I had voted +1 on dev@ but I'm changing my vote until we clarify the use of chardet:
0 (binding) Is there an automated way to check the licenses of Python dependencies (analogous to how Java-based projects use RAT)? It would be useful for me (not a Python expert but voting on releases) and the project (automating their license hygiene). Julian On Sat, Nov 4, 2023 at 11:01 AM Justin Mclean <jus...@classsoftware.com> wrote: > > Hi, > > -1 (binding), as I think you may have an issue here as > apache-sdap-nexus-1.2.0-incubating-src depends on LGPL licensed chardet. [1] > ASF project can not depend on LGPL software unless it is optional. Is this > the case here? > > I checked: > - incubating in names > - signatures and hashes are fine > - DISCLAIMER exists > - LICENSE and NOTICE are fine > - No unexpected binary files > - Source files have ASF headers > - I did not compile from source > > Kind Regards, > Justin > > 1. https://issues.apache.org/jira/browse/LEGAL-572 > --------------------------------------------------------------------- > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
