Legal Team/Decisions/SPDX Metadata License: Rationale for CC0 - Revision history

MartinMichlmayr: Fix format of bullet points

2013-04-11T09:21:14Z

Fix format of bullet points

MartinMichlmayr: Convert to MediaWiki syntax

2013-03-05T17:40:41Z

Convert to MediaWiki syntax

Slamons: Added links to PDDL and CC0 1.0 licenses.

2012-06-29T20:05:42Z

Added links to PDDL and CC0 1.0 licenses.

Jlovejoy at 05:53, 15 February 2012

2012-02-15T05:53:40Z

Jlovejoy at 05:53, 15 February 2012

2012-02-15T05:53:16Z

Jlovejoy at 05:51, 15 February 2012

2012-02-15T05:51:32Z

Mgisi at 20:33, 14 February 2012

2012-02-14T20:33:56Z

Mgisi at 20:11, 14 February 2012

2012-02-14T20:11:39Z

New page

<h1 align="center">Rationale for Choosing a License for SPDX Data</h1><h1>Introduction</h1>SPDX files represent a summary of license information extracted from software source code. The SPDX Legal working group is evaluating different licenses that can be used to cover the data contained in a SPDX file. One challenge is that the working group does not want to imply that the data contained in a SPDX file is potentially copyright protected. On the other hand, in some jurisdictions, data could be considered intellectual property. In those jurisdictions the SPDX Legal working group seeks to provide a license that mitigates the risk of someone obtaining controlling IP rights over SPDX data.The following are the core requirements driving the license evaluation process. We seek a license that:<ul><li>does not imply that SPDX data is intellectual property;</li><li>in jurisdictions that permit data to be intellectual property - prevents others from claiming controlling ownership over the data contained in a SPDX file;</li><li>will not hinder adoption of the SPDX format by the open source community;</li><li>minimizes further license proliferation in the open source community;</li><li>permits the exchange of SPDX files under confidentiality terms (potentially temporarily) for special situations that may require it. </li></ul><h1>License Candidates</h1>Public Domain Dedication and License (PDDL)PDDL is the current designated license for SPDX files as required by the SPDX 1.0 specification. PDDL was initially chosen because it was a “data” license. That is, it was initially design to be used with data as opposed to software or other copyrightable works. The reception of PDDL as the SPDX file data license has been mixed and somewhat controversial at times.  A copy of the PDDL license can be found in the appendix of this document.<ul><li>·         Pros<ul><li>o   Designed for licensing data. </li><li>o   Useful in jurisdictions where intellectual property rights are granted to data (bases).</li><li>o   Attempts to make data freely accessible (in a similar spirit that open source licenses do for software).</li><li>o   Permits the exchange of SPDX files under confidentiality terms.</li></ul></li></ul> <ul><li>·         Cons<ul><li>o   Lengthy license (6 pages) – will take time for people to review and understand. </li><li>o   Yet another new license for open source community to review, understand and accept. Would likely add friction to SPDX adoption.</li><li>o   A major open source foundation pointed out it would be hard to get PDDL approved by their organization as well as other foundations. This is especially true when considering a license that is not familiar to the community (as is the case with PDDL).</li><li>o   Use of the license implies that SPDX data is copyright protected.</li></ul></li></ul>MIT Style SPDX Draft The license text is based on the MIT open source license. A copy of the MIT Style license draft can be found in the appendix of this document.<ul><li>·         Pros<ul><li>o   Viewed more as a disclaimer notice than a data license. The intent is to view the SPDX file content as data as opposed to protected intellectual property. </li><li>o   Serves more as a license in jurisdictions where data is considered protectable intellectual property.</li><li>o   The license text is short and easy to understand. </li><li>o   The license is familiar to the open source community and would likely not add much friction to the adoption of SPDX.</li><li>o   Permits the exchange of SPDX files under confidentiality terms</li></ul></li><li>·         Cons<ul><li>o   The license is based on the MIT open source license which was designed to be used with software as opposed to data.</li><li>o   Requires attribution. Many different SPDX files used in a project or supply chain may potentially require the publication of many different attribution notices. </li></ul></li></ul> CC0 1.0 - Universal Public Domain Dedication license Creative Commons (CC) is a non-profit organization devoted to expanding the range of creative works available for others to build upon legally and to share.  The organization has released several copyright-licenses known as “Creative Commons” licenses, free of charge to the public. One such license is the CC0 1.0 which allows one to contribute their work to the public domain. A copy of the CC0 1.0 license can be found in the appendix of this document. <ul><li>·         Pros<ul><li>o   License text is short and easy to understand. </li><li>o   License is familiar to the open source community and therefore would likely not to add significant friction to the adoption of SPDX.</li><li>o   Achieves object of having the data be considered public domain in those jurisdictions where data can be protected as intellectual property.</li><li>o   Permits the exchange of SPDX files under confidentiality terms.</li></ul></li><li>·         Cons<ul><li>o   License was not designed to be used with data.</li><li>o   Use of the license implies that SPDX data is copyright protected.</li></ul></li></ul> No License ProvidedOne option is to take the position that no license applies. <ul><li>·         Pros<ul><li>o   Easy to understand. Does not add friction to adoption of SPDX.</li><li>o   Promotes the idea that the SPDX data is not intellectual property (e.g., not copyrightable).</li><li>o   Permits the exchange of SPDX files under confidentiality terms.</li></ul></li><li>·         Cons</li></ul>Does not prevent one from trying to obtain controlling rights in jurisdictions where data is potentially considered intellectual property.

@@ Line 39: / Line 39: @@
 ** The license is familiar to the open source community and would likely not add much friction to the adoption of SPDX.
 ** Permits the exchange of SPDX files under confidentiality terms
-** Cons
+* Cons
-*** The license is based on the MIT open source license which was designed to be used with software as opposed to data.
+** The license is based on the MIT open source license which was designed to be used with software as opposed to data.
-*** Requires attribution. Many different SPDX files used in a project or supply chain may potentially require the publication of many different attribution notices.
+** Requires attribution. Many different SPDX files used in a project or supply chain may potentially require the publication of many different attribution notices.
 '''CC0 1.0 - Universal Public Domain Dedication license '''
@@ Line 52: / Line 52: @@
 ** Achieves object of having the data be considered public domain in those jurisdictions where data can be protected as intellectual property.
 ** Permits the exchange of SPDX files under confidentiality terms.
-** Cons
+* Cons
-*** License was not designed to be used with data.
+** License was not designed to be used with data.
-*** Use of the license implies that SPDX data is copyright protected.
+** Use of the license implies that SPDX data is copyright protected.
 '''No License Provided'''
@@ Line 64: / Line 64: @@
 ** Promotes the idea that the SPDX data is not intellectual property (e.g., not copyrightable).
 ** Permits the exchange of SPDX files under confidentiality terms.
-** Cons
+* Cons
+** Does not prevent one from trying to obtain controlling rights in jurisdictions where data is potentially considered intellectual property.
 Does not prevent one from trying to obtain controlling rights in jurisdictions where data is potentially considered intellectual property.
 [[Category:Legal]]

← Older revision		Revision as of 17:40, 5 March 2013
Line 1:		Line 1:
−	~~<h1><strong>~~Overview~~</strong></h1><p>~~SPDX files represent a summary of license information extracted from software source code. The SPDX Legal working group evaluated different licenses that can be used to cover the data contained in a SPDX file. One challenge was that the working group did not want to imply that the data contained in a SPDX file is potentially copyright protected. On the other hand, in some jurisdictions, data could be considered intellectual property. In those jurisdictions the working group stride to provide a license that mitigates the risk of someone obtaining controlling IP rights over SPDX data. The following were the core requirements driving the license evaluation process. We sought a license that:~~</p><ul><li>~~does not imply that SPDX data is intellectual property;~~</li><li>~~in jurisdictions that permit data to be intellectual property - prevents others from claiming controlling ownership over the data contained in a SPDX file;~~</li><li>~~will not hinder adoption of the SPDX format by the open source community;~~</li><li>~~minimizes further license proliferation in the open source community;~~</li><li>~~permits the exchange of SPDX files under confidentiality terms (potentially temporarily) for special situations that may require it.~~</li></ul><p>~~After careful consideration the Creative Commons Zero 1.0 Universal license was chosen. The rationale for each of the license candidates considered can be found below.~~</p><h1><strong>~~License Candidates~~:</strong></h1><p><strong><span style~~=~~"text-decoration: underline;">~~Public Domain Dedication and License (PDDL)~~</span></strong></p><p>~~PDDL is the current designated license for SPDX files as required by the SPDX 1.0 specification. PDDL was initially chosen because it was a “data” license. That is, it was initially design to be used with data as opposed to software or other copyrightable works. The reception of PDDL as the SPDX file data license has been mixed and somewhat controversial at times.~~ ~~ A copy of the PDDL license can be found here: http://opendatacommons.org/licenses/pddl/1.0/~~</p><ul><li>~~Pros~~<ul><li>~~Designed for licensing data.~~</li><li>~~Useful in jurisdictions where intellectual property rights are granted to data (bases).~~</li><li>~~Attempts to make data freely accessible (in a similar spirit that open source licenses do for software).~~</li><li>~~Permits the exchange of SPDX files under confidentiality terms.~~</li></ul></li></ul><p> </p><ul><li>~~Cons~~<ul><li>~~Lengthy license (6 pages) – will take time for people to review and understand.~~</li><li>~~Yet another new license for open source community to review, understand and accept. Would likely add friction to SPDX adoption.~~</li><li>~~A major open source foundation pointed out it would be hard to get PDDL approved by their organization as well as other foundations. This is especially true when considering a license that is not familiar to the community (as is the case with PDDL).~~</li><li>~~Use of the license implies that SPDX data is copyright protected.~~</li></ul></li></ul><p><strong><span style="text-decoration: underline;">~~MIT Style SPDX Draft~~</span></strong></p><p>~~The license text is based on the MIT open source license. A copy of the MIT Style license draft can be found in the appendix of this document.~~<strong></strong></p><ul><li>~~Pros~~<ul><li>~~Viewed more as a disclaimer notice than a data license. The intent is to view the SPDX file content as data as opposed to protected intellectual property.~~</li><li>~~Serves more as a license in jurisdictions where data is considered protectable intellectual property.~~</li><li>~~The license text is short and easy to understand.~~</li><li>~~The license is familiar to the open source community and would likely not add much friction to the adoption of SPDX.~~</li><li>~~Permits the exchange of SPDX files under confidentiality terms~~</li><li>~~Cons~~<ul><li>~~The license is based on the MIT open source license which was designed to be used with software as opposed to data.~~</li><li>~~Requires attribution. Many different SPDX files used in a project or supply chain may potentially require the publication of many different attribution notices.~~</li></ul></li></ul></li></ul><p> </p><p><strong><span style="text-decoration: underline;">~~CC0 1.0 - Universal Public Domain Dedication license ~~</span></strong></p><p>~~Creative Commons (CC) is a non-profit organization devoted to expanding the range of creative works available for others to build upon legally and to share. ~~ ~~The organization has released several copyright-licenses known as “Creative Commons” licenses, free of charge to the public. One such license is the CC0 1.0 which allows one to contribute their work to the public domain. A copy of the CC0 1.0 license can be found here: http://creativecommons.org/publicdomain/zero/1.0/~~</p><ul><li>~~Pros~~<ul><li>~~License text is short and easy to understand.~~</li><li>~~License is familiar to the open source community and therefore would likely not to add significant friction to the adoption of SPDX.~~</li><li>~~Achieves object of having the data be considered public domain in those jurisdictions where data can be protected as intellectual property.~~</li><li>~~Permits the exchange of SPDX files under confidentiality terms.~~</li><li>~~Cons~~<ul><li>~~License was not designed to be used with data.~~</li><li>~~Use of the license implies that SPDX data is copyright protected.~~</li></ul></li></ul></li></ul><p> </p><p><strong><span style="text-decoration: underline;">~~No License Provided~~</span></strong></p><p>~~One option is to take the position that no license applies.~~</p><ul><li>~~Pros~~<ul><li>~~Easy to understand. Does not add friction to adoption of SPDX.~~</li><li>~~Promotes the idea that the SPDX data is not intellectual property (e.g., not copyrightable).~~</li><li>~~Permits the exchange of SPDX files under confidentiality terms.~~</li><li>~~Cons~~</li></ul></li></ul><p>~~Does not prevent one from trying to obtain controlling rights in jurisdictions where data is potentially considered intellectual property.~~</p>~~	+	== Overview ==
		+
		+	SPDX files represent a summary of license information extracted from software source code. The SPDX Legal working group evaluated different licenses that can be used to cover the data contained in a SPDX file. One challenge was that the working group did not want to imply that the data contained in a SPDX file is potentially copyright protected. On the other hand, in some jurisdictions, data could be considered intellectual property. In those jurisdictions the working group stride to provide a license that mitigates the risk of someone obtaining controlling IP rights over SPDX data. The following were the core requirements driving the license evaluation process. We sought a license that:
		+
		+	* does not imply that SPDX data is intellectual property;
		+	* in jurisdictions that permit data to be intellectual property - prevents others from claiming controlling ownership over the data contained in a SPDX file;
		+	* will not hinder adoption of the SPDX format by the open source community;
		+	* minimizes further license proliferation in the open source community;
		+	* permits the exchange of SPDX files under confidentiality terms (potentially temporarily) for special situations that may require it.
		+
		+	After careful consideration the Creative Commons Zero 1.0 Universal license was chosen. The rationale for each of the license candidates considered can be found below.
		+
		+	== License Candidates ==
		+
		+	'''Public Domain Dedication and License (PDDL)'''
		+
		+	PDDL is the current designated license for SPDX files as required by the SPDX 1.0 specification. PDDL was initially chosen because it was a “data” license. That is, it was initially design to be used with data as opposed to software or other copyrightable works. The reception of PDDL as the SPDX file data license has been mixed and somewhat controversial at times. A copy of the PDDL license can be found here: http://opendatacommons.org/licenses/pddl/1.0/
		+
		+	* Pros
		+	** Designed for licensing data.
		+	** Useful in jurisdictions where intellectual property rights are granted to data (bases).
		+	** Attempts to make data freely accessible (in a similar spirit that open source licenses do for software).
		+	** Permits the exchange of SPDX files under confidentiality terms.
		+
		+	* Cons
		+	** Lengthy license (6 pages) – will take time for people to review and understand.
		+	** Yet another new license for open source community to review, understand and accept. Would likely add friction to SPDX adoption.
		+	** A major open source foundation pointed out it would be hard to get PDDL approved by their organization as well as other foundations. This is especially true when considering a license that is not familiar to the community (as is the case with PDDL).
		+	** Use of the license implies that SPDX data is copyright protected.
		+
		+	'''MIT Style SPDX Draft'''
		+
		+	The license text is based on the MIT open source license. A copy of the MIT Style license draft can be found in the appendix of this document.''''''
		+
		+	* Pros
		+	** Viewed more as a disclaimer notice than a data license. The intent is to view the SPDX file content as data as opposed to protected intellectual property.
		+	** Serves more as a license in jurisdictions where data is considered protectable intellectual property.
		+	** The license text is short and easy to understand.
		+	** The license is familiar to the open source community and would likely not add much friction to the adoption of SPDX.
		+	** Permits the exchange of SPDX files under confidentiality terms
		+	** Cons
		+	*** The license is based on the MIT open source license which was designed to be used with software as opposed to data.
		+	*** Requires attribution. Many different SPDX files used in a project or supply chain may potentially require the publication of many different attribution notices.
		+
		+	'''CC0 1.0 - Universal Public Domain Dedication license '''
		+
		+	Creative Commons (CC) is a non-profit organization devoted to expanding the range of creative works available for others to build upon legally and to share. The organization has released several copyright-licenses known as “Creative Commons” licenses, free of charge to the public. One such license is the CC0 1.0 which allows one to contribute their work to the public domain. A copy of the CC0 1.0 license can be found here: http://creativecommons.org/publicdomain/zero/1.0/
		+
		+	* Pros
		+	** License text is short and easy to understand.
		+	** License is familiar to the open source community and therefore would likely not to add significant friction to the adoption of SPDX.
		+	** Achieves object of having the data be considered public domain in those jurisdictions where data can be protected as intellectual property.
		+	** Permits the exchange of SPDX files under confidentiality terms.
		+	** Cons
		+	*** License was not designed to be used with data.
		+	*** Use of the license implies that SPDX data is copyright protected.
		+
		+	'''No License Provided'''
		+
		+	One option is to take the position that no license applies.
		+
		+	* Pros
		+	** Easy to understand. Does not add friction to adoption of SPDX.
		+	** Promotes the idea that the SPDX data is not intellectual property (e.g., not copyrightable).
		+	** Permits the exchange of SPDX files under confidentiality terms.
		+	** Cons
		+
		+	Does not prevent one from trying to obtain controlling rights in jurisdictions where data is potentially considered intellectual property.
		+
		+	[[Category:Legal]]

← Older revision		Revision as of 20:05, 29 June 2012
Line 1:		Line 1:
−	<h1><strong>Overview</strong></h1><p>SPDX files represent a summary of license information extracted from software source code. The SPDX Legal working group evaluated different licenses that can be used to cover the data contained in a SPDX file. One challenge was that the working group did not want to imply that the data contained in a SPDX file is potentially copyright protected. On the other hand, in some jurisdictions, data could be considered intellectual property. In those jurisdictions the working group stride to provide a license that mitigates the risk of someone obtaining controlling IP rights over SPDX data. The following were the core requirements driving the license evaluation process. We sought a license that:</p><ul><li>does not imply that SPDX data is intellectual property;</li><li>in jurisdictions that permit data to be intellectual property - prevents others from claiming controlling ownership over the data contained in a SPDX file;</li><li>will not hinder adoption of the SPDX format by the open source community;</li><li>minimizes further license proliferation in the open source community;</li><li>permits the exchange of SPDX files under confidentiality terms (potentially temporarily) for special situations that may require it.</li></ul><p>After careful consideration the Creative Commons Zero 1.0 Universal license was chosen. The rationale for each of the license candidates considered can be found below.</p><h1><strong>License Candidates:</strong></h1><p><strong><span style="text-decoration: underline;">Public Domain Dedication and License (PDDL)</span></strong></p><p>PDDL is the current designated license for SPDX files as required by the SPDX 1.0 specification. PDDL was initially chosen because it was a “data” license. That is, it was initially design to be used with data as opposed to software or other copyrightable works. The reception of PDDL as the SPDX file data license has been mixed and somewhat controversial at times.  A copy of the PDDL license can be found here: ~~PDDL link~~.</p><ul><li>Pros<ul><li>Designed for licensing data.</li><li>Useful in jurisdictions where intellectual property rights are granted to data (bases).</li><li>Attempts to make data freely accessible (in a similar spirit that open source licenses do for software).</li><li>Permits the exchange of SPDX files under confidentiality terms.</li></ul></li></ul><p> </p><ul><li>Cons<ul><li>Lengthy license (6 pages) – will take time for people to review and understand.</li><li>Yet another new license for open source community to review, understand and accept. Would likely add friction to SPDX adoption.</li><li>A major open source foundation pointed out it would be hard to get PDDL approved by their organization as well as other foundations. This is especially true when considering a license that is not familiar to the community (as is the case with PDDL).</li><li>Use of the license implies that SPDX data is copyright protected.</li></ul></li></ul><p><strong><span style="text-decoration: underline;">MIT Style SPDX Draft</span></strong></p><p>The license text is based on the MIT open source license. A copy of the MIT Style license draft can be found in the appendix of this document.<strong></strong></p><ul><li>Pros<ul><li>Viewed more as a disclaimer notice than a data license. The intent is to view the SPDX file content as data as opposed to protected intellectual property.</li><li>Serves more as a license in jurisdictions where data is considered protectable intellectual property.</li><li>The license text is short and easy to understand.</li><li>The license is familiar to the open source community and would likely not add much friction to the adoption of SPDX.</li><li>Permits the exchange of SPDX files under confidentiality terms</li><li>Cons<ul><li>The license is based on the MIT open source license which was designed to be used with software as opposed to data.</li><li>Requires attribution. Many different SPDX files used in a project or supply chain may potentially require the publication of many different attribution notices.</li></ul></li></ul></li></ul><p> </p><p><strong><span style="text-decoration: underline;">CC0 1.0 - Universal Public Domain Dedication license </span></strong></p><p>Creative Commons (CC) is a non-profit organization devoted to expanding the range of creative works available for others to build upon legally and to share.  The organization has released several copyright-licenses known as “Creative Commons” licenses, free of charge to the public. One such license is the CC0 1.0 which allows one to contribute their work to the public domain. A copy of the ~~PDDL~~ license can be found here: ~~CC0~~ 1.0 ~~link.~~</p><ul><li>Pros<ul><li>License text is short and easy to understand.</li><li>License is familiar to the open source community and therefore would likely not to add significant friction to the adoption of SPDX.</li><li>Achieves object of having the data be considered public domain in those jurisdictions where data can be protected as intellectual property.</li><li>Permits the exchange of SPDX files under confidentiality terms.</li><li>Cons<ul><li>License was not designed to be used with data.</li><li>Use of the license implies that SPDX data is copyright protected.</li></ul></li></ul></li></ul><p> </p><p><strong><span style="text-decoration: underline;">No License Provided</span></strong></p><p>One option is to take the position that no license applies.</p><ul><li>Pros<ul><li>Easy to understand. Does not add friction to adoption of SPDX.</li><li>Promotes the idea that the SPDX data is not intellectual property (e.g., not copyrightable).</li><li>Permits the exchange of SPDX files under confidentiality terms.</li><li>Cons</li></ul></li></ul><p>Does not prevent one from trying to obtain controlling rights in jurisdictions where data is potentially considered intellectual property.</p>	+	<h1><strong>Overview</strong></h1><p>SPDX files represent a summary of license information extracted from software source code. The SPDX Legal working group evaluated different licenses that can be used to cover the data contained in a SPDX file. One challenge was that the working group did not want to imply that the data contained in a SPDX file is potentially copyright protected. On the other hand, in some jurisdictions, data could be considered intellectual property. In those jurisdictions the working group stride to provide a license that mitigates the risk of someone obtaining controlling IP rights over SPDX data. The following were the core requirements driving the license evaluation process. We sought a license that:</p><ul><li>does not imply that SPDX data is intellectual property;</li><li>in jurisdictions that permit data to be intellectual property - prevents others from claiming controlling ownership over the data contained in a SPDX file;</li><li>will not hinder adoption of the SPDX format by the open source community;</li><li>minimizes further license proliferation in the open source community;</li><li>permits the exchange of SPDX files under confidentiality terms (potentially temporarily) for special situations that may require it.</li></ul><p>After careful consideration the Creative Commons Zero 1.0 Universal license was chosen. The rationale for each of the license candidates considered can be found below.</p><h1><strong>License Candidates:</strong></h1><p><strong><span style="text-decoration: underline;">Public Domain Dedication and License (PDDL)</span></strong></p><p>PDDL is the current designated license for SPDX files as required by the SPDX 1.0 specification. PDDL was initially chosen because it was a “data” license. That is, it was initially design to be used with data as opposed to software or other copyrightable works. The reception of PDDL as the SPDX file data license has been mixed and somewhat controversial at times.  A copy of the PDDL license can be found here: http://opendatacommons.org/licenses/pddl/1.0/</p><ul><li>Pros<ul><li>Designed for licensing data.</li><li>Useful in jurisdictions where intellectual property rights are granted to data (bases).</li><li>Attempts to make data freely accessible (in a similar spirit that open source licenses do for software).</li><li>Permits the exchange of SPDX files under confidentiality terms.</li></ul></li></ul><p> </p><ul><li>Cons<ul><li>Lengthy license (6 pages) – will take time for people to review and understand.</li><li>Yet another new license for open source community to review, understand and accept. Would likely add friction to SPDX adoption.</li><li>A major open source foundation pointed out it would be hard to get PDDL approved by their organization as well as other foundations. This is especially true when considering a license that is not familiar to the community (as is the case with PDDL).</li><li>Use of the license implies that SPDX data is copyright protected.</li></ul></li></ul><p><strong><span style="text-decoration: underline;">MIT Style SPDX Draft</span></strong></p><p>The license text is based on the MIT open source license. A copy of the MIT Style license draft can be found in the appendix of this document.<strong></strong></p><ul><li>Pros<ul><li>Viewed more as a disclaimer notice than a data license. The intent is to view the SPDX file content as data as opposed to protected intellectual property.</li><li>Serves more as a license in jurisdictions where data is considered protectable intellectual property.</li><li>The license text is short and easy to understand.</li><li>The license is familiar to the open source community and would likely not add much friction to the adoption of SPDX.</li><li>Permits the exchange of SPDX files under confidentiality terms</li><li>Cons<ul><li>The license is based on the MIT open source license which was designed to be used with software as opposed to data.</li><li>Requires attribution. Many different SPDX files used in a project or supply chain may potentially require the publication of many different attribution notices.</li></ul></li></ul></li></ul><p> </p><p><strong><span style="text-decoration: underline;">CC0 1.0 - Universal Public Domain Dedication license </span></strong></p><p>Creative Commons (CC) is a non-profit organization devoted to expanding the range of creative works available for others to build upon legally and to share.  The organization has released several copyright-licenses known as “Creative Commons” licenses, free of charge to the public. One such license is the CC0 1.0 which allows one to contribute their work to the public domain. A copy of the CC0 1.0 license can be found here: http://creativecommons.org/publicdomain/zero/1.0/</p><ul><li>Pros<ul><li>License text is short and easy to understand.</li><li>License is familiar to the open source community and therefore would likely not to add significant friction to the adoption of SPDX.</li><li>Achieves object of having the data be considered public domain in those jurisdictions where data can be protected as intellectual property.</li><li>Permits the exchange of SPDX files under confidentiality terms.</li><li>Cons<ul><li>License was not designed to be used with data.</li><li>Use of the license implies that SPDX data is copyright protected.</li></ul></li></ul></li></ul><p> </p><p><strong><span style="text-decoration: underline;">No License Provided</span></strong></p><p>One option is to take the position that no license applies.</p><ul><li>Pros<ul><li>Easy to understand. Does not add friction to adoption of SPDX.</li><li>Promotes the idea that the SPDX data is not intellectual property (e.g., not copyrightable).</li><li>Permits the exchange of SPDX files under confidentiality terms.</li><li>Cons</li></ul></li></ul><p>Does not prevent one from trying to obtain controlling rights in jurisdictions where data is potentially considered intellectual property.</p>

← Older revision		Revision as of 20:33, 14 February 2012
Line 1:		Line 1:
−	<h1 align="center"><span style="font-family: Cambria;">Rationale for Choosing a License for SPDX Data</span></h1><h1><span style="font-size: x-large; font-family: Cambria;">Introduction</span></h1><p><span style="font-size: medium; font-family: Calibri;">SPDX files represent a summary of license information extracted from software source code. The SPDX Legal working group is evaluating different licenses that can be used to cover the data contained in a SPDX file. One challenge is that the working group does not want to imply that the data contained in a SPDX file is potentially copyright protected. On the other hand, in some jurisdictions, data could be considered intellectual property. In those jurisdictions the SPDX Legal working group seeks to provide a license that mitigates the risk of someone obtaining controlling IP rights over SPDX data.</span></p><p><span style="font-size: medium; font-family: Calibri;">The following are the core requirements driving the license evaluation process. We seek a license that:</span></p><ul><li><span style="font-size: medium; font-family: Calibri;">does not imply that SPDX data is intellectual property;</span></li><li><span style="font-size: medium; font-family: Calibri;">in jurisdictions that permit data to be intellectual property - prevents others from claiming controlling ownership over the data contained in a SPDX file;</span></li><li><span style="font-size: medium; font-family: Calibri;">will not hinder adoption of the SPDX format by the open source community;</span></li><li><span style="font-size: medium; font-family: Calibri;">minimizes further license proliferation in the open source community;</span></li><li><span style="font-size: medium; font-family: Calibri;">permits the exchange of SPDX files under confidentiality terms (potentially temporarily) for special situations that may require it. </span></li></ul><h1><span style="font-size: x-large; font-family: Cambria;">License Candidates</span></h1><p><strong><span style="text-decoration: underline;"><span style="font-size: medium;"><span style="font-family: Calibri;">Public Domain Dedication and License (PDDL)</span></span></span></strong></p><p><span style="font-size: medium; font-family: Calibri;">PDDL is the current designated license for SPDX files as required by the SPDX 1.0 specification. PDDL was initially chosen because it was a “data” license. That is, it was initially design to be used with data as opposed to software or other copyrightable works. The reception of PDDL as the SPDX file data license has been mixed and somewhat controversial at times.  A copy of the PDDL license can be found in the appendix of this document.</span></p><ul><li><span style="font-size: medium;">·</span>         <span style="font-size: medium; font-family: Calibri;">Pros</span><ul><li><span style="font-size: medium;">o</span>   <span style="font-size: medium; font-family: Calibri;">Designed for licensing data. </span></li><li><span style="font-size: medium;">o</span>   <span style="font-size: medium; font-family: Calibri;">Useful in jurisdictions where intellectual property rights are granted to data (bases).</span></li><li><span style="font-size: medium;">o</span>   <span style="font-size: medium; font-family: Calibri;">Attempts to make data freely accessible (in a similar spirit that open source licenses do for software).</span></li><li><span style="font-size: medium;">o</span>   <span style="font-size: medium; font-family: Calibri;">Permits the exchange of SPDX files under confidentiality terms.</span></li></ul></li></ul><p><span style="font-size: medium; font-family: Calibri;"> </span></p><ul><li><span style="font-size: medium;">·</span>         <span style="font-size: medium; font-family: Calibri;">Cons</span><ul><li><span style="font-size: medium;">o</span>   <span style="font-size: medium; font-family: Calibri;">Lengthy license (6 pages) – will take time for people to review and understand. </span></li><li><span style="font-size: medium;">o</span>   <span style="font-size: medium; font-family: Calibri;">Yet another new license for open source community to review, understand and accept. Would likely add friction to SPDX adoption.</span></li><li><span style="font-size: medium;">o</span>   <span style="font-size: medium; font-family: Calibri;">A major open source foundation pointed out it would be hard to get PDDL approved by their organization as well as other foundations. This is especially true when considering a license that is not familiar to the community (as is the case with PDDL).</span></li><li><span style="font-size: medium;">o</span>   <span style="font-size: medium; font-family: Calibri;">Use of the license implies that SPDX data is copyright protected.</span></li></ul></li></ul><p><span style="font-size: medium;"><span style="font-family: Calibri;"><strong><span style="text-decoration: underline;">MIT Style SPDX Draft</span></strong> </span></span></p><p><span style="font-size: medium;"><span style="font-family: Calibri;">The license text is based on the MIT open source license. A copy of the MIT Style license draft can be found in the appendix of this document.<strong></strong></span></span></p><ul><li><span style="font-size: medium;">·</span>         <span style="font-size: medium; font-family: Calibri;">Pros</span><ul><li><span style="font-size: medium;">o</span>   <span style="font-size: medium; font-family: Calibri;">Viewed more as a disclaimer notice than a data license. The intent is to view the SPDX file content as data as opposed to protected intellectual property. </span></li><li><span style="font-size: medium;">o</span>   <span style="font-size: medium; font-family: Calibri;">Serves more as a license in jurisdictions where data is considered protectable intellectual property.</span></li><li><span style="font-size: medium;">o</span>   <span style="font-size: medium; font-family: Calibri;">The license text is short and easy to understand. </span></li><li><span style="font-size: medium;">o</span>   <span style="font-size: medium; font-family: Calibri;">The license is familiar to the open source community and would likely not add much friction to the adoption of SPDX.</span></li><li><span style="font-size: medium;">o</span>   <span style="font-size: medium; font-family: Calibri;">Permits the exchange of SPDX files under confidentiality terms</span></li></ul></li><li><span style="font-size: medium;">·</span>         <span style="font-size: medium; font-family: Calibri;">Cons</span><ul><li><span style="font-size: medium;">o</span>   <span style="font-size: medium; font-family: Calibri;">The license is based on the MIT open source license which was designed to be used with software as opposed to data.</span></li><li><span style="font-size: medium;">o</span>   <span style="font-size: medium; font-family: Calibri;">Requires attribution. Many different SPDX files used in a project or supply chain may potentially require the publication of many different attribution notices. </span></li></ul></li></ul><p><span style="font-size: medium; font-family: Calibri;"> </span></p><p><strong><span style="text-decoration: underline;"><span style="font-size: medium;"><span style="font-family: Calibri;">CC0 1.0 - Universal Public Domain Dedication license </span></span></span></strong></p><p><span style="font-size: medium; font-family: Calibri;">Creative Commons (CC) is a non-profit organization devoted to expanding the range of creative works available for others to build upon legally and to share.  The organization has released several copyright-licenses known as “Creative Commons” licenses, free of charge to the public. One such license is the CC0 1.0 which allows one to contribute their work to the public domain. A copy of the CC0 1.0 license can be found in the appendix of this document. </span></p><ul><li><span style="font-size: medium;">·</span>         <span style="font-size: medium; font-family: Calibri;">Pros</span><ul><li><span style="font-size: medium;">o</span>   <span style="font-size: medium; font-family: Calibri;">License text is short and easy to understand. </span></li><li><span style="font-size: medium;">o</span>   <span style="font-size: medium; font-family: Calibri;">License is familiar to the open source community and therefore would likely not to add significant friction to the adoption of SPDX.</span></li><li><span style="font-size: medium;">o</span>   <span style="font-size: medium; font-family: Calibri;">Achieves object of having the data be considered public domain in those jurisdictions where data can be protected as intellectual property.</span></li><li><span style="font-size: medium;">o</span>   <span style="font-size: medium; font-family: Calibri;">Permits the exchange of SPDX files under confidentiality terms.</span></li></ul></li><li><span style="font-size: medium;">·</span>         <span style="font-size: medium; font-family: Calibri;">Cons</span><ul><li><span style="font-size: medium;">o</span>   <span style="font-size: medium; font-family: Calibri;">License was not designed to be used with data.</span></li><li><span style="font-size: medium;">o</span>   <span style="font-size: medium; font-family: Calibri;">Use of the license implies that SPDX data is copyright protected.</span></li></ul></li></ul><p><span style="font-size: medium; font-family: Calibri;"> </span></p><p><strong><span style="text-decoration: underline;"><span style="font-size: medium;"><span style="font-family: Calibri;">No License Provided</span></span></span></strong></p><p><span style="font-size: medium; font-family: Calibri;">One option is to take the position that no license applies. </span></p><ul><li><span style="font-size: medium;">·</span>         <span style="font-size: medium; font-family: Calibri;">Pros</span><ul><li><span style="font-size: medium;">o</span>   <span style="font-size: medium; font-family: Calibri;">Easy to understand. Does not add friction to adoption of SPDX.</span></li><li><span style="font-size: medium;">o</span>   <span style="font-size: medium; font-family: Calibri;">Promotes the idea that the SPDX data is not intellectual property (e.g., not copyrightable).</span></li><li><span style="font-size: medium;">o</span>   <span style="font-size: medium; font-family: Calibri;">Permits the exchange of SPDX files under confidentiality terms.</span></li></ul></li><li><span style="font-size: medium;">·</span>         <span style="font-size: medium; font-family: Calibri;">Cons</span></li></ul><p>Does not prevent one from trying to obtain controlling rights in jurisdictions where data is potentially considered intellectual property.</p>	+	<h1><strong>Overview</strong></h1><p>SPDX files represent a summary of license information extracted from software source code. The SPDX Legal working group evaluated different licenses that can be used to cover the data contained in a SPDX file. One challenge was that the working group did not want to imply that the data contained in a SPDX file is potentially copyright protected. On the other hand, in some jurisdictions, data could be considered intellectual property. In those jurisdictions the working group stride to provide a license that mitigates the risk of someone obtaining controlling IP rights over SPDX data. The following were the core requirements driving the license evaluation process. We sought a license that:</p><ul><li>does not imply that SPDX data is intellectual property;</li><li>in jurisdictions that permit data to be intellectual property - prevents others from claiming controlling ownership over the data contained in a SPDX file;</li><li>will not hinder adoption of the SPDX format by the open source community;</li><li>minimizes further license proliferation in the open source community;</li><li>permits the exchange of SPDX files under confidentiality terms (potentially temporarily) for special situations that may require it.</li></ul><p>After careful consideration the Creative Commons Zero 1.0 Universal license was chosen. The rationale for each of the license candidates considered can be found below.</p><h1><strong>License Candidates:</strong></h1><p><strong><span style="text-decoration: underline;">Public Domain Dedication and License (PDDL)</span></strong></p><p>PDDL is the current designated license for SPDX files as required by the SPDX 1.0 specification. PDDL was initially chosen because it was a “data” license. That is, it was initially design to be used with data as opposed to software or other copyrightable works. The reception of PDDL as the SPDX file data license has been mixed and somewhat controversial at times.  A copy of the PDDL license can be found here: PDDL link.</p><ul><li>Pros<ul><li>Designed for licensing data.</li><li>Useful in jurisdictions where intellectual property rights are granted to data (bases).</li><li>Attempts to make data freely accessible (in a similar spirit that open source licenses do for software).</li><li>Permits the exchange of SPDX files under confidentiality terms.</li></ul></li></ul><p> </p><ul><li>Cons<ul><li>Lengthy license (6 pages) – will take time for people to review and understand.</li><li>Yet another new license for open source community to review, understand and accept. Would likely add friction to SPDX adoption.</li><li>A major open source foundation pointed out it would be hard to get PDDL approved by their organization as well as other foundations. This is especially true when considering a license that is not familiar to the community (as is the case with PDDL).</li><li>Use of the license implies that SPDX data is copyright protected.</li></ul></li></ul><p><strong><span style="text-decoration: underline;">MIT Style SPDX Draft</span></strong></p><p>The license text is based on the MIT open source license. A copy of the MIT Style license draft can be found in the appendix of this document.<strong></strong></p><ul><li>Pros<ul><li>Viewed more as a disclaimer notice than a data license. The intent is to view the SPDX file content as data as opposed to protected intellectual property.</li><li>Serves more as a license in jurisdictions where data is considered protectable intellectual property.</li><li>The license text is short and easy to understand.</li><li>The license is familiar to the open source community and would likely not add much friction to the adoption of SPDX.</li><li>Permits the exchange of SPDX files under confidentiality terms</li><li>Cons<ul><li>The license is based on the MIT open source license which was designed to be used with software as opposed to data.</li><li>Requires attribution. Many different SPDX files used in a project or supply chain may potentially require the publication of many different attribution notices.</li></ul></li></ul></li></ul><p> </p><p><strong><span style="text-decoration: underline;">CC0 1.0 - Universal Public Domain Dedication license </span></strong></p><p>Creative Commons (CC) is a non-profit organization devoted to expanding the range of creative works available for others to build upon legally and to share.  The organization has released several copyright-licenses known as “Creative Commons” licenses, free of charge to the public. One such license is the CC0 1.0 which allows one to contribute their work to the public domain. A copy of the PDDL license can be found here: CC0 1.0 link.</p><ul><li>Pros<ul><li>License text is short and easy to understand.</li><li>License is familiar to the open source community and therefore would likely not to add significant friction to the adoption of SPDX.</li><li>Achieves object of having the data be considered public domain in those jurisdictions where data can be protected as intellectual property.</li><li>Permits the exchange of SPDX files under confidentiality terms.</li><li>Cons<ul><li>License was not designed to be used with data.</li><li>Use of the license implies that SPDX data is copyright protected.</li></ul></li></ul></li></ul><p> </p><p><strong><span style="text-decoration: underline;">No License Provided</span></strong></p><p>One option is to take the position that no license applies.</p><ul><li>Pros<ul><li>Easy to understand. Does not add friction to adoption of SPDX.</li><li>Promotes the idea that the SPDX data is not intellectual property (e.g., not copyrightable).</li><li>Permits the exchange of SPDX files under confidentiality terms.</li><li>Cons</li></ul></li></ul><p>Does not prevent one from trying to obtain controlling rights in jurisdictions where data is potentially considered intellectual property.</p>

← Older revision	Revision as of 05:53, 15 February 2012
(No difference)

← Older revision	Revision as of 05:51, 15 February 2012
(No difference)