On Fri, Nov 24, 2023 at 2:07 PM Mark Wielaard <mark(a)klomp.org> wrote:
But then for the Hybrid BSD license that parts of bzip and valgrind
uses it actually has different identifiers depending on the version of
the package (it actually has both bzip2-1.0.5 and bzip2-1.0.6 which are
literally exactly the same except for the version string and the
copyright year).
Ah, now I see that bzip2-1.0.5 is deprecated by SPDX in favor of
bzip2-1.0.6:
https://spdx.org/licenses/bzip2-1.0.5.html
If I understand the explanation correctly, anything that is a match
for bzip2-1.0.5 should also be a match for bzip2-1.0.6, so the latter
should be used. (Jilayne probably has direct knowledge of the history
there.)
Richard