project: move from spdx-license-list to spdx-lookup
Metadata
Current evaluation
Merged PR #168 as commit 7609b585, replacing the PyPI-removed spdx-license-list dependency with spdx-lookup to restore license lookup functionality.
Resolution: closed resolved
Reason: PR #168 was merged into the mainline as commit 7609b585, swapping the unavailable spdx-license-list package for spdx-lookup.
Evaluated by: mr-cal-bot
No scores available.
Issue body
It looks like the spdx-license-list package was wholesale removed from PyPI, which is a pretty big breakage for us. The spdx-lookup isn't specially well updated, but it looks like it has the (very few) things we need from it.
- [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
-----
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #168 as commit 7609b585, replacing the PyPI-removed spdx-license-list dependency with spdx-lookup to restore license lookup functionality. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #168 as commit 7609b585, replacing the PyPI-removed spdx-license-list dependency with spdx-lookup and updating SPDX license validation. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #168 (commit 7609b585) replaced the deleted spdx-license-list package with spdx-lookup>=0.3.3: pyproject dependency swapped and project.py license validation now uses spdx_lookup.by_id(). No spdx_license_list references remain. | |
| stealth/space-bunny-alpha | — | closed resolved | PR #168 by tigarmo merged as commit 7609b585, swapping the PyPI-removed spdx-license-list dependency for spdx-lookup (pyproject.toml, rockcraft/models/project.py) after review approval. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged #168 (commit 7609b585), replacing the PyPI-removed spdx-license-list with spdx-lookup to restore license lookup functionality. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged a dependency update replacing the removed PyPI package spdx-license-list with spdx-lookup. Approved by three reviewers across five changed files to restore license lookup functionality. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged a dependency update replacing the removed PyPI package spdx-license-list with spdx-lookup. This resolves project breakage by adopting a functional alternative that satisfies minimal SPDX license requirements. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #169 Review SPDX package | rockcraft | open | Maintainer-raised request to replace the discontinued spdx-license-list dependency; #168 used spdx-lookup as a stop-gap and JJMC89's recreated spdx-license-list is proposed but rockcraft still depends on spdx-lookup 0.3.3 |