project: move from spdx-license-list to spdx-lookup
Metadata
Current evaluation
Merged a dependency update replacing the removed PyPI package spdx-license-list with spdx-lookup. Approved by three reviewers across five changed files to restore license lookup functionality.
Suggested action: —
No scores available.
Issue body
It looks like the spdx-license-list package was wholesale removed from PyPI, which is a pretty big breakage for us. The spdx-lookup isn't specially well updated, but it looks like it has the (very few) things we need from it.
- [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
-----
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Merged a dependency update replacing the removed PyPI package spdx-license-list with spdx-lookup. Approved by three reviewers across five changed files to restore license lookup functionality. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged a dependency update replacing the removed PyPI package spdx-license-list with spdx-lookup. This resolves project breakage by adopting a functional alternative that satisfies minimal SPDX license requirements. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged. Replaced the deleted spdx-license-list dependency with spdx-lookup to resolve PyPI removal breakage and restore license lookup functionality. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #1110 fix(project): link to spdx spec | craft-application | merged | Merged a one-line change adding a link to the SPDX specification. Approved by two reviewers and passed CI checks, successfully updating the project to reference the official SPDX spec URL. |