Technical Team/Use Cases/2.0/Project maintainer incorporates another project by including binary
From SPDX Wiki
- Title: Project maintainer incorporates another project by including binary
- Primary Actor: Member of upstream maintainer team
- Goal in Context: To include another project by including its binaries, and reference the SPDX data from the incorporated project.
- Stakeholders and Interests:
- Upstream maintainers:
- To communicate the licensing information for their copyrightable artifacts including the included project.
- To have their licenses respected
- Incorporated Project maintainers:
- To have their licenses respected
- Consumers of upstreams copyrightable artifacts:
- To receive accurate and clear information of licensing of artifacts
- To be able to comply easily with licenses for artifacts
- To be able to subset, extend, or aggregate artifacts and pass on clear authoritative verifiable license for the resulting new copyrightable artifacts.
- Upstream maintainers:
- Preconditions:
- Incorporated project maintainers have selected licenses for the copyrightable artifacts originating with the project (package, files, etc) and incorporated SPDX data into their source code.
- Upstream has indentified license data for other copyrightable artifacts they consume
- Main Success Senario: Upstream communicates accurate complete licensing information for their copyrightable artifacts in an SPDX data format including the information for the incorporated project.
- Failed End Condition: Upstream communicates inaccurate incomplete licensing information for their copyrightable artifacts.
- Trigger:
- Incorporate of another projects source code.
- Notes: