Skip to content

Use SPDX expressions in LICENSE-3rdparty.csv and list bundled libzstd - #10

Merged
JSGette merged 1 commit into
mainfrom
jsgette/oss-3rdparty-spdx
Nov 3, 2026
Merged

JSGette merged 1 commit into
mainfrom
jsgette/oss-3rdparty-spdx

Conversation

@JSGette

@JSGette JSGette commented Nov 3, 2026

Copy link
Copy Markdown
Owner

What does this PR do?

  • fnv, id-arena and zstd-sys used slash notation (MIT/Apache-2.0), which is not an SPDX expression. They now read MIT OR Apache-2.0.
  • zstd-sys compiles the vendored zstd C library into the conduit binary, so libzstd (BSD-3-Clause OR GPL-2.0-only, Meta Platforms) is now listed as its own component.

Check: every License value in the CSV parses as an SPDX expression against the SPDX license list.

Part of preparing conduit for transfer to the DataDog organization as an open source repository.

Checklist

  • Tests added/updated
  • Documentation updated
  • No secrets or internal references included

fnv, id-arena and zstd-sys used slash notation ("MIT/Apache-2.0"),
which is not an SPDX expression. Datadog's OSS policy requires SPDX
identifiers in the License column.

zstd-sys compiles the vendored zstd C library into the conduit binary,
so libzstd (BSD-3-Clause OR GPL-2.0-only) is distributed with it and
must be tracked as its own component.
@JSGette
JSGette merged commit 009fcf3 into main Nov 3, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant