Confusing and contradictory licensing information
ArrayBolt3 opened this issue · 1 comments
ArrayBolt3 commented
Expected Behavior
Licensing info in lximage-qt's source code should be consistent and easy to understand.
Current Behavior
Licensing info is confusing and in some places contradictory.
Steps to Reproduce (for bugs)
- View the
AUTHORS
file. The license is specified as "GPL-2+ and LGPL-2.1+". From the perspective of a copyright auditor, this means that a user must comply with the terms of both the GPLv2 (or any later version) and the LGPLv2.1 (or any later version). This was probably intended to be a summary, not a combination of licenses, but it has the effect of combining the licenses. - View
data/lximage-qt.metainfo.xml
. The<project_license>
tag specifiesGPL-2.0-only
. This doesn't match with the earlier declaration of GPL-2+. cd
into thesrc
directory and rungrep -r -i "LGPL"
andgrep -r -i "Lesser"
. There doesn't appear to be any occurrence of the LGPL license anywhere in the lximage-qt codebase.
Suggested fix
- Change the
<project_license>
tag indata/lximage-qt.metainfo.xml
toGPL-2.0-or-later
. - Change
AUTHORS
to specifyGPL-2+
as the repo-wide license and add an explicit LGPL-2.1+ license header to files that are intended to be usable under that license.
tsimonq2 commented
Ubuntu and Debian are particularly strict about consistent licensing. If we find anything else in the LXQt source code, we'll be sure to let you know. Otherwise, we'd appreciate a simple and smooth remedy for this.
Thank you very much for your time!