3 ms·
Github can ID project dependencies and notify devs when one of them is vulnerable to a CVE. They could more easily find licenses for all project dependencies al
by panny 7y ago
Github can ID project dependencies and notify devs when one of them is vulnerable to a CVE. They could more easily find licenses for all project dependencies also, they just don't. Github could id private repos using GPL code for non-gpl licensed projects. Github could even automatically apply the correct GPL license and make the projects public, which would satisfy the license.
By failing to do so, Github really seems to be encouraging copyright infringement.
- bpt3 7y agoNothing you described here is a trivial problem, nor a problem that Github has any responsibility to unilaterally fix, nor do they have the tools to do so already as you previously stated. If Github were somehow helping copyright infringers, that would be encouragement. What you're describing is additional effort on their part to actively discourage copyright infringement, which is not the same thing.