https://bugzilla.redhat.com/show_bug.cgi?id=2051874



--- Comment #10 from Fabio Valentini <[email protected]> ---
> Are you sure? MIT + GPLv3 is effectively GPLv3, and License specifies the
> effective license 
> [https://docs.fedoraproject.org/en-US/packaging-guidelines/LicensingGuidelines/#_license_field].

I have not checked the entire dependency tree, just the direct dependencies.
But whether the resulting "effective license" is still GPLv3 or not, my point
is that this needs to be *checked* and *documented*.
You can use the following script in a mock shell, after doing a mock build with
"--without check" to list all crate licenses in the buildroot:

for i in $(rpm -qa | grep "rust-.*-devel"); do
   rpm -q $i --qf "%{LICENSE}\n";
done | sort | uniq

(Side note: For Rust packages, we actually usually don't even collapse things
like "GPLv3 and MIT" into "GPLv3". Speaking for myself, I don't want to get
involved in the intricacies of license compatibility matrices, so I just
specify the non-collapsed versions explicitly.)


-- 
You are receiving this mail because:
You are always notified about changes to this product and component
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2051874
_______________________________________________
package-review mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

Reply via email to