Thanks Richard. I was unaware of the XML versions. So, this would mean that SPDX considers what Debian calls the MIT (Expat) license to match what SPDX calls MIT because the differences are all either considered by SPDX to be omittable or replaceable as demonstrated by the tags in the XML file and the text colors in the HTML version. On Wednesday, January 18, 2023 12:52:23 PM MST Richard Fontana wrote: > The SPDX definition of "MIT" is given in > https://github.com/spdx/license-list-XML/blob/main/src/MIT.xml > Based on a lot of experience now, you really have to consult the XML > files rather than rely on the convenience publication of license texts > at https://spdx.org/licenses > > Based on that, and https://www.debian.org/legal/licenses/mit, and > https://spdx.github.io/spdx-spec/v2.3/license-matching-guidelines-and-templa > tes/ > > I think the answer is that what Debian calls "MIT (Expat)" on that > page matches what SPDX calls "MIT" (I don't think they are "the same" > because the underlying concepts of what a license is and so forth are > not the same). > > Richard -- Soren Stoutner soren@stoutner.com
Attachment:
signature.asc
Description: This is a digitally signed message part.