Opened 7 years ago
Last modified 6 months ago
#1944 new defect (bug)
Plugin Commit Check: Verify License Declarations
Reported by: |
|
Owned by: | |
---|---|---|---|
Milestone: | Q2 | Priority: | normal |
Component: | Plugin Directory | Keywords: | 2nd-opinion |
Cc: |
Description
I know we do some pre-flight checks on plugins before commit (like if the code 'complies' etc). Can we add in a check for readme.txt to verify that there's a line that starts License:
and it's _not_ just that?
Like enforce people to actually darn well declare their license or no SVN. That would be a nice way to enforce the CYA :)
Attachments (1)
Change History (10)
#2
@
7 years ago
Stage 1: Declare a license.
Stage 2: "As of Date X, your license must be on this list of GPLv2 (or later) compatible terms."?
We could probably get away with "License: GPLv[2|3]*" for much of it. Having to curate a list of acceptable terms would be a pain to start, but once it's done then it's just a mild annoyance.
#3
@
6 years ago
Use https://spdx.org/licenses/ to validate license format. If we could somehow automate checking "These are GPLv2+ compatible" that would be brilliant.
In [3897] I've started to ingest the license headers into the new plugin directory so we can run some stats to see what kind of impact this change would have.
Early indications are that probably about 50% of popular plugins list it, although they're haphazard in how they list the license (
GPLv2 or later
vsGPLv2+
vsGNU General Public License v2.0 or later
vsGPL V2 or latest
vs evenGPLv2 or later (of-course)
:) )