Apache-1.0+ license lost when converting from SPDX 2 to SPDX 3

[vargenau]

apacheplus.spdx.json
apacheplus.spdx3.json

In SPDX 2, we have an Apache-1.0+ license.

After converting to SPDX3, this license is lost and becomes NoAssertionLicense.

[anthonyharrison]

@vargenau

Apache-1.0+ is not a valid SPDX licence identifier. Any invalid identifiers will revert to NOASSERTION.

[vargenau]

Hi Anthony,

It is a valid license expression:
https://spdx.github.io/spdx-spec/v2.3/SPDX-license-expressions/

It a license id with the "+" operator, meaning this version and any later version.

[anthonyharrison]

@vargenau I was aware of the + being used in licences such as GPL-2.0+ to iindicate GPL version 2 or later, although this was presevred for legacy reasons. I wasn't aware (maybe because I have never seen it used) that the + continues to apply for non-GNU licences, Will look into with issue #89

[vargenau]

Yes, I was also confused when they replaced GPL-2.0+ with GPL-2.0-or-later etc.
But "+" is still valid for other licenses, e.g. Apache-1.0+ means Apache-1.0 OR Apache-1.1 OR Apache-2.0.