[#102] Cargo deny workflow - #308
Conversation
| "MIT", | ||
| "Apache-2.0", | ||
| "BSD-3-Clause", | ||
| "CC0-1.0", |
There was a problem hiding this comment.
allow only these:
"MIT",
"Apache-2.0",
"BSD-3-Clause"
There was a problem hiding this comment.
based on detail ok the above link, it makes sense. our repo states only the first 3, maybe we should check the other licenses requirements if we need to explicitly mention them in our license info to, can you please do that?
we could mark the conversation as resolved after that
There was a problem hiding this comment.
CC0 1.0 does not need to be mentioned whatsoever according to this EU site
Zlib states that mentioning the license is "appreciated, but is not required" according to opensource.org and their website
ISC, however, requires that we mention it according to their website and opensource.org. This license is almost identical to the MIT license.
cargo-denyworkflowIntegrated cargo-deny in the
build-and-testGitHub ActionDescription
cargo-denyworkflow tobuild_and_tests_reusable.yamldeny.tomlconfig file with accepted licenses for the projectcrossbeam-channelandtokiopackages as they had issues detected bycargo-denyFixes #102
Type of change
New feature (non-breaking change which adds functionality)
Checklist:
Additional context
There are many duplicate packages in the project, detected by
cargo-deny. I did not do anything about them, however, as that could cause everything to break.I have also noticed that there are two unmaintained packages in the project (
derivativeandinstant), but they are dependencies of other packages used byrencfs.