Forums : Suggestions for Ohloh 2.0
Dear Open Hub Users,
We’re excited to announce that we will be moving the Open Hub Forum to
https://community.blackduck.com/s/black-duck-open-hub.
Beginning immediately, users can head over,
register,
get technical help and discuss issue pertinent to the Open Hub. Registered users can also subscribe to Open Hub announcements here.
On May 1, 2020, we will be freezing https://www.openhub.net/forums and users will not be able to create new discussions. If you have any questions and concerns, please email us at
info@openhub.net
Hi, Our project page on ohloh lists ...
Hi,
Our project page on ohloh lists that we have files in the MPL and CPL license. Looking through the source tree, I could not find these. Is there a way to get a list of those files?
This would be very interesting for us, as we are very careful with licenses and try to improve further.
Hi Stefan,
I did some digging and I think I have answers for you.
It looks like the coreboot source control servers are offline right now, so I can't absolutely confirm what I've found.
First, the CPL license was found in the LZMA decoder libraries. In the LinuxBIOSv2 repository, that's src/lib/lzmadecode.*. In LinuxBIOSv3, that's lib/lzmadecode.* and util/lzma/C/7zip/Decompress/LzmaDecode.*.
I took a look in these files, and it appears this is one of those pick one
licenses that trips Ohloh. You have your choice between GPL and CPL. Clearly, you'll be choosing GPL, but Ohloh's license sniffer isn't smart enough to identify optional licenses. The best we can do currently is say there may
be a conflict. So this is clearly a false alarm from Ohloh.
The next case, MPL, I think is a correct detection. It's in the LinuxBIOSv3 repository at lib/clog2.c. Looking back over the history, it looks like this was once a GPL file, but then at somepoint a new algorithm replaced the old one, and the code is now MPL.
One of the things I would love to get working on our site is the ability to drill into the license reports to see the files we have flagged, and actually read the contents of the files. So much to do, so little time....
Let me know if you have more questions,
Robin
