licencias: campo license en la receta — de 0 a 228 de 1141, sin re-hashear nada

La deuda legal bloqueante del SDD 19 §2.1. Medido hoy: **0 de 1141 recetas** declaraban licencia, no «5 de 771» como decía el informe anterior. Los dos números estaban mal: los «5» eran falsos positivos de `grep license` (el paquete `addlicense`, el paquete `cargo-bundle-licenses`, una línea `install .../share/licenses/` y un comentario), y las recetas son 1141. Contar con `grep -l <palabra>` sobre TOML cuenta comentarios y nombres, no campos; `scripts/licencias.sh` cuenta el campo de verdad (clave en la raíz, antes del primer `[table]`). LO QUE HACE LA DEUDA PAGABLE: `Recipe::hash_inputs` es una LISTA BLANCA — sólo entran source, compiler, target, link, patches, flags, phases y deps. `license` no entra, igual que `evidence` y `slots`. Por eso se puede poblar en las recetas YA SELLADAS sin mover un solo ArtifactHash. Verificado, no supuesto: en 40 recetas modificadas se comparó el hash con y sin la línea — 40 idénticos, 0 cambiados. Si el campo entrara al hash, declarar la licencia costaría reconstruir el corpus entero y no se haría nunca. Clavado con el test `licencia_round_trip_y_no_afecta_el_hash`. TRAMPA DE TOML: una clave suelta después de un `[table]` pertenece a esa tabla. Puesta al final del fichero, `license` acaba dentro de `[deps]` y se pierde EN SILENCIO, porque serde ignora los campos que no conoce — no hay error, simplemente no está. Va arriba, junto a `name` y `version`; el sembrador la inserta tras `version`. NO SE ADIVINA. Declarar mal una licencia es peor que dejarla vacía: convierte un hueco visible en una afirmación falsa. Sólo se puebla desde una tabla curada entrada por entrada (`docs/licencias-conocidas.tsv`); lo que no tiene evidencia queda vacío y se CUENTA. Concretamente se descartó el atajo «k* = KDE ⇒ LGPL»: en este catálogo `kail`, `kind`, `ko`, `kopia`, `krew`, `kustomize`, `kyverno`, `katana`, `kibi`, `kmon` y toda la familia `kube*` son herramientas Go sin relación con KDE. El nombre no es evidencia. Quedan 913, casi todas CLIs Go/Rust importados en masa — y ésas sí son automatizables con evidencia real: Cargo.toml trae el campo `license` y los módulos Go traen su LICENSE en el árbol. El cierre estructural es capturarlo en la fase de fetch, que ya descarga y extrae cada tarball, y inyectar el texto en `hammer pack` (aguas abajo del ArtifactHash) en vez de en la fase install (que sí re-hashearía). De paso, respaldo-storagebox.sh reordenado por valor irreemplazable y con zstd: medido en la oficina, el uplink da 8 Mbps iguales por cable y por wifi ⇒ 128 G no caben en una sentada, así que sube primero el cerebro (estado + repo) y `--partial-dir` hace que cortar a mitad de un artefacto no tire lo ya subido. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-08-07 10:24:11 -04:00
parent b12ea3ac9d
commit 346cd59706
232 changed files with 687 additions and 19 deletions
@@ -5,6 +5,7 @@
 # --disable-python: los bindings pyalsa exigen headers de python + no hacen falta. Sin deps externas.
 name    = "alsa-lib"
 version = "1.2.14"
+license = "LGPL-2.1-or-later"

 [source]
 tarball = "https://www.alsa-project.org/files/pub/lib/alsa-lib-1.2.14.tar.bz2"
@@ -4,6 +4,7 @@
 # cmake instalado. KF6DocTools se degrada a opcional (evita docbook).
 name    = "ark"
 version = "25.04.3"
+license = "GPL-2.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/release-service/25.04.3/src/ark-25.04.3.tar.xz"
@@ -4,6 +4,7 @@
 # CMakeLists: solo Qt6 Core+Network. NO tiene option(WITH_X11).
 name    = "attica"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/attica-6.27.0.tar.xz"
@@ -2,6 +2,7 @@
 # not found" y el escritorio se ve sin iconos. CMake/ECM; SKIP_SANDBOX + iconos SVG (no rasteriza).
 name    = "breeze-icons"
 version = "6.27.0"
+license = "LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/breeze-icons-6.27.0.tar.xz"
@@ -3,6 +3,7 @@
 # (dynamic, wrapper zig). Wayland-puro: sin dep X11-session pesada. -DWITH_WALLPAPERS=OFF (opcional, pesado).
 name    = "breeze"
 version = "6.7.2"
+license = "GPL-2.0-or-later"
 [source]
 tarball = "https://download.kde.org/stable/plasma/6.7.2/breeze-6.7.2.tar.xz"
 sha256  = "80818bf6382a96e1a45c755f983d98357c4f7163f80cb8217897df15f8a02785"
@@ -6,6 +6,7 @@
 # tarball (ya trae -fpic -fPIC, soname libbz2.so.1.0). Nombre distinto para no colisionar con el canónico.
 name    = "bzip2-shared"
 version = "1.0.8"
+license = "bzip2-1.0.6"

 [source]
 tarball = "https://sourceware.org/pub/bzip2/bzip2-1.0.8.tar.gz"
@@ -2,6 +2,7 @@
 # Patrón KF6 app. baloo (búsqueda de archivos → lmdb) queda opcional/ausente (degrada sin search).
 name    = "dolphin"
 version = "25.04.3"
+license = "GPL-2.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/release-service/25.04.3/src/dolphin-25.04.3.tar.xz"
@@ -7,6 +7,7 @@
 # libpng.pc → zlib); sin ellos pkg-config no resuelve freetype2 y ./configure aborta (gotcha .pc transitivo).
 name    = "fontconfig-shared"
 version = "2.18.1"
+license = "MIT"

 [source]
 tarball = "https://gitlab.freedesktop.org/api/v4/projects/890/packages/generic/fontconfig/2.18.1/fontconfig-2.18.1.tar.xz"
@@ -11,6 +11,7 @@
 # no hay brotli sellado (sólo afecta fuentes WOFF2). zlib/png dinámicos vía las variantes -shared.
 name    = "freetype-shared"
 version = "2.14.3"
+license = "FTL OR GPL-2.0-or-later"

 [source]
 tarball = "https://download.savannah.gnu.org/releases/freetype/freetype-2.14.3.tar.xz"
@@ -3,6 +3,7 @@
 # zig, ECM). Usa Qt6Sql (DB de actividades sqlite) + PlasmaActivities + KIO.
 name    = "kactivitymanagerd"
 version = "6.7.2"
+license = "GPL-2.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/plasma/6.7.2/kactivitymanagerd-6.7.2.tar.xz"
@@ -2,6 +2,7 @@
 # -Wl,--fatal-warnings (ECM lo agrega, zig lo rechaza), CMAKE_PREFIX_PATH=/usr, ECM + qttools + dbus.
 name    = "karchive"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/karchive-6.27.0.tar.xz"
@@ -2,6 +2,7 @@
 # Patrón KF6 app + ktexteditor. musl-fts por si usa fts. DocTools/doc opcionales.
 name    = "kate"
 version = "25.04.3"
+license = "LGPL-2.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/release-service/25.04.3/src/kate-25.04.3.tar.xz"
@@ -5,6 +5,7 @@
 # sin él cae al backend "fake"/dummy (no bloquea). No usa ki18n.
 name    = "kauth"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kauth-6.27.0.tar.xz"
@@ -3,6 +3,7 @@
 # Qt6 Widgets+Xml. Deps KF6 (del CMakeLists): kconfig, kcoreaddons, kwidgetsaddons. Sin ki18n, sin QML, sin X11.
 name    = "kbookmarks"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kbookmarks-6.27.0.tar.xz"
@@ -5,6 +5,7 @@
 # (cmake/modules/FindMPC.cmake) localiza mpc.h/libmpc en /usr (deps materializadas).
 name    = "kcalc"
 version = "25.04.3"
+license = "GPL-2.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/release-service/25.04.3/src/kcalc-25.04.3.tar.xz"
@@ -3,6 +3,7 @@
 # KF6DocTools se degrada (sin docbook) + se borra la macro kdoctools_install (queda indefinida sin él).
 name    = "kcharselect"
 version = "25.04.3"
+license = "GPL-2.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/release-service/25.04.3/src/kcharselect-25.04.3.tar.xz"
@@ -5,6 +5,7 @@
 #   (verificado en todo el árbol). Sin option(WITH_X11). KIO arrastra el CIERRE tier-1..3 entero.
 name    = "kcmutils"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kcmutils-6.27.0.tar.xz"
@@ -2,6 +2,7 @@
 # -Wl,--fatal-warnings (ECM lo agrega, zig lo rechaza), CMAKE_PREFIX_PATH=/usr, ECM + qttools + dbus.
 name    = "kcodecs"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kcodecs-6.27.0.tar.xz"
@@ -3,6 +3,7 @@
 # Qt6Gui/Qml ⇒ qtdeclarative. Deps KF6: kconfig, kguiaddons, kcoreaddons, ki18n.
 name    = "kcolorscheme"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kcolorscheme-6.27.0.tar.xz"
@@ -3,6 +3,7 @@
 # Qt6Widgets. Deps KF6: kconfig, kwidgetsaddons, kcoreaddons, kcodecs. DESIGNERPLUGIN OFF.
 name    = "kcompletion"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kcompletion-6.27.0.tar.xz"
@@ -2,6 +2,7 @@
 # -Wl,--fatal-warnings (ECM lo agrega, zig lo rechaza), CMAKE_PREFIX_PATH=/usr, ECM + qttools + dbus.
 name    = "kconfig"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kconfig-6.27.0.tar.xz"
@@ -4,6 +4,7 @@
 # DESIGNERPLUGIN OFF.
 name    = "kconfigwidgets"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kconfigwidgets-6.27.0.tar.xz"
@@ -4,6 +4,7 @@
 # docs apagados. Core-only ⇒ sin el set Gui (mesa/xkb/wayland).
 name    = "kcoreaddons"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kcoreaddons-6.27.0.tar.xz"
@@ -4,6 +4,7 @@
 # en el gate, deuda Capa 0). Plasma es Wayland-first ⇒ kcrash funciona sin la integración X11.
 name    = "kcrash"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kcrash-6.27.0.tar.xz"
@@ -3,6 +3,7 @@
 # Sólo Qt6DBus (viene en qtbase); sin frameworks KF6 extra.
 name    = "kdbusaddons"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kdbusaddons-6.27.0.tar.xz"
@@ -10,6 +10,7 @@
 # Sin option(WITH_X11); sin código X11 → sin -DWITH_X11=OFF.
 name    = "kdeclarative"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kdeclarative-6.27.0.tar.xz"
@@ -4,6 +4,7 @@
 # NO expone option(WITH_X11) ni toca X11 → NO lleva -DWITH_X11=OFF.
 name    = "kdecoration"
 version = "6.7.2"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/plasma/6.7.2/kdecoration-6.7.2.tar.xz"
@@ -4,6 +4,7 @@
 # rm -rf po (traducciones; gettext-tiny minimal).
 name    = "kded"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kded-6.27.0.tar.xz"
@@ -3,6 +3,7 @@
 # KF6DocTools se degrada (sin docbook) + se borra la macro kdoctools_install (queda indefinida sin él).
 name    = "kdf"
 version = "25.04.3"
+license = "GPL-2.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/release-service/25.04.3/src/kdf-25.04.3.tar.xz"
@@ -7,6 +7,7 @@
 # Sin option(WITH_X11); sin código X11 → sin -DWITH_X11=OFF.
 name    = "kdnssd"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kdnssd-6.27.0.tar.xz"
@@ -13,6 +13,7 @@
 # Sin option(WITH_X11); sin código X11 → sin -DWITH_X11=OFF.
 name    = "kfilemetadata"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kfilemetadata-6.27.0.tar.xz"
@@ -3,6 +3,7 @@
 # KF6DocTools se degrada (sin docbook) + se borra la macro kdoctools_install (queda indefinida sin él).
 name    = "kfind"
 version = "25.04.3"
+license = "GPL-2.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/release-service/25.04.3/src/kfind-25.04.3.tar.xz"
@@ -4,6 +4,7 @@
 # TIENE código X11 tras option(WITH_X11 ON): Qt está SIN xcb → -DWITH_X11=OFF OBLIGATORIO.
 name    = "kglobalaccel"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kglobalaccel-6.27.0.tar.xz"
@@ -6,6 +6,7 @@
 # Arrastra el cierre de kio (tier-1/2/3 + kio + libgcrypt/libgpg-error/util-linux/openssl).
 name    = "kglobalacceld"
 version = "6.7.2"
+license = "GPL-2.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/plasma/6.7.2/kglobalacceld-6.7.2.tar.xz"
@@ -2,6 +2,7 @@
 # -Wl,--fatal-warnings (ECM lo agrega, zig lo rechaza), CMAKE_PREFIX_PATH=/usr, ECM + qttools + dbus.
 name    = "kguiaddons"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kguiaddons-6.27.0.tar.xz"
@@ -5,6 +5,7 @@
 # festivos). NO usa ki18n (sólo ecm_install_po_files_as_qm vía lrelease de qttools).
 name    = "kholidays"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kholidays-6.27.0.tar.xz"
@@ -2,6 +2,7 @@
 # -Wl,--fatal-warnings (ECM lo agrega, zig lo rechaza), CMAKE_PREFIX_PATH=/usr, ECM + qttools + dbus.
 name    = "ki18n"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/ki18n-6.27.0.tar.xz"
@@ -6,6 +6,7 @@
 # lo APAGO con -DUSE_BreezeIcons=OFF (temas de iconos se resuelven en runtime, no en build).
 name    = "kiconthemes"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kiconthemes-6.27.0.tar.xz"
@@ -5,6 +5,7 @@
 # Wayland, PlasmaWaylandProtocols>=1.6, WaylandProtocols>=1.27, Qt6GuiPrivate, Qt6DBus. SET X11 + qtwayland.
 name    = "kidletime"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kidletime-6.27.0.tar.xz"
@@ -2,6 +2,7 @@
 # Patrón app/KCM-Plasma (dynamic, wrapper zig, ECM). Todas sus deps ya estaban selladas.
 name    = "kinfocenter"
 version = "6.7.2"
+license = "GPL-2.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/plasma/6.7.2/kinfocenter-6.7.2.tar.xz"
@@ -23,6 +23,7 @@
 #   ON (default): la integración wayland de KIO pasa por KF6::WindowSystem (no linkea wayland-client directo). mesa set presente.
 name    = "kio"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kio-6.27.0.tar.xz"
@@ -2,6 +2,7 @@
 # kickoff (lanzador) lo IMPORTA. Patrón KF6 (dynamic, wrapper zig, ECM). QML-heavy.
 name    = "kirigami-addons"
 version = "1.9.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/kirigami-addons/kirigami-addons-1.9.0.tar.xz"
@@ -7,6 +7,7 @@
 # USE_DBUS ON por defecto en Linux → Qt6DBus (qtbase). BUILD_EXAMPLES OFF por defecto. DESKTOP_ENABLED ON.
 name    = "kirigami"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kirigami-6.27.0.tar.xz"
@@ -3,6 +3,7 @@
 # Qt6Core + Qt6Qml (opcional NO_MODULE, provee los tipos QML) ⇒ qtdeclarative. Sin frameworks KF6 extra.
 name    = "kitemmodels"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kitemmodels-6.27.0.tar.xz"
@@ -3,6 +3,7 @@
 # Sólo Qt6Widgets; sin frameworks KF6 extra. DESIGNERPLUGIN OFF (evita dep Qt Designer).
 name    = "kitemviews"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kitemviews-6.27.0.tar.xz"
@@ -3,6 +3,7 @@
 # Qt6Widgets/Gui. Deps KF6: kcoreaddons, kwidgetsaddons, kwindowsystem. DESIGNERPLUGIN OFF.
 name    = "kjobwidgets"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kjobwidgets-6.27.0.tar.xz"
@@ -2,6 +2,7 @@
 # Patrón app/KCM-Plasma (dynamic, wrapper zig, ECM). Todas sus deps ya estaban selladas.
 name    = "kmenuedit"
 version = "6.7.2"
+license = "GPL-2.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/plasma/6.7.2/kmenuedit-6.7.2.tar.xz"
@@ -7,6 +7,7 @@
 # ki18n → gettext-tiny. kirigami arrastra qtsvg/qtshadertools. karchive → zlib/zstd/openssl.
 name    = "knewstuff"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/knewstuff-6.27.0.tar.xz"
@@ -6,6 +6,7 @@
 # quita el REQUIRED y compila sin audio (libcanberra = stack alsa/pulse/vorbis, deuda audio diferida).
 name    = "knotifications"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/knotifications-6.27.0.tar.xz"
@@ -3,6 +3,7 @@
 # kcoreaddons, ki18n, knotifications.
 name    = "knotifyconfig"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/knotifyconfig-6.27.0.tar.xz"
@@ -2,6 +2,7 @@
 # Patrón KF6 app (dynamic, wrapper zig, ECM). Usa kpty (pseudo-terminal).
 name    = "konsole"
 version = "25.04.3"
+license = "GPL-2.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/release-service/25.04.3/src/konsole-25.04.3.tar.xz"
@@ -5,6 +5,7 @@
 # ki18n → gettext-tiny. qtdeclarative incluido (consumidores KF6 encadenan QML). Cierre: karchive→zlib/zstd/openssl.
 name    = "kpackage"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kpackage-6.27.0.tar.xz"
@@ -5,6 +5,7 @@
 # Sin option(WITH_X11) en el árbol 6.27. ki18n → gettext-tiny.
 name    = "kparts"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kparts-6.27.0.tar.xz"
@@ -7,6 +7,7 @@
 # CoreAddons.
 name    = "kpipewire"
 version = "6.7.2"
+license = "GPL-2.0-or-later OR LGPL-2.1-or-later"

 [source]
 tarball = "https://download.kde.org/stable/plasma/6.7.2/kpipewire-6.7.2.tar.xz"
@@ -3,6 +3,7 @@
 # Sólo Qt6Gui (widget de ploteo QWidget-free); sin frameworks KF6 extra.
 name    = "kplotting"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kplotting-6.27.0.tar.xz"
@@ -1,6 +1,7 @@
 # kpty 6.27.0 — KDE Frameworks 6: interfaz a pseudo-terminales (pty). Dep de konsole. Patrón KF6.
 name    = "kpty"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kpty-6.27.0.tar.xz"
@@ -2,6 +2,7 @@
 # IMPORTA. Patrón KF6 (dynamic, wrapper zig, ECM). Usa Qt6Quick/Qml/Gui (shaders).
 name    = "kquickcharts"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kquickcharts-6.27.0.tar.xz"
@@ -7,6 +7,7 @@
 # (core+imgproc, para el "stack blur" — WITH_OPENCV es TRUE por defecto en UNIX); ambas ya selladas.
 name    = "kquickimageeditor"
 version = "0.6.2.1"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/kquickimageeditor/kquickimageeditor-0.6.2.1.tar.xz"
@@ -3,6 +3,7 @@
 # KF6DocTools se degrada (sin docbook) + se borra la macro kdoctools_install (queda indefinida sin él).
 name    = "kruler"
 version = "25.04.3"
+license = "GPL-2.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/release-service/25.04.3/src/kruler-25.04.3.tar.xz"
@@ -4,6 +4,7 @@
 # (rule 1, inerte en prefix) y SET X11 (kwindowsystem transitivo). rm -rf po (muchas traducciones).
 name    = "krunner"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/krunner-6.27.0.tar.xz"
@@ -3,6 +3,7 @@
 # LayerShellQt (layer-shell-qt), KCMUtils, Svg (ksvg). KF6ImageFormats es CONFIG opcional → se salta.
 name    = "kscreen"
 version = "6.7.2"
+license = "GPL-2.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/plasma/6.7.2/kscreen-6.7.2.tar.xz"
@@ -19,6 +19,7 @@
 # ======================================================================
 name    = "kscreenlocker"
 version = "6.7.2"
+license = "GPL-2.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/plasma/6.7.2/kscreenlocker-6.7.2.tar.xz"
@@ -4,6 +4,7 @@
 # NOTA: KF6 6.27 NO trae parser flex/bison (no hay .l/.y ni FLEX_TARGET/BISON_TARGET): sin flex/bison.
 name    = "kservice"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kservice-6.27.0.tar.xz"
@@ -4,6 +4,7 @@
 # KF6WindowSystem (REQUIRED). Sin qtdeclarative. SET X11 completo (find_package(X11) transitivo). rm -rf po.
 name    = "kstatusnotifieritem"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kstatusnotifieritem-6.27.0.tar.xz"
@@ -6,6 +6,7 @@
 # GuiAddons(kguiaddons), KirigamiPlatform(kirigami). option(BUILD_TOOLS OFF) default. NO expone WITH_X11.
 name    = "ksvg"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/ksvg-6.27.0.tar.xz"
@@ -15,6 +15,7 @@
 #   Qt: Core Widgets Qml PrintSupport. WITH: rm -rf po. NO construye hasta sellar (1) y (2).
 name    = "ktexteditor"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/ktexteditor-6.27.0.tar.xz"
@@ -4,6 +4,7 @@
 # WITH_TEXT_TO_SPEECH=ON por defecto → exigiría Qt6TextToSpeech (qtspeech, NO sellado): lo APAGO (-DWITH_TEXT_TO_SPEECH=OFF).
 name    = "ktextwidgets"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/ktextwidgets-6.27.0.tar.xz"
@@ -3,6 +3,7 @@
 # Sin X11, sin qtdeclarative. rm -rf po (muchas traducciones de unidades; msgfmt de gettext-tiny minimal).
 name    = "kunitconversion"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kunitconversion-6.27.0.tar.xz"
@@ -12,6 +12,7 @@
 # daemon cuando se reactive. Gpgmepp opcional (GPG support off). Reactivar daemon = sellar libsecret+QCA.
 name    = "kwallet"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kwallet-6.27.0.tar.xz"
@@ -3,6 +3,7 @@
 # KF6DocTools se degrada (sin docbook) + se borra la macro kdoctools_install (queda indefinida sin él).
 name    = "kwalletmanager"
 version = "25.04.3"
+license = "GPL-2.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/release-service/25.04.3/src/kwalletmanager-25.04.3.tar.xz"
@@ -3,6 +3,7 @@
 # Private ⇒ qtwayland (sellado) + wayland + wayland-protocols. Patrón KF6 (wrapper zig filtra --fatal-warnings).
 name    = "kwayland"
 version = "6.7.2"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/plasma/6.7.2/kwayland-6.7.2.tar.xz"
@@ -2,6 +2,7 @@
 # -Wl,--fatal-warnings (ECM lo agrega, zig lo rechaza), CMAKE_PREFIX_PATH=/usr, ECM + qttools + dbus.
 name    = "kwidgetsaddons"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kwidgetsaddons-6.27.0.tar.xz"
@@ -22,6 +22,7 @@
 # ========================================================================================
 name    = "kwin"
 version = "6.7.2"
+license = "GPL-2.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/plasma/6.7.2/kwin-6.7.2.tar.xz"
@@ -9,6 +9,7 @@
 # ya está en [deps].build. Rebuild en la granja (zig-skew: NO en el laptop).
 name    = "kwindowsystem"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kwindowsystem-6.27.0.tar.xz"
@@ -6,6 +6,7 @@
 # NOTA: 6.27 NO expone option(WITH_X11) ni toca qtx11extras → NO lleva -DWITH_X11=OFF (verificado en el árbol).
 name    = "kxmlgui"
 version = "6.27.0"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/frameworks/6.27/kxmlgui-6.27.0.tar.xz"
@@ -7,6 +7,7 @@
 # el cierre sea explícito.
 name    = "libarchive"
 version = "3.7.7"
+license = "BSD-2-Clause"

 [source]
 tarball = "https://github.com/libarchive/libarchive/releases/download/v3.7.7/libarchive-3.7.7.tar.xz"
@@ -4,6 +4,7 @@
 # zlib-shared/bzip2-shared. Nombre distinto para no colisionar con el canónico. gwenview lo linkea.
 name    = "libjpeg-turbo-shared"
 version = "3.1.3"
+license = "IJG AND BSD-3-Clause AND Zlib"

 [source]
 tarball = "https://github.com/libjpeg-turbo/libjpeg-turbo/releases/download/3.1.3/libjpeg-turbo-3.1.3.tar.gz"
@@ -3,6 +3,7 @@
 # zlib-shared/xz-shared: autotools --enable-shared, zig-cc, contra zlib-shared (libz.so). gwenview linkea.
 name    = "libpng-shared"
 version = "1.6.58"
+license = "Libpng"

 [source]
 tarball = "https://downloads.sourceforge.net/libpng/libpng-1.6.58.tar.gz"
@@ -2,6 +2,7 @@
 # Sólo nos interesa libltdl (ltdl.h + libltdl.so + libltdl.pc); el script libtool en sí no lo usa hammer.
 name    = "libtool"
 version = "2.5.4"
+license = "GPL-2.0-or-later"
 [source]
 tarball = "https://ftpmirror.gnu.org/libtool/libtool-2.5.4.tar.xz"
 sha256  = "f81f5860666b0bc7d84baddefa60d1cb9fa6fceb2398cc3baca6afaa60266675"
@@ -4,6 +4,7 @@
 # wayland/xkbregistry/tools). En runtime usa los datos de xkeyboard-config (no dep de build).
 name    = "libxkbcommon"
 version = "1.7.0"
+license = "MIT"

 [source]
 tarball = "https://github.com/xkbcommon/libxkbcommon/archive/refs/tags/xkbcommon-1.7.0.tar.gz"
@@ -4,6 +4,7 @@
 # incoming-kde (mismo name). compiler=gcc (zig miscompila). Sin python/lzma; CON zlib no (mantener mínimo).
 name    = "libxml2"
 version = "2.13.9"
+license = "MIT"

 [source]
 tarball = "https://download.gnome.org/sources/libxml2/2.13/libxml2-2.13.9.tar.xz"
@@ -7,6 +7,7 @@
 # Patrón static↔dinámico Capa 0 (mismo que zstd/libgcrypt/util-linux-shared).
 name    = "openssl"
 version = "3.5.4"
+license = "Apache-2.0"

 [source]
 tarball = "https://github.com/openssl/openssl/releases/download/openssl-3.5.4/openssl-3.5.4.tar.gz"
@@ -16,6 +16,7 @@
 # Quitando la dep, meson saltea pw-top y el resto construye.
 name    = "pipewire"
 version = "1.2.7"
+license = "MIT"

 [source]
 tarball = "https://gitlab.freedesktop.org/pipewire/pipewire/-/archive/1.2.7/pipewire-1.2.7.tar.gz"
@@ -5,6 +5,7 @@
 # Sin X11 obligatorio. Construye limpio.
 name    = "plasma-activities-stats"
 version = "6.7.2"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/plasma/6.7.2/plasma-activities-stats-6.7.2.tar.xz"
@@ -6,6 +6,7 @@
 # NO expone WITH_X11 ni Boost. Qml/Quick → qtdeclarative. Sql → qtbase compilado con SQL ON.
 name    = "plasma-activities"
 version = "6.7.2"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/plasma/6.7.2/plasma-activities-6.7.2.tar.xz"
@@ -4,6 +4,7 @@
 # wrapper zig filtra -Wl,--fatal-warnings, Ninja, rm -rf po, WITH_X11=OFF Wayland-puro).
 name    = "plasma-desktop"
 version = "6.7.2"
+license = "GPL-2.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/plasma/6.7.2/plasma-desktop-6.7.2.tar.xz"
@@ -2,6 +2,7 @@
 # de Plasma (usa breeze + KF6 + Qt6 private). Patrón KF6 (dynamic, wrapper zig). Wayland-puro. Runtime del escritorio.
 name    = "plasma-integration"
 version = "6.7.2"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"
 [source]
 tarball = "https://download.kde.org/stable/plasma/6.7.2/plasma-integration-6.7.2.tar.xz"
 sha256  = "f1ce2c3fb0e07a4e0cd5e3d5566fb67e6063aaf435e8efb3402f7d65e1da95a4"
@@ -12,6 +12,7 @@
 # sellados. ecm_find_qmlmodule REQUIRED: org.kde.prison + org.kde.kirigamiaddons.formcard (kirigami-addons).
 name    = "plasma-nm"
 version = "6.7.2"
+license = "GPL-2.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/plasma/6.7.2/plasma-nm-6.7.2.tar.xz"
@@ -7,6 +7,7 @@
 # Kirigami/KirigamiAddons son RUNTIME. gio-2.0 REQUIRED → glib-shared.
 name    = "plasma-pa"
 version = "6.7.2"
+license = "GPL-2.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/plasma/6.7.2/plasma-pa-6.7.2.tar.xz"
@@ -4,6 +4,7 @@
 # CMake+ECM puro (sin Qt) ⇒ no necesita el set Qt-consumer, sólo ECM.
 name    = "plasma-wayland-protocols"
 version = "1.21.0"
+license = "MIT"

 [source]
 tarball = "https://download.kde.org/stable/plasma-wayland-protocols/plasma-wayland-protocols-1.21.0.tar.xz"
@@ -60,6 +60,7 @@
 # ==================================================================================================
 name    = "plasma-workspace"
 version = "6.7.2"
+license = "GPL-2.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/plasma/6.7.2/plasma-workspace-6.7.2.tar.xz"
@@ -16,6 +16,7 @@
 # ===================================================================
 name    = "plasma5support"
 version = "6.7.2"
+license = "LGPL-2.1-or-later OR LGPL-3.0-or-later"

 [source]
 tarball = "https://download.kde.org/stable/plasma/6.7.2/plasma5support-6.7.2.tar.xz"
@@ -4,6 +4,7 @@
 # Necesita qtdeclarative (QML) además de qtbase.
 name    = "qt5compat"
 version = "6.11.1"
+license = "LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only"

 [source]
 tarball = "https://download.qt.io/official_releases/qt/6.11/6.11.1/submodules/qt5compat-everywhere-src-6.11.1.tar.xz"
@@ -7,6 +7,7 @@
 # sigue con la canónica static. Conserva el hack del filtro -mcpu=baseline de los generadores.
 name    = "util-linux"
 version = "2.42.2"
+license = "GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"

 [source]
 tarball = "https://www.kernel.org/pub/linux/utils/util-linux/v2.42/util-linux-2.42.2.tar.xz"
@@ -4,6 +4,7 @@
 # Meson, sin compilación real (instala datos + .pc). nls off (evita gettext); sin libxml2 (validación).
 name    = "xkeyboard-config"
 version = "2.44"
+license = "MIT"

 [source]
 tarball = "https://www.x.org/releases/individual/data/xkeyboard-config/xkeyboard-config-2.44.tar.xz"
@@ -17,6 +17,7 @@

 name    = "zlib-shared"
 version = "1.3.1"
+license = "Zlib"

 [source]
 tarball = "https://github.com/madler/zlib/releases/download/v1.3.1/zlib-1.3.1.tar.gz"