Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 881455 - Disambiguate 9- and 10-clause Artistic license?
Summary: Disambiguate 9- and 10-clause Artistic license?
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Licenses team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: 706472
  Show dependency tree
 
Reported: 2022-11-16 06:53 UTC by Michał Górny
Modified: 2022-11-22 17:54 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2022-11-16 06:53:08 UTC
Apparently there are two versions of Artistic (1.0) license: 9-clause and 10-clause.

Their SPDX identifiers are respectively:

- Artistic-1.0 for the 9-clause version [1]
- Artistic-1.0-cl8 for the 10-clause version [2]

OSI lists both variants on the same page, giving the 9-clause version along with notice that "some versions" of the license contain the additional clause.

However, our "Artistic" license seems to be only the 10-clause version without any notice of the other variant.

I'm wondering if we should either:

a. split Artistic license into two versions, i.e. add the 9-clause version as a separate license,

b. add a notice that the 8th clause is not present in all versions of the license.

I may try to attempt some scripting attempt to roughly estimate how many Gentoo packages are using the 9-clause version.

CC-ing Perl project since dev-perl/* is a major consumer of this license.


[1] https://spdx.org/licenses/Artistic-1.0.html
[2] https://spdx.org/licenses/Artistic-1.0-cl8.html
[3] https://opensource.org/licenses/Artistic-1.0
Comment 1 Ulrich Müller gentoo-dev 2022-11-16 07:53:21 UTC
They both have a clause 8, so -cl8 is really a confusing name. :/

(In reply to Michał Górny from comment #0)
> OSI lists both variants on the same page, giving the 9-clause version along
> with notice that "some versions" of the license contain the additional
> clause.

They have the 10-clause version on a separate page:
https://opensource.org/licenses/Artistic-Perl-1.0

> I'm wondering if we should either:
> 
> a. split Artistic license into two versions, i.e. add the 9-clause version
> as a separate license,
> 
> b. add a notice that the 8th clause is not present in all versions of the
> license

I'd go for b, because the additional case covers a special case which IMHO isn't very relevant for us or our users.

Alternatively, we could add licenses/Perl which would be equivalent to the disjuction of Artistic-Perl-1.0 and GPL-2. The FSF lists it as a separate license:
https://www.gnu.org/licenses/license-list.html#PerlLicense
The question would then be if any non-Perl packages use the 10-clause license. Could you check that with your scripting?
Comment 2 Ulrich Müller gentoo-dev 2022-11-16 07:54:13 UTC
(In reply to Ulrich Müller from comment #1)
> I'd go for b, because the additional case covers a special case which IMHO

... the additional *clause* ...

> isn't very relevant for us or our users.
Comment 3 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2022-11-16 08:55:50 UTC
(In reply to Ulrich Müller from comment #1)
> (In reply to Michał Górny from comment #0)
> > OSI lists both variants on the same page, giving the 9-clause version along
> > with notice that "some versions" of the license contain the additional
> > clause.
> 
> They have the 10-clause version on a separate page:
> https://opensource.org/licenses/Artistic-Perl-1.0

Actually, according to SPDX Perl's license is yet another variant of Artistic License:

| This is the Artistic License 1.0 found on the Perl site, which is different
| (particularly, clauses 5, 6, 7 and 8) than the Artistic License 1.0 w/clause 8
| found on the OSI site.  [1]

Though unless my eyes deceive me, both licenses are the same on OSI site now.  However, the SPDX versions seem to have meaningful differences, e.g. (7.) in Artistic-1.0 says:

| C or perl subroutines

while in Artistic-1.0-Perl says:

| C subroutines (or comparably compiled subroutines in other languages)

The version included in perl-5.36.0 is the latter, i.e. different than the one on OSI website.  Actually, now I see that the ::gentoo version is the latter too, so it's different from the actual Artistic-1.0 license used in other packages x_x.

[1] https://spdx.org/licenses/Artistic-1.0-Perl.html
Comment 4 Larry the Git Cow gentoo-dev 2022-11-22 17:54:51 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9e96953253103e6292e3b2ed756b71f23883e8b8

commit 9e96953253103e6292e3b2ed756b71f23883e8b8
Author:     Ulrich Müller <ulm@gentoo.org>
AuthorDate: 2022-11-22 17:53:33 +0000
Commit:     Ulrich Müller <ulm@gentoo.org>
CommitDate: 2022-11-22 17:53:33 +0000

    licenses: Change Artistic to a template
    
    This covers both the original Artistic license and the license of Perl.
    
    Closes: https://bugs.gentoo.org/881455
    Signed-off-by: Ulrich Müller <ulm@gentoo.org>

 licenses/Artistic | 211 +++++++++++++++++++++++++++++-------------------------
 1 file changed, 112 insertions(+), 99 deletions(-)