[tz] [PATCH v2 1/4] zic.8: Add public domain notice
eggert at cs.ucla.edu
Fri Nov 25 00:54:53 UTC 2022
On 2022-11-23 12:31, Brian Inglis via tz wrote:
> No public domain notices appear in the *.?.txt source files or in the
> generated man pages.
You're right, my mistake. I thought they were there, but they're not.
> It may be useful to specify that the document, data, program, and source
> files for all components are in the public domain in the LICEN[CS]E
<https://man7.org/linux/man-pages/man7/man-pages.7.html> doesn't mention
such a section. It does mention a COPYRIGHT section but says it's often
omitted, so for that project we should be OK.
> It would also be useful if you also added SPDX licence comments like
> man-pages after either your line(s) or theirs, such as:
> .\" SPDX-License-Identifier: LicenseRef-IANA-TZ-Public-Domain
> .\" SPDX-FileCopyrightText: project authors [suggested]
> and also in the generated output?, as it may save downstreams doing so
> as licensing requirements are enforced by packaging tools and repos.
So far we've managed to avoid SPDX, SBOM, CycloneDX, VEX, VDR, etc. And
since the source code states in multiple places that TZDB is "by no
means authoritative" there is some argument for continuing to avoid the
maintenance overhead of software supply chain component analysis.
Since that area is evolving perhaps we'll be better off letting
downstream users deal with it as needed, at least for now. And maybe it
can be contributed upstream to us later as needed, I hope simply by
adding a file or two.
More information about the tz