spdx2dep

2 min read Original article ↗

spdx2dep - An SPDX to DEP5 converter

spdx2dep converts SPDX meta data into dep5 format. The meta data is taken from the REUSE tool (reuse lint --json). The dep5 output can be used to create a debian/copyright.

Status of the project

It is active and in constant development. Don't hesitate to voice your wishes and opinions by utilizing the issue section.

February 2026

The Team

The initial developer and sole maintainer is buhtz.

Donations are collected via Liberapay and Ko-fi, but going to him as a person, not a specific project, though much of the support also benefits this project.

Technologies & Standards

Table of contents

Installation

There are two ways to install this application: For users and for developers contributing to the application's development.

Regular installation for users

See the Releases section or run the following command to install the latest stable release from upstream repository:

$ pipx install https://codeberg.org/buhtz/spdx2dep/archive/v0.0.1.zip

If pipx is not available on your system check your GNU/Linux distributions package repository or install it from PyPi (pip install pipx).

spdx2dep is not yet available in a GNU Linux distribution and there are no plans to release it on PyPi.

Editable installation for developers to contribute

First of all fork/clone/copy the repository to your local machine.

$ git clone https://codeberg.org/buhtz/spdx2dep.git
$ cd spdx2dep

Use a virtual environment and the extra [develop].

# Create the environment
$ python3 -m venv .venv

# Activate the environment
$ source .venv/bin/activate

# Install
$ pip3 install --editable .[develop]

When you are finished with your working session, don't forget to deactivate the environment.

$ deactivate

Usage

# cd into a repository offering SPDX/REUSE meta data
$ spdx2dep

Donations

Please see team section.

Licensing of contributed material

Please keep in mind that code, documentation and other material submitted to the project are considered licensed under the same terms (see LICENSES) as the rest of the work. The project does use the specifications from REUSE Software and SPDX to store license and copyright information.