-
-
Notifications
You must be signed in to change notification settings - Fork 3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Check all vendored code so far is appropriately licensed #337
Comments
Using https://www.npmjs.com/package/node-license-validator $ node-license-validator -l .
Identified licenses: [Apache, BSD, ISC, MIT, MPL] |
The package uses https://www.npmjs.com/package/spdx for its license algebra, but it isn't able to detect files without explicit license type, e.g. https://github.com/ipfs/go-ipfs/blob/master/Godeps/_workspace/src/github.com/kr/binarydist/License (MIT). |
maybe we should add a test that fails if anything outside of the permissive licenses gets added. |
though would not be good to have to depend on node.js installed for running ipfs tests. |
There is an official go spdx library (one out of two, the other one being python, http://git.spdx.org/) that can be used. In addition to the two, there are only node implementation (the one linked above) and haskell implementation. |
our s3 datastore code relies on lgpl code at the moment. |
We've gone through and removed the s3 lib, everything else is good to go |
Make sure all libs vendored are appropriately licensed (MIT, BSD, APL2.0).
The text was updated successfully, but these errors were encountered: