sbp commented on issue #1154: URL: https://github.com/apache/tooling-trusted-releases/issues/1154#issuecomment-4253322758
Correctness, comprehensiveness, and simplicity were the concerns here, not performance. The reference implementation is more likely to be correct and comprehensive than the third party package, and wrapping a Rust package in a Python interface is straightforward. To support revision, release, and snapshot SWHIDs, however, the reference implementation relies on `libgit2`, which is licensed under the GPLv2 with linking exception, so we can't implement that part if wrapping `swhid-rs`. I don't think that we should support extensions that are not yet part of the SWHID specification. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
