THE SPDX WIKI IS NO LONGER ACTIVE. ALL CONTENT HAS BEEN MOVED TO https://github.com/spdx

Difference between revisions of "Technical Team/Use Cases/2.0/Downstream consumers contributing patches to provide SPDX data to an upstream that doesnt have it"

From SPDX Wiki
Jump to: navigation, search
 
Line 1: Line 1:
<p>&nbsp;</p><ol style="color: #4d4d4d; font-family: Arial, Helvetica, sans-serif; font-size: 13px;"><li><strong>Title:</strong>&nbsp;Downstream consumers contributing patches to provide SPDX data to an upstream that doesn't have it.</li><li><strong>Primary Actor:</strong>&nbsp;Downstream consumer</li><li><strong>Goal in Context:</strong>&nbsp;The downstream consumer would like to provide SPDX data to an upstream that doesn't have it such that upstream will accept it as representing their licensing and incorporate it into their source base.</li><li><strong>Preconditions:</strong>&nbsp;<ol><li>Downstream consumer has analyzed upstream and assembled SPDX data matching what can be discovered about it.</li><li>Downstreams analysis is acceptable to upstream.</li></ol></li><li><strong>Stakeholders and Interests:</strong>&nbsp;<ol><li><strong>Downstream Consumer providing patch:</strong>&nbsp;<ol><li>To move their analysis of the licensing information of the software into the upstream so that it can be shared from the root of the software</li><li>To gain legitimacy for their analysis by its acceptance by upstream.</li></ol></li><li><strong>Upstream maintainers:&nbsp;</strong><ol><li>To be able to document the license information for their project.</li><li>To have their licenses respected</li></ol></li><li><strong>Third party patch appliers (think Yocto):</strong><ol><li>To be able to know whether or not they have licensing issues when they apply a patch to upstream.</li></ol></li><li><strong>Consumers of upstream source:</strong><ol><li>To receive accurate and clear information of licensing of upstream source</li><li>To be able to comply easily with licenses for upstream source</li><li>To be able to subset, extend, or aggregate artifacts and pass on clear authoritative verifiable license for the resulting new copyrightable artifacts.</li></ol></li></ol></li><li><strong>Main Success Senario:</strong>&nbsp;Patch supplier communicates that their patch is licensed matching the SPDX data specified for the project.</li><li><strong>Failed End Condition:</strong>&nbsp;Patch supplier doesn't communicates inaccurate incomplete licensing information for their patch.</li><li><strong>Trigger:</strong><ol><li>Creation of a patch</li></ol></li></ol><p>&nbsp;</p>
+
<p>&nbsp;</p><ol style="color: #4d4d4d; font-family: Arial, Helvetica, sans-serif; font-size: 13px;"><li><strong>Title:</strong>&nbsp;Downstream consumers contributing patches to provide SPDX data to an upstream that doesn't have it.</li><li><strong>Primary Actor:</strong>&nbsp;Downstream consumer</li><li><strong>Goal in Context:</strong>&nbsp;The downstream consumer would like to provide SPDX data to an upstream that doesn't have it such that upstream will accept it as representing their licensing and incorporate it into their source base.</li><li><strong>Preconditions:</strong>&nbsp;<ol><li>Downstream consumer has analyzed upstream and assembled SPDX data matching what can be discovered about it.</li><li>Downstreams analysis is acceptable to upstream.</li></ol></li><li><strong>Stakeholders and Interests:</strong>&nbsp;<ol><li><strong>Downstream Consumer providing patch:</strong>&nbsp;<ol><li>To move their analysis of the licensing information of the software into the upstream so that it can be shared from the root of the software</li><li>To gain legitimacy for their analysis by its acceptance by upstream.</li></ol></li><li><strong>Upstream maintainers:&nbsp;</strong><ol><li>To be able to document the license information for their project.</li><li>To have their licenses respected</li></ol></li><li><strong>Consumers of upstream source:</strong><ol><li>To receive accurate and clear information of licensing of upstream source</li><li>To be able to comply easily with licenses for upstream source</li><li>To be able to subset, extend, or aggregate artifacts and pass on clear authoritative verifiable license for the resulting new copyrightable artifacts.</li></ol></li></ol></li><li><strong>Main Success Senario:</strong>&nbsp;Upstream accepts SPDX data from downstream as being an accurate reflection of their licensing information and incorporates it into their source base.</li><li><strong>Failed End Condition:</strong>&nbsp;Upstream does not accept SPDX data from downstream and incorporate them into their source base.&nbsp;</li><li><strong>Trigger:</strong><ol><li>Submission of SPDX data to upstream for incorporation.</li></ol></li></ol><p>&nbsp;</p>

Revision as of 14:24, 22 May 2012

 

  1. Title: Downstream consumers contributing patches to provide SPDX data to an upstream that doesn't have it.
  2. Primary Actor: Downstream consumer
  3. Goal in Context: The downstream consumer would like to provide SPDX data to an upstream that doesn't have it such that upstream will accept it as representing their licensing and incorporate it into their source base.
  4. Preconditions: 
    1. Downstream consumer has analyzed upstream and assembled SPDX data matching what can be discovered about it.
    2. Downstreams analysis is acceptable to upstream.
  5. Stakeholders and Interests: 
    1. Downstream Consumer providing patch: 
      1. To move their analysis of the licensing information of the software into the upstream so that it can be shared from the root of the software
      2. To gain legitimacy for their analysis by its acceptance by upstream.
    2. Upstream maintainers: 
      1. To be able to document the license information for their project.
      2. To have their licenses respected
    3. Consumers of upstream source:
      1. To receive accurate and clear information of licensing of upstream source
      2. To be able to comply easily with licenses for upstream source
      3. To be able to subset, extend, or aggregate artifacts and pass on clear authoritative verifiable license for the resulting new copyrightable artifacts.
  6. Main Success Senario: Upstream accepts SPDX data from downstream as being an accurate reflection of their licensing information and incorporates it into their source base.
  7. Failed End Condition: Upstream does not accept SPDX data from downstream and incorporate them into their source base. 
  8. Trigger:
    1. Submission of SPDX data to upstream for incorporation.