Skip to content

Package uses deprecated license specifications and is not SPDX-compliant #111

Description

@btschwertfeger

The project project uses the deprecated license classifier in project.classifiers (License :: OSI Approved :: Apache Software License), see PEP 639. This one can be dropped as it is redundant to project.license.

It also does not declare a license which is SPDX-compliant (see https://spdx.org/licenses/).

It would be nice if the project adopts an SPDX license to make it easier for downstream projects to verify against a known set of accepted and verified licenses.

Validated through:

❯ pip3 download --no-deps pyjwkest
Collecting pyjwkest
  Using cached pyjwkest-1.4.4-py3-none-any.whl.metadata (2.6 kB)
Using cached pyjwkest-1.4.4-py3-none-any.whl (52 kB)
Saved ./pyjwkest-1.4.4-py3-none-any.whl
Successfully downloaded pyjwkest
❯ unzip -qo pyjwkest-1.4.4-py3-none-any.whl
❯ grep License pyjwkest-1.4.4.dist-info/METADATA
License: Apache 2.0 # <-- non-SPDX compliant
Classifier: License :: OSI Approved :: Apache Software License # <-- deprecated
License-File: LICENSE

The fix would be as simple as:

diff --git a/setup.py b/setup.py
index a8b5718..a18b5b5 100755
--- a/setup.py
+++ b/setup.py
@@ -35,13 +35,12 @@ setup(
     long_description=io.open('README.rst', encoding='utf-8').read() if exists("README.rst") else "",
     author="Roland Hedberg",
     author_email="roland@catalogix.se",
-    license="Apache 2.0",
+    license="Apache-2.0",
     url='https://github.com/IdentityPython/pyjwkest',
     packages=["jwkest"],
     package_dir={"": "src"},
     classifiers=[
         "Development Status :: 4 - Beta",
-        "License :: OSI Approved :: Apache Software License",
         "Topic :: Software Development :: Libraries :: Python Modules",
         "Programming Language :: Python :: 2.7",
         "Programming Language :: Python :: 3.5"],

which can be verified via:

❯ uv build .
❯ unzip -qo dist/pyjwkest-1.4.4-py3-none-any.whl
❯ grep License pyjwkest-1.4.4.dist-info/METADATA
License: Apache-2.0
License-File: LICENSE

Happy to provide a PR after approval!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions