Curation for PyPI Pillow package

[dangoor]

As seen from all of the previous curations, Pillow is licensed HPND.

See also the license file.

[capfei]

@dangoor It looks like this PR has more than a curation in it. Did you mean to include a GitHub action, README update and updating the package.json?

[dangoor]

🤦 That's what I get for doing this manually (we were seeing issues with tooling not being able to open PRs for some reason). I'll fix this.

[dangoor]

OK, fixed!

[capfei]

@dangoor Thanks for the update!

I have had this discussion about other Pillow curations but I think this should be updated to MIT-CMU. Following the SPDX matching guidelines, this is a match. Also, SPDX uses Pillow as a reference to this license.
https://spdx.org/licenses/MIT-CMU.html

What do you think?

[dangoor]

@capfei Interesting that it's a text match for MIT-CMU. In fact, it looks like the text is a match for MIT-CMU but not for HPND despite the fact that Pillow's license file says it's HPND

I think you're right that the more correct license is MIT-CMU.

[AE49]

@ariel11 for visibility on this because the license says "HPND", however, as @capfei pointed out the SPDX match is MIT-CMU.

[dangoor]

It may be worth opening a pull request with the Pillow project to change the license file to remove the HPND sentence, since it's incorrect.

[ariel11]

@capfei - what should we do here? Technically, with the colored font on the SPDX templates, one could determine the pillow license (this portion) matches the HPND or MIT-CMU SPDX identifiers. I agree the MIT-CMU is the more complete SPDX identifier but then the pillow license calls itself HPND. Thoughts on opening an Issue or PR on this with pillow?

[capfei]

Sorry for the long delay here. I have opened an issue with Pillow asking about either changing the license name to MIT-CMU or simply listing the SPDX identifer in the license file.
python-pillow/Pillow#7942

HPND does not include the first paragraph in the matchable text so I would argue that it is not a match to HPND since the first paragraph looks to be a part of the license text.