py_wheel license metadata still non-SPDX text despite setup.py fix in https://github.com/protocolbuffers/protobuf/pull/9441
Author: btschwertfegerCreated Aug 26, 2026Updated Sep 8, 2026
Labelsbugwait for user action
The license of the Python package is still not SPDX compliant despite the efforts taken in https://github.com/protocolbuffers/protobuf/pull/9441.
uv venv .venv
uv pip install protobuf
cat .venv/lib/python3.11/site-packages/protobuf-7.36.0.dist-info/METADATA | grep -E "^Version|License"
License: 3-Clause BSD License
Version: 7.36.0
3-Clause BSD License is not SPDX-compliant and thus causes missing license information in PEP 639-aware SBOM tooling requiring SPDX-compliant licenses.
I assume the fix would be to change this line here: https://github.com/protocolbuffers/protobuf/blob/7b091ee68eb1b9482197b4b0b79fe6e72d4315fb/python/dist/BUILD.bazel#L366
to the value of: https://github.com/protocolbuffers/protobuf/blob/7b091ee68eb1b9482197b4b0b79fe6e72d4315fb/python/dist/setup.py#L73
... or getting rid of the redundancy at all.
Source: protocolbuffers/protobuf