dannycjones commented on issue #3233: URL: https://github.com/apache/iceberg-rust/issues/3233#issuecomment-5687082870
Summary of some Slack discussion with @dannycjones, @xanderbailey, @kevinjqliu: https://apache-iceberg.slack.com/archives/C05HTENMJG4/p1789459352829739 @dannycjones was asking about why the `DEPENDENCIES.rust.tsv` files exist, as they doubt if they are required under any license obligations. Three possible use cases raised: - Provides a way for reviewers to understand license changes (albeit at release time) - Provides a way for consumers to understand what licenses are used by the transitive dependencies of iceberg-rust - Required under license obligations @dannycjones recognizes that the pyiceberg-core Python package will likely need to maintain distribution of some kind of notice, as it distributes dependencies as part of a compiled wheel. Meanwhile, the crates themselves may be fine under license obligations as only source code is being distributed as part of the crates. @kevinjqliu shared that the TSV process is likely adopted historically based on OpenDAL's release process. We recognize that the current release process has a step to verify licenses according to a policy configured in deny.toml. @kevinjqliu suggests we move that into pull request checks (@dannycjones +1) Related: original PR introducing the TSVs https://github.com/apache/iceberg-rust/pull/147 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
