https://bugzilla.redhat.com/show_bug.cgi?id=2029461



--- Comment #3 from Ben Beasley <[email protected]> ---
(In reply to Miro Hrončok from comment #2)
> Where does the check-null-licenses script originate from?

I wrote it to work around https://bugzilla.redhat.com/show_bug.cgi?id=1920223
around the time the rewritten NodeJS guidelines came out in Fedora 34.

Since then, nodejs-packaging-bundler was improved to flag the problem—at least
in the “prod” bundle.

However, I’ve retained the auditing script in the several NodeJS packages I
maintain, because (a) it also checks the “dev” bundle, and (b) it’s a
convenient way to record what dependencies I’ve manually audited and why/how I
determined they are acceptably-licensed.


-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are always notified about changes to this product and component
https://bugzilla.redhat.com/show_bug.cgi?id=2029461
_______________________________________________
package-review mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

Reply via email to