[Debian-med-packaging] Bug#952603: python-tinyalign: license of buildwheels.sh is CC0

[tony mancill]

On Wed, Feb 26, 2020 at 12:22:14PM -0700, Sean Whitton wrote:
> Hello Andreas,
> 
> On Wed 26 Feb 2020 at 05:00PM +01, Andreas Tille wrote:
> 
> > Hi Sean,
> >
> > On Wed, Feb 26, 2020 at 08:18:54AM -0700, Sean Whitton wrote:
> >> Following the GitHub trail suggests that buildwheels.sh has license CC0
> >> not Expat.
> >
> > Do you have a link where we can get Copyright and license from?
> 
> https://github.com/pypa/python-manylinux-demo is the repo mentioned in
> the script; that's where I looked.

Hi Sean,

The buildwheels.sh in tinyalign is a derived work (there are multiple
non-trivial modifications) from the upstream build-wheels.sh in
pypa/python-manylinux-demo project, so I'm not sure that it's correct to
say that it is necessarily licensed under the CC0.  That is, since
CC0 is a "no rights reserved" license, what is prevent the author of the
derived work from releasing under MIT without attribution?

I am basing that on my reading of the CC0 [1] and its FAQ [2],
specifically the statement:

   CC0 is a useful tool for clarifying that you do not claim
   copyright in a work anywhere in the world.

IANAL and I'm not trying to bikeshed the license question, but it seems
to me that works derived from CC0-licensed works might be different in
this regard.  I patched the debian/copyright in [3] to refer to the
original work and its CC0 license, but stopped short of indicating that
the file in tinyalign is licensed under the CC0 because that seems to
impinge upon the rights of author of the derived work.

Does that address your concerns with the copyright for this file?

Thank you,
tony

[1] https://creativecommons.org/share-your-work/public-domain/cc0/
[2] https://wiki.creativecommons.org/wiki/CC0_FAQ
[3] https://salsa.debian.org/med-team/python-tinyalign/-/commit/66aa3198205eaf7ce23c73132dcec9e667d372ac
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/debian-med-packaging/attachments/20200406/4e7d69a1/attachment.sig>