#29440·protobuf

py_wheel license metadata still non-SPDX text despite setup.py fix in https://github.com/protocolbuffers/protobuf/pull/9441

Author: btschwertfegerCreated Aug 26, 2026Updated Sep 8, 2026
Labelsbugwait for user action

The license of the Python package is still not SPDX compliant despite the efforts taken in https://github.com/protocolbuffers/protobuf/pull/9441.

uv venv .venv
uv pip install protobuf

cat .venv/lib/python3.11/site-packages/protobuf-7.36.0.dist-info/METADATA | grep -E "^Version|License"
License: 3-Clause BSD License
Version: 7.36.0

3-Clause BSD License is not SPDX-compliant and thus causes missing license information in PEP 639-aware SBOM tooling requiring SPDX-compliant licenses.

I assume the fix would be to change this line here: https://github.com/protocolbuffers/protobuf/blob/7b091ee68eb1b9482197b4b0b79fe6e72d4315fb/python/dist/BUILD.bazel#L366

to the value of: https://github.com/protocolbuffers/protobuf/blob/7b091ee68eb1b9482197b4b0b79fe6e72d4315fb/python/dist/setup.py#L73

... or getting rid of the redundancy at all.

Source: protocolbuffers/protobuf