[Catalog-sig] [PSF-Board] Troubled by changes to PyPI usage agreement

[M.-A. Lemburg]

Steve Holden wrote:
> M.-A. Lemburg wrote:
>> The version I proposed restricts those permissions to redistribution by the
>> PSF - which is enough to run PyPI services:
>>
>> """
>> PyPI is a service provided by the PSF. In order to be able to distribute the content you upload to
>> PyPI to web site users, the PSF asks you to agree to and affirmatively acknowledge the following:
>>
>> 1. Content is restricted to Python packages and related information only.
>>
>> 2. Any content uploaded to PyPI is provided on a non-confidential basis.
>>
>> 3. The PSF is granted an irrevocable, worldwide, royalty-free, nonexclusive license to reproduce,
>> distribute, transmit, display, perform, and publish the content, including in digital form. This
>> licence is for the sole purpose of enabling the PSF to display, distribute and promote the content
>> on PyPI.
>>
>> 4. I represent and warrant that I have complied with all government regulations concerning the
>> transfer or export of any content I upload to the PyPI servers in The Netherlands. In particular, if
>> I am subject to United States law, I represent and warrant that I have obtained the proper
>> governmental authorization for the export of the content I upload. I further affirm that any content
>> I provide is not intended for use by a government end-user as defined in part 772 of the United
>> States Export Administration Regulations.
>> """
>>
> 
> In (4) I would change "... upload. I further affirm" to "... upload, and
> further affirm". Incorporating both assertions into a single sentence
> clarifies that only those subject to US law are required to make that
> declaration. The exception seems prudent given that the PSF is
> incorporated in the USA.

That's a tricky one: That extra sentence "I further affirm..."
introduces a restriction that goes beyond what US developers
normally have to follow. And the way it is written, it also
applies to developers not affected by US law.

However, that restriction basically says that PyPI package
may never be intended for use by government end-users, which
IMHO goes way too far - we have quite a few government users...

I'd just drop that extra limitation, since the first sentence
already covers all restrictions that a government may have
imposed on such uploads.

> The second version does seem much more user-friendly, somehow, and
> should calm fears about potential abuse of content by the Foundation.
> 
> Are we going to go with that?

-- 
Marc-Andre Lemburg
eGenix.com

Professional Python Services directly from the Source  (#1, Jan 23 2010)
>>> Python/Zope Consulting and Support ...        http://www.egenix.com/
>>> mxODBC.Zope.Database.Adapter ...             http://zope.egenix.com/
>>> mxODBC, mxDateTime, mxTextTools ...        http://python.egenix.com/
________________________________________________________________________

::: Try our new mxODBC.Connect Python Database Interface for free ! ::::


   eGenix.com Software, Skills and Services GmbH  Pastor-Loeh-Str.48
    D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg
           Registered at Amtsgericht Duesseldorf: HRB 46611
               http://www.egenix.com/company/contact/