My latest version of the script:
https://gist.github.com/eht16/1aad667c4a68afd8126f

I added creation of a bundle information file `ReadMe.Dependencies.Geany.txt` 
(if anyone has a better name, let me know). This file lists where we downloaded 
the included binaries from, and for grep, also the compile command. This should 
make it quite transparent, hopefully this is enough.
For now, I included an URL to download.geany.org/contrib/ where we could place 
the `grep` source tarball which we used for compilation. Even if GPLv3 would 
allow third-party servers, this way we should be safe also and putting the 
source tarball there is no harm at all for us.

What do you think?

I would do the same for the Geany-Plugins bundle create script afterwards.

---
Reply to this email directly or view it on GitHub:
https://github.com/geany/geany/pull/560#issuecomment-194692093

Reply via email to