← Watch feed
fixed reuse errors caused by version bump, converted dep5 to toml
Public commit record
50/100 · Thin
What the developer wrote
Authored by Matt Gleason
fixed reuse errors caused by version bump, converted dep5 to toml
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
What changed, and why it matters
This commit is a housekeeping change. It removes an old license metadata file (.reuse/dep5) and replaces it with a newer TOML-format file (REUSE.toml). It also updates a build helper script (Justfile) to remove a now-unnecessary command-line flag from the reuse license-linting tool. There is no change to the firmware code that runs on the Passport device, so it cannot directly affect device security or user funds.
Recommended action
No security action needed. Treat as a normal licensing/CI maintenance commit.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff converts the project’s REUSE (license compliance) configuration from the deprecated dep5 format to REUSE.toml, updating path glob syntax and SPDX annotation structure accordingly. The only non-metadata change is in ports/stm32/Justfile: the lint-license recipe drops the –suppress-deprecation flag because the deprecated dep5 file is gone. No source code, build logic, cryptography, or hardware interfaces are modified.
Changed components
.reuse/dep5 (deleted)REUSE.toml (new)ports/stm32/JustfileInspect captured patch +71 / −112
diff --git a/.reuse/dep5 b/.reuse/dep5
deleted file mode 100644
index 7f68a76..0000000
--- a/.reuse/dep5
+++ /dev/null
@@ -1,111 +0,0 @@
-Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
-Upstream-Name: Passport
-Upstream-Contact: hello@foundationdevices.com
-Source: https://git.example.com/FoundationDevices/passport2
-
-Files:
- extmod/crypto-algorithms/*
-Copyright: Brad Conte (brad AT bradconte.com)
-License: Unlicense
-
-Files:
- extmod/re1.5/*
-Copyright: Copyright (c) 2007-2009 Russ Cox, Google Inc.
-License: BSD-3-Clause
-
-Files: extmod/trezor-firmware/*
-Copyright: Copyright (c) SatoshiLabs
-License: GPL-3.0-only
-
-Files: extmod/uzlib/*
-Copyright: Copyright (c) 2003 by Joergen Ibsen / Jibz
-License: Zlib
-
-Files: ports/stm32/boards/Passport/common/micro-ecc/*
-Copyright: Copyright (c) 2014, Kenneth MacKay
-License: BSD-2-Clause
-
-Files: ports/stm32/pybcdc.inf_template
-Copyright:
- Copyright (c) 2000 Microsoft Corporation
- Copyright (C) 2007 Microchip Technology Inc.
- Copyright (c) 2016-2021 Damien P. George (http://micropython.org/)
-License: MIT
-
-Files:
- extmod/virtpin.c
- extmod/virtpin.h
-Copyright: Copyright (c) 2016 Paul Sokolovsky
-License: MIT
-
-Files:
- extmod/misc.h
- extmod/uos_dupterm.c
- extmod/utime_mphal.c
- extmod/utime_mphal.h
-Copyright:
- Copyright (c) 2013-2016 Damien P. George
- Copyright (c) 2016 Paul Sokolovsky
-License: MIT
-
-Files:
- MP-*.md
- MP-ACKNOWLEDGEMENTS
- docs/*
- drivers/*
- examples/*
- extmod/axtls-include/*
- extmod/bufhelper.c
- extmod/bufhelper.h
- extmod/btstack/*
- extmod/extmod.cmake
- extmod/extmod.mk
- extmod/lwip-include/*
- extmod/machine_*.c
- extmod/machine_*.h
- extmod/mod*.c
- extmod/mod*.h
- extmod/mpbthci.c
- extmod/mpbthci.h
- extmod/network_cyw43.c
- extmod/network_cyw43.h
- extmod/nimble/*
- extmod/uasyncio/*
- extmod/vfs*.c
- extmod/vfs*.h
- extmod/webrepl/*
- lib/*
- ports/stm32/*.c
- ports/stm32/*.h
- ports/stm32/*.mk
- ports/stm32/*.py
- ports/stm32/*.s
- ports/stm32/autoflash
- ports/stm32/boards/*.cfg
- ports/stm32/boards/*.ld
- ports/stm32/Makefile
- ports/stm32/README.md
- ports/unix/*
- py/*
- tests/*
- tools/*
- .gitattributes
- logo/*
- mpy-cross/*
-Copyright: Copyright (c) 2016-2021 Damien P. George (http://micropython.org/)
-License: MIT
-
-Files:
- ports/stm32/boards/Passport/images/*/*.png
- ports/stm32/boards/Passport/bootloader/images/*/*.png
- SECURITY/*.png
- simulator/*.png
- simulator/*.jpg
- version.txt
- flake.lock
-Copyright: © 2021 Foundation Devices, Inc. <hello@foundationdevices.com>
-License: GPL-3.0-or-later
-
-Files: .github/actions/rust-toolchain/action.yml
-Copyright: 2021 David Tolnay <dtolnay@gmail.com>
-License: MIT
diff --git a/REUSE.toml b/REUSE.toml
new file mode 100644
index 0000000..682947e
--- /dev/null
+++ b/REUSE.toml
@@ -0,0 +1,70 @@
+version = 1
+SPDX-PackageName = "Passport"
+SPDX-PackageSupplier = "hello@foundationdevices.com"
+SPDX-PackageDownloadLocation = "https://git.example.com/FoundationDevices/passport2"
+
+[[annotations]]
+path = "extmod/crypto-algorithms/**"
+precedence = "aggregate"
+SPDX-FileCopyrightText = "Brad Conte (brad AT bradconte.com)"
+SPDX-License-Identifier = "Unlicense"
+
+[[annotations]]
+path = "extmod/re1.5/**"
+precedence = "aggregate"
+SPDX-FileCopyrightText = "Copyright (c) 2007-2009 Russ Cox, Google Inc."
+SPDX-License-Identifier = "BSD-3-Clause"
+
+[[annotations]]
+path = "extmod/trezor-firmware/**"
+precedence = "aggregate"
+SPDX-FileCopyrightText = "Copyright (c) SatoshiLabs"
+SPDX-License-Identifier = "GPL-3.0-only"
+
+[[annotations]]
+path = "extmod/uzlib/**"
+precedence = "aggregate"
+SPDX-FileCopyrightText = "Copyright (c) 2003 by Joergen Ibsen / Jibz"
+SPDX-License-Identifier = "Zlib"
+
+[[annotations]]
+path = "ports/stm32/boards/Passport/common/micro-ecc/**"
+precedence = "aggregate"
+SPDX-FileCopyrightText = "Copyright (c) 2014, Kenneth MacKay"
+SPDX-License-Identifier = "BSD-2-Clause"
+
+[[annotations]]
+path = "ports/stm32/pybcdc.inf_template"
+precedence = "aggregate"
+SPDX-FileCopyrightText = ["", "Copyright (c) 2000 Microsoft Corporation", "Copyright (C) 2007 Microchip Technology Inc.", "Copyright (c) 2016-2021 Damien P. George (http://micropython.org/)"]
+SPDX-License-Identifier = "MIT"
+
+[[annotations]]
+path = ["extmod/virtpin.c", "extmod/virtpin.h"]
+precedence = "aggregate"
+SPDX-FileCopyrightText = "Copyright (c) 2016 Paul Sokolovsky"
+SPDX-License-Identifier = "MIT"
+
+[[annotations]]
+path = ["extmod/misc.h", "extmod/uos_dupterm.c", "extmod/utime_mphal.c", "extmod/utime_mphal.h"]
+precedence = "aggregate"
+SPDX-FileCopyrightText = ["", "Copyright (c) 2013-2016 Damien P. George", "Copyright (c) 2016 Paul Sokolovsky"]
+SPDX-License-Identifier = "MIT"
+
+[[annotations]]
+path = ["MP-**.md", "MP-ACKNOWLEDGEMENTS", "docs/**", "drivers/**", "examples/**", "extmod/axtls-include/**", "extmod/bufhelper.c", "extmod/bufhelper.h", "extmod/btstack/**", "extmod/extmod.cmake", "extmod/extmod.mk", "extmod/lwip-include/**", "extmod/machine_**.c", "extmod/machine_**.h", "extmod/mod**.c", "extmod/mod**.h", "extmod/mpbthci.c", "extmod/mpbthci.h", "extmod/network_cyw43.c", "extmod/network_cyw43.h", "extmod/nimble/**", "extmod/uasyncio/**", "extmod/vfs**.c", "extmod/vfs**.h", "extmod/webrepl/**", "lib/**", "ports/stm32/**.c", "ports/stm32/**.h", "ports/stm32/**.mk", "ports/stm32/**.py", "ports/stm32/**.s", "ports/stm32/autoflash", "ports/stm32/boards/**.cfg", "ports/stm32/**.cfg", "ports/stm32/boards/**.csv", "ports/stm32/boards/**.ld", "ports/stm32/Makefile", "ports/stm32/README.md", "ports/unix/**", "py/**", "tests/**", "tools/**", ".gitattributes", "logo/**", "mpy-cross/**"]
+precedence = "aggregate"
+SPDX-FileCopyrightText = "Copyright (c) 2016-2021 Damien P. George (http://micropython.org/)"
+SPDX-License-Identifier = "MIT"
+
+[[annotations]]
+path = ["ports/stm32/boards/Passport/images/**/**.png", "ports/stm32/boards/Passport/bootloader/images/**/**.png", "SECURITY/**.png", "simulator/**.png", "simulator/**.jpg", "version.txt", "flake.lock", "ports/stm32/boards/Passport/.clang-format"]
+precedence = "aggregate"
+SPDX-FileCopyrightText = "© 2021 Foundation Devices, Inc. <hello@foundationdevices.com>"
+SPDX-License-Identifier = "GPL-3.0-or-later"
+
+[[annotations]]
+path = ".github/actions/rust-toolchain/action.yml"
+precedence = "aggregate"
+SPDX-FileCopyrightText = "2021 David Tolnay <dtolnay@gmail.com>"
+SPDX-License-Identifier = "MIT"
diff --git a/ports/stm32/Justfile b/ports/stm32/Justfile
index ad54283..75774d1 100644
--- a/ports/stm32/Justfile
+++ b/ports/stm32/Justfile
@@ -59,7 +59,7 @@ lint-code: lint-py lint-c
# Lint the licensing
lint-license:
- reuse --suppress-deprecation lint
+ reuse lint
# Lint all of the project
lint: lint-code lint-license
Risk score
Our methodology →Why this scored 15/100
Human-validated context
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
No validated notes yet.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.