4 ms·
Not to mention you can get software that is unlicensed on npm, and god knows what gets pulled in when you use cargo or any of the smaller ones. This is a gigan
by themusicgod1 7y ago
Not to mention you can get software that is unlicensed on npm, and god knows what gets pulled in when you use cargo or any of the smaller ones. This is a gigantic clusterfuck for those who are interested in using free software that encourages the user to be aware of the importance of free software.
- steveklabnik 7y agocrates.io (for Cargo) requires that every package include a SPDX identifier, and there's tools that can show you what licenses are used in your project.