Fedora 43 native package

license-validate

Validate SPEC license string

Packages / Fedora 43 / Unspecified / license-validate

[Source: license-validate]

Package: license-validate (31-1.fc43)

External Resources:

Homepage: [github.com]

Validate SPEC license string

Validate whether the license string conforms to Fedora Licensing.

Other Packages Related to license-validate:

dep: (python3dist(lark) or python3dist(lark-parser))
Package not available
dep: /usr/bin/python3
Package not available
dep: [fedora-license-data] (>= 1.18)
Fedora Linux license data
dep: python3dist(specfile)
Package not available

Download license-validate

Architecture	Package Size	Installed Size	Files
noarch	17 KiB	18 KiB	[list of files]

Package file paths (10)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

/usr/bin/license-fedora2spdx
/usr/bin/license-validate
/usr/share/doc/license-validate
/usr/share/doc/license-validate/README.md
/usr/share/licenses/license-validate
/usr/share/licenses/license-validate/LICENSE
/usr/share/license-validate
/usr/share/license-validate/grammar-shortnames.lark
/usr/share/man/man1/license-fedora2spdx.1.gz
/usr/share/man/man1/license-validate.1.gz

Field source: Fedora 43 updates x86_64 revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try Fedora 43 in the browser Build an image that includes license-validate

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
31-1.fc43	43 / updates	noarch	Fedora 43 · updates · x86_64	17 KiB	18 KiB	Packages/l/license-validate-31-1.fc43.noarch.rpm
31-1.fc43	43 / updates	noarch	Fedora 43 · updates · aarch64	17 KiB	18 KiB	Packages/l/license-validate-31-1.fc43.noarch.rpm
25-4.fc43	43 / everything	noarch	Fedora 43 · Everything · x86_64	17 KiB	17 KiB	Packages/l/license-validate-25-4.fc43.noarch.rpm
25-4.fc43	43 / everything	noarch	Fedora 43 · Everything · aarch64	17 KiB	17 KiB	Packages/l/license-validate-25-4.fc43.noarch.rpm

Field source: Fedora 43 updates x86_64 revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a

Checksums and observation dates

For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.

31-1.fc43 / noarchObserved Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 5fbe0c9434dec498aa46c6284ed5c5aa42ae2f6552fb57efb9199e64d37fef1f

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s  %s\n' '5fbe0c9434dec498aa46c6284ed5c5aa42ae2f6552fb57efb9199e64d37fef1f' 'license-validate-31-1.fc43.noarch.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 updates x86_64 revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a

31-1.fc43 / noarchObserved Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 5fbe0c9434dec498aa46c6284ed5c5aa42ae2f6552fb57efb9199e64d37fef1f

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s  %s\n' '5fbe0c9434dec498aa46c6284ed5c5aa42ae2f6552fb57efb9199e64d37fef1f' 'license-validate-31-1.fc43.noarch.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 updates aarch64 revision 43-updates-aarch64:ac6921c749da1e864e0971122151b63bb17e427965b3d9f9312a07b49ff10cac

25-4.fc43 / noarchObserved Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 51a1bf00a73ee7410fbe57832ef062e9498647fc96efe139b51443f24e333085

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s  %s\n' '51a1bf00a73ee7410fbe57832ef062e9498647fc96efe139b51443f24e333085' 'license-validate-25-4.fc43.noarch.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 Everything x86_64 revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2

25-4.fc43 / noarchObserved Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 51a1bf00a73ee7410fbe57832ef062e9498647fc96efe139b51443f24e333085

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s  %s\n' '51a1bf00a73ee7410fbe57832ef062e9498647fc96efe139b51443f24e333085' 'license-validate-25-4.fc43.noarch.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 Everything aarch64 revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2

Catalog record completeness

The completeness score measures metadata coverage, not software quality, security, compatibility, or suitability.

Summary and description: 25/25
Artifact path and source digest: 25/25
Dependency metadata: 15/15
Package-file index: 15/15
Homepage: 5/5
License text: 5/5
Source package or maintainer: 10/10

Recorded total: 100/100

Field source: Fedora 43 Everything aarch64 revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2, Fedora 43 Everything x86_64 revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2, Fedora 43 updates aarch64 revision 43-updates-aarch64:ac6921c749da1e864e0971122151b63bb17e427965b3d9f9312a07b49ff10cac, Fedora 43 updates x86_64 revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a. The cross-OS mapping is catalog-derived from the source-reported homepage; it does not establish authorship or publisher identity

Sources and provenance

Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.

Fedora 43 Everything aarch64Sep 1, 2026
Authoritative source; repository metadata signature verified, revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=fedora-43&arch=aarch64
Signed-object SHA-256
6c2a7b7225a6bd12acd5c95dcd0350a0a5929e195692ff68eb31db0ee6b9897b
Signer fingerprint
Not recorded
Keyring revision
RPM-GPG-KEY-fedora-43-primary
SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: Not recorded
Expected SHA-256: Not recorded
Observed SHA-256: Not recorded
Result: match verified
Fedora 43 Everything x86_64Sep 1, 2026
Authoritative source; repository metadata signature verified, revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=fedora-43&arch=x86_64
Signed-object SHA-256
42c0002750de6066124693fff143f4854c1e29474d893f7e6a7616012d41338f
Signer fingerprint
Not recorded
Keyring revision
RPM-GPG-KEY-fedora-43-primary
SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: Not recorded
Expected SHA-256: Not recorded
Observed SHA-256: Not recorded
Result: match verified
Fedora 43 updates aarch64Sep 1, 2026
Authoritative source; repository metadata signature verified, revision 43-updates-aarch64:ac6921c749da1e864e0971122151b63bb17e427965b3d9f9312a07b49ff10cac
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=updates-released-f43&arch=aarch64
Signed-object SHA-256
0af1807dead0a1d28599a942743e244fe57da21cf6a935b3e4155f4a3f1070a1
Signer fingerprint
Not recorded
Keyring revision
RPM-GPG-KEY-fedora-43-primary
SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: Not recorded
Expected SHA-256: Not recorded
Observed SHA-256: Not recorded
Result: match verified
Fedora 43 updates x86_64Sep 1, 2026
Authoritative source; repository metadata signature verified, revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=updates-released-f43&arch=x86_64
Signed-object SHA-256
3ae5fecc3db8c7b4ce0cf54a8ea572ed4694e7e132e201c2f6ab6570259d1061
Signer fingerprint
Not recorded
Keyring revision
RPM-GPG-KEY-fedora-43-primary
SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: Not recorded
Expected SHA-256: Not recorded
Observed SHA-256: Not recorded
Result: match verified