3 ms·
Cargo should have an "acceptable licenses" field in the project toml with a sensible default. I had to do a license audit in a past role and it was a pain. Mar
by mmastrac 6y ago
Cargo should have an "acceptable licenses" field in the project toml with a sensible default. I had to do a license audit in a past role and it was a pain.
Mark licenses that "require further attention".
- jacobmischka 6y agoWould be nice if built in, but cargo-deny is a neat project by Embark that can do this: https://github.com/EmbarkStudios/cargo-deny https://github.com/EmbarkStudios/cargo-deny
- mmastrac 6y agoAh yeah, that seems useful, thanks.
- JoshTriplett 6y agoI would love to see the functionality of cargo-deny built into cargo, and a sensible set of defaults added that prevent people from accidentally using proprietary code like this (while still allowing people to use proprietary code if they knowingly choose to, as well as allowing local first-party code by default so this doesn't stymie people's own internal development).
- ComputerGuru 6y agoIt already effectively does by having well-known identifiers for acceptable values for the license field (eg “MIT”) while these off-the-beaten track licenses require a path to a license. On crates.io, the license would be displayed as “other” instead of Apache, MIT, etc.