you think that the license would be wrong ("more often than not", even!).

@Jayman2000
Copy link
Contributor Author

All SPDX data are under CC0-1.0.

What causes all SPDX data to be under CC0?

Why would you think that the license would be wrong ("more often than not", even!).

Originally, I assumed that the part that says “any SPDX-Metadata, including without limitation explanatory text, shall be subject to the terms of the Creative Commons CC0 1.0” was responsible for making CC0 apply to all SPDX data. Now that it’s been removed, I’m not sure if that assumption was correct.

@zvr
Copy link
Member

zvr commented Oct 30, 2021

What causes all SPDX data to be under CC0?

The SPDX specification, which, since the beginning, 10+ years ago, said that the data license is CC-1.0.

Even without the wording, the DataLicenseis defined to be CC-1.0. If it's not, is not valid SPDX. This remains valid in SPDX 3.0.

@Jayman2000
Copy link
Contributor Author

What causes all SPDX data to be under CC0?

The SPDX specification, which, since the beginning, 10+ years ago, said that the data license is CC-1.0.

OK, so what part of the specification says that? The way I read it, version 2.2.1 removed the part of the specification that said that.

Even without the wording, the DataLicense is defined to be CC-1.0.

I agree. Version 2.2.1 says that the DataLicense field must be set to the string “CC0-1.0”. Does that mean that the answer to these two questions is “100% likely”?

  1. How likely is it that CC0-1.0 truly applies to some specific metadata created using using SPDX v2.2 (which included that language)?

  2. How likely is it that CC0-1.0 truly applies to some specific metadata created using using SPDX v2.2.1 (which didn’t include that language)?

@kestewart kestewart added this to the 3.0 milestone Mar 15, 2022
@goneall
Copy link
Member

goneall commented Apr 4, 2024

This has been resolved with the recent change proposal on datalicense which is implemented in the 3.0 spec.

@goneall goneall closed this as completed Apr 4, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants