Repository navigation
Package uses deprecated license specifications and is not SPDX-compliant #111
Description
The project project uses the deprecated license classifier in project.classifiers (License :: OSI Approved :: Apache Software License), see PEP 639. This one can be dropped as it is redundant to project.license.
It also does not declare a license which is SPDX-compliant (see https://spdx.org/licenses/).
It would be nice if the project adopts an SPDX license to make it easier for downstream projects to verify against a known set of accepted and verified licenses.
Validated through:
❯ pip3 download --no-deps pyjwkest
Collecting pyjwkest
Using cached pyjwkest-1.4.4-py3-none-any.whl.metadata (2.6 kB)
Using cached pyjwkest-1.4.4-py3-none-any.whl (52 kB)
Saved ./pyjwkest-1.4.4-py3-none-any.whl
Successfully downloaded pyjwkest
❯ unzip -qo pyjwkest-1.4.4-py3-none-any.whl
❯ grep License pyjwkest-1.4.4.dist-info/METADATA
License: Apache 2.0 # <-- non-SPDX compliant
Classifier: License :: OSI Approved :: Apache Software License # <-- deprecated
License-File: LICENSEThe fix would be as simple as:
diff --git a/setup.py b/setup.py
index a8b5718..a18b5b5 100755
--- a/setup.py
+++ b/setup.py
@@ -35,13 +35,12 @@ setup(
long_description=io.open('README.rst', encoding='utf-8').read() if exists("README.rst") else "",
author="Roland Hedberg",
author_email="roland@catalogix.se",
- license="Apache 2.0",
+ license="Apache-2.0",
url='https://github.com/IdentityPython/pyjwkest',
packages=["jwkest"],
package_dir={"": "src"},
classifiers=[
"Development Status :: 4 - Beta",
- "License :: OSI Approved :: Apache Software License",
"Topic :: Software Development :: Libraries :: Python Modules",
"Programming Language :: Python :: 2.7",
"Programming Language :: Python :: 3.5"],which can be verified via:
❯ uv build .
❯ unzip -qo dist/pyjwkest-1.4.4-py3-none-any.whl
❯ grep License pyjwkest-1.4.4.dist-info/METADATA
License: Apache-2.0
License-File: LICENSEHappy to provide a PR after approval!
Activity