Licensing Policy: Accepting Apache 2 for oss-fuzz related files

[Neal Gompa]

On Fri, May 30, 2025 at 5:54 AM Albert Astals Cid <aacid at kde.org> wrote:
>
> We are trying to move most of the oss-fuzz related files to our reops instead
> of being in https://github.com/google/oss-fuzz/
>
> This will allow us to not have to depend on other people to merge changes in
> them which sometimes creates a bit of friction.
>
> The problem is that those files are licenses under Apache 2 which is not
> mentioned in https://community.kde.org/Policies/Licensing_Policy
>
> I would like to propose that we add a point 18 to the policy that says
>
> 18. Files involved in the oss-fuzz tooling can be licensed under the Apache
> License 2.0
>
> Comments?
>
> Please see
> https://invent.kde.org/frameworks/karchive/-/merge_requests/125/diffs
> for one of the various places we would use it.
>

Why not maintain our own oss-fuzz repo where all this is contained?
The karchive MR seems to pollute the project with weird binary files
and such. I'd rather those not be in the repo.


-- 
真実はいつも一つ！/ Always, there's only one truth!