I opened a PR https://github.com/apache/incubator-openwhisk-utilities/pull/57 to bundle the relevant parts of the "pathspec" library. This avoids pip install in all downstream clients.
The pathspec library is Mozilla Public License 2.0 [1]. My reading of the Mozilla License, their FAQ [2] and the Apache 3rd Party License Policy [3] leads me to conclude the bundling is acceptable. [1] https://www.mozilla.org/en-US/MPL/2.0/ [2] https://www.mozilla.org/en-US/MPL/2.0/FAQ [3] https://apache.org/legal/resolved.html -r On Fri, Mar 29, 2019 at 8:55 PM Rodric Rabbah <[email protected]> wrote: > > Am I understanding correctly that we'd need to go change the > .travis.yaml files for pretty much every openwhisk repo to do the `pip > install pathspec` as part of its install phase? > > That's right. I could mitigate this by having scancode itself install the > module (via) pip if necessary. > Alternatively, I could bundle the relevant parts of library into scancode. > It's Mozilla Licensed and not very big ( > https://github.com/cpburnz/python-path-specification). > > -r > > >
