Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

✨ Add support for project license auditing #75

Open
3 of 7 tasks
Nicoretti opened this issue Jul 5, 2023 · 1 comment · May be fixed by #76
Open
3 of 7 tasks

✨ Add support for project license auditing #75

Nicoretti opened this issue Jul 5, 2023 · 1 comment · May be fixed by #76
Assignees
Labels
feature Product feature
Milestone

Comments

@Nicoretti
Copy link
Member

Nicoretti commented Jul 5, 2023

Summary

Add support to scan the project(s) license compliance.

Details

Make sure to distinguish or build/dev dependencies etc from the dependencies used by the library/application.

Background & Context

Adding such a nox target will simplify validation of appropriate dependency usage in regard to the project(s) and their licenses.

References

Task(s)

Tasks

Preview Give feedback
@Nicoretti Nicoretti added the feature Product feature label Jul 5, 2023
@Nicoretti Nicoretti self-assigned this Jul 6, 2023
@Nicoretti Nicoretti linked a pull request Jul 6, 2023 that will close this issue
6 tasks
@Nicoretti
Copy link
Member Author

Reconsider/Evaluate license used for toolbox and/or it's dependencies

@tkilias and @Nicoretti concluded to keep MIT license. Based on the following reasoning:

  • The toolkit should not push a less permissive license downstream
  • Pylint is only used as CLI (and mostly in dev builds)
    • Additionally it could be marked as optional/extra dependency, so the users of the library need to opt-in
    • Pylint could be replaced e.g. by a less permissive alternative like ruff so the reasoning about the required license is more straight forward
  • Prysk needs to be clearly separated as development dependency

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature Product feature
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant