taskSavannah Administration - Tasks: task #15759, Submission of STUMP

 
 

task #15759: Submission of STUMP

Submitter:  Tristan Miller <psychonaut>
Submitted:  Mon 24 Aug 2020 09:11:26 AM UTC
   
 
Should Start On:  Mon 24 Aug 2020 12:00:00 AM UTC Should be Finished on:  Thu 03 Sep 2020 12:00:00 AM UTC
Category:  Project Approval Priority:  * 5 - Normal
Status:  Done Privacy:  Public
Assigned to:  ineiev Open/Closed:  Closed
* Mandatory Fields

Add a New Comment Rich Markup
   

Jump to the original submission

Thu 08 Oct 2020 10:52:21 AM UTC, comment #9: 

Thank you, approving.

Ineiev <ineiev>
Site Administrator
Tue 06 Oct 2020 02:14:17 PM UTC, comment #8: 

Attached is a new tarball with the following changes:

1. All files to which the CC BY licence applies either have the copyright and licence notice embedded, or where this is not possible, are explicitly listed in a README file in the same directory.

2. The CC BY licence is included in the top-level directory as a plain text file.

3. Copyright and licence notices have been added to all files in the bundled PGPMoose package, these notices reproduce the entire text of the PGPMoose licence.

(file #49926)

Tristan Miller <psychonaut>
Tue 29 Sep 2020 11:33:23 AM UTC, comment #7: 

Thank you!

> I disagree; a mere directory of personal identifiers
> with an objective inclusion criteria is not copyrightable


That may be evident for you, the maintainer of the package,
that it's just a directory of personal identifiers
and that their criteria of inclusion are objective,
but other people may not see this so clear.

data.dist/README says,


To the extent that they are copyrightable, the following notice
applies to the files in this directory:


The main point of adding the notices to every file is making
it easier for other people to re-use them in other software packages,
https://www.gnu.org/licenses/gpl-faq.html#NoticeInSourceFile
https://www.gnu.org/licenses/gpl-faq.html#LicenseCopyOnly

If the files are not listed explicitly, it's very easy to get wrong when copying this to other package or even adding new files to this directory.

While at it, data.dist/README and other files refer
to the CC BY license, but no copy of the license
can be easily found in the tarball.

Please make sure that other files have valid copyright
and license notices as well, for example,
etc.dist/messages/charter lacks them,
local/README has no valid copyright notice,
local/bin/pmcheck has no license notice, and the copyright
notice is ambiguous and doesn't follow the convention.

Ineiev <ineiev>
Site Administrator
Wed 23 Sep 2020 07:50:17 PM UTC, comment #6: 

Greetinsg.


comment #5:

> > I don't see how pubring.pgp can be copyrightable. It contains nothing but PGP public keys, which are cryptographically generated mathematical objects.
>
> This isn't clear for me.  Besides the bit sequences generated from random data, it contains at least a number of user IDs.  They sum up to an amount that may be copyrightable.


I disagree; a mere directory of personal identifiers with an objective inclusion criteria is not copyrightable, per Feist Publications, Inc., v. Rural Telephone Service Co., 499 U.S. 340 (1991) in the United States and similar rulings and laws in other jurisdictions.  Nonetheless, out of an abundance of caution I have added a README conditionally listing a putative licence in the event that the work is somehow, somewhere copyrightable.

> > If you want me to do this now, in advance of the Savannah entry being created, then let me know how I should provide the revised tarball (should I just attach it to this issue?).
>
> Yes, this is what I usually ask for.


OK, I am attaching a new tarball.  This one includes documentation (since the author has confirmed to us its licence) and copyright notices (either in-file or in READMEs) for the remaining nontrivial files.

(file #49856)

Tristan Miller <psychonaut>
Mon 14 Sep 2020 10:27:35 AM UTC, comment #5: 

comment #4:

>
> I don't see how pubring.pgp can be copyrightable. It contains nothing but PGP public keys, which are cryptographically generated mathematical objects.


This isn't clear for me.  Besides the bit sequences generated from random data, it contains at least a number of user IDs.  They sum up to an amount that may be copyrightable.

> If you want me to do this now, in advance of the Savannah entry being created, then let me know how I should provide the revised tarball (should I just attach it to this issue?).


Yes, this is what I usually ask for.

Ineiev <ineiev>
Site Administrator
Thu 10 Sep 2020 05:05:04 PM UTC, comment #4: 

comment #3:

> Copyrightable files like data.dist/pubring.pgp, etc.dist/moderators, etc.dist/README lack valid copyright and license notices.


I don't see how pubring.pgp can be copyrightable. It contains nothing but PGP public keys, which are cryptographically generated mathematical objects.

With respect to the other non-source files containing textual data, we have confirmed with the original maintainer that these are licensed under CC BY and can add copyright notices to this effect.  If you want me to do this now, in advance of the Savannah entry being created, then let me know how I should provide the revised tarball (should I just attach it to this issue?).

Tristan Miller <psychonaut>
Fri 04 Sep 2020 08:47:55 AM UTC, comment #3: 

Thank you!

Copyrightable files like data.dist/pubring.pgp, etc.dist/moderators, etc.dist/README lack valid copyright and license notices.

When the format of the file doesn't allow for such comments, they should be written in a README file in the same directory with the files in question.

Ineiev <ineiev>
Site Administrator
Thu 03 Sep 2020 01:19:17 PM UTC, comment #2: 

comment #1:

> Before we proceed, could you ask the GNU Project update the records of the packages in files like maintainers.bypkg?


Should be done now.

Tristan Miller <psychonaut>
Tue 01 Sep 2020 10:57:15 AM UTC, comment #1: 

Hello, Tristan, and thank you for taking over these packages!

Before we proceed, could you ask the GNU Project update the records of the packages in files like maintainers.bypkg?

Ineiev <ineiev>
Site Administrator
Mon 24 Aug 2020 09:11:26 AM UTC, original submission:  

A new project has been registered at Savannah
This project account will remain inactive until a site admin approves
or discards the registration.


Registration Administration


While this item will be useful to track the registration process,
approving or discarding the registration must be done using the specific Group Administration page, accessible only to site administrators,
effectively logged as site administrators (superuser):



Registration Details


  • Name: STUMP
  • System Name:  stump
  • Type: Official GNU software
  • License: GNU General Public License v3 or later





Description:

STUMP (Secure Team-based Usenet Moderation Program) is a portable robomoderator for Usenet newsgroups, written in Perl, C, and shell scripts.  The software intercepts articles posted to moderated newsgroups, places them in a queue, and allows teams of moderators to accept or reject them.  Accepted articles are then posted to the relevant newsgroup(s) (along with the necessary approval headers).  Rejected articles are redirected to the bit bucket, and a rejection message can optionally be e-mailed to the poster.


Other Software Required:

STUMP currently requires a C compiler to build, and the following software to run:


Additionally, in the local/ directory, STUMP bundles a rather ancient version of PGP Moose <http://seer-grog.net/pgpmoose.html>, a third-party package that is released under what looks like a simple, custom-written permissive free software licence.  (The full text of the licence is also available in the local/ directory.)  This licence should be compatible with the GPL but in any case PGP Moose is only ever invoked from a shell script, so it remains a distinct (and distictly licensed) package.  As part of our cleanup work (see below) we will probably decouple and migrate this dependency to PGP Moose 2.0 <http://wiki.killfile.org/projects/usenet/pgpmoose/>, which is released under the same terms as Perl.



Other Comments:

I and the two other members of the Big-8 Management Board (Jason Evans, whose Savannah username is jsevans, and Rayner Lucas, whose Savannah username is rayner) have just been appointed by the GNU project as official maintainers of STUMP and WebSTUMP.  We are taking over from the original author, Igor Chudov.  STUMP and WebSTUMP have been GNU packages since 9 November 1998 but until now have been hosted on Mr. Chudov's personal website.  While the packages as handed over to us by Mr. Chudov do not currently follow the rules and guidelines for GNU packages, we will bring them into compliance as a matter of priority, and ask that they be accepted on Savannah now so that we can do this cleanup work with the benefit of Savannah's source control and issue tracking facilities.  (So far the only cleanup work we have done is to add copyright and licence headers to all applicable files.)



Tarball URL:

https://savannah.gnu.org/submissions_uploads/STUMP.tar.gz


Tristan Miller <psychonaut>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

Attached Files
file #49926:  STUMP.tar.gz added by psychonaut (219KiB - application/gzip)
file #49856:  STUMP.tar.gz added by psychonaut (231KiB - application/gzip)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by ineiev (Posted a comment)
  • -email is unavailable- added by psychonaut (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 6 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2020-10-08 ineiev StatusIn Progress Done
        Open/ClosedOpen Closed
    2020-10-06 psychonaut Attached File- Added STUMP.tar.gz, #49926
    2020-09-23 psychonaut Attached File- Added STUMP.tar.gz, #49856
    2020-09-01 ineiev StatusNone In Progress
        Assigned toNone ineiev

    Back to the top

    Powered by Savane 3.13-758e.
    Corresponding source code