Gentoo Archives: gentoo-dev

From: William Hubbs <williamh@g.o>
To: gentoo-dev@l.g.o
Cc: antarus@g.o, mjo@g.o, ulm@g.o
Subject: Re: [gentoo-dev] [PATCH 3/3] dev-vcs/hub: migrate to go-module.eclass
Date: Wed, 11 Sep 2019 23:48:25
Message-Id: 20190911234815.GA21591@whubbs1.dev.av1.gaikai.org
In Reply to: Re: [gentoo-dev] [PATCH 3/3] dev-vcs/hub: migrate to go-module.eclass by Alec Warner
On Wed, Sep 11, 2019 at 04:34:27PM -0700, Alec Warner wrote:
> On Wed, Sep 11, 2019 at 10:39 AM Michael Orlitzky <mjo@g.o> wrote: > > > On 9/11/19 1:21 PM, William Hubbs wrote: > > > +++ b/dev-vcs/hub/hub-2.12.3.ebuild > > > ... > > > > > > LICENSE="MIT" > > > > This license is wrong, as it's pretty much guaranteed to be every time > > you commit one of these packages. I find it pretty troubling that one > > corporation is able to force this stuff through even though it's a > > security and legal hazard for everyone else. > > > > How is it wrong? > > https://github.com/github/hub/blob/master/LICENSE
The argument is that because of the vendoring, LICENSE= needs to list all licenses for the vendored dependencies that are different from MIT as well. Personally I don't have a comment about this, but that's what is being pushed for. I'll let you guys debate this but it isn't really relevant to the eclass. ;-) William

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies