Extending the license policy to include Apache-2.0

[Andreas Cord-Landwehr]

On Mittwoch, 15. September 2021 21:50:13 CEST Luigi Toscano wrote:
> Alexander Potashev ha scritto:
> > Hi,
> > 
> > Parts of https://invent.kde.org/websites/aether-sass/ are licensed
> > under Apache License 2.0. This disagrees with the KDE licensing
> > policy.
> > 
> > Considering Apache-2.0 is similar to MIT, I don't see why it shouldn't
> > be allowed by the policy. Is anyone aware of past discussions of the
> > KDE licensing policy and reasoning behind this fact?
> 
> It was previously discussed (and sadly rejected) here:
> https://mail.kde.org/pipermail/kde-community/2019q4/005618.html

Hi, now with the very recent release of openssl 3.0 [1], I think we have to 
eventually face the question what to do in this regard. But the not too small 
number of historic GPL-2.0-only files [2] yet is a problem.

Cheers,
Andreas

[1] https://www.openssl.org/blog/blog/2021/09/07/OpenSSL3.Final/
[2] tivial script that only covers files with SPDX-tags though:
~~~
grep -r SPDX-License-Identifier --include "*.cpp" --include "*.c" \
   --include "*.hpp" --include "*.h" --include "*.cmake" | cut -f2- -d: | \
   sed 's/.*SPDX-License-Identifier://g'| sed 's/[ |\*]*$//g'|sort | uniq -c
~~~