SPDX specification licensing

[xEverth]

Hello dear maintainer,
In a former issue it was mentioned that the licensing of the package is in accordance with the SPDX specification, which at the time was licensed under CC-BY-3.0 : https://spdx.github.io/spdx-spec/v2.3/

The SPDX spec itself is CC-BY licensed, and so is this package.

Not sure why a copy of the MIT License was included. Removed in 7d437e9.

Thanks for pointing this out!

Originally posted by @kemitchell in #1

In its latest iteration, the SPDX spec itself appears to have been relicensed under the Community Specification License 1.0:
https://spdx.github.io/spdx-spec/v3.0.1/
https://spdx.github.io/spdx-spec/v3.0.1/licenses/Community-Spec-1.0/

IANAL, but from my understanding this updated licensing gives freedom to publish under different licenses as long as there is compliance with the attribution clause from sect. 1.2.

Would you please verify if this package publishing the list of spdx-exceptions may be released under updated, permissive terms?

Thank you,
Samuele

[kemitchell]

Thanks for pointing out the new license grant on the SPDX spec. I've taken this up with SPDX's legal working group. It's not immediately clear to me how the new license applies or what it requires from this package.