4 ms·
You downloaded it without knowing the license (or trusting your download tool to tell you correctly) and the solution is to pay a third-party?
by Y_Y 2y ago
You downloaded it without knowing the license (or trusting your download tool to tell you correctly) and the solution is to pay a third-party?
- ATechGuy 2y agoYes, that's the state of the art unfortunately. There are a number of vendors who can scan your source code and generate a list of FOSS libraries with licensing info (SBOMs). If we can find a way to get this money flowing to our fellow FOSS devs, that would be a huge win for the community.
- tsimionescu 2y agoWell, do you have any idea what software you're pulling (and under what licenses) if you run `apt install vim`? Because let me tell you, if you think it's just vim, you're quite mistaken. And if you're distributing a docker image that contains vim, even for non-commercial purposes, it's technically your job to know. And perhaps to extend anyone downloading that docker image the offer of getting the source code for the specific version of any GPL software it might include, which it's up to you to archive.
- Y_Y 2y agoWell it's vim, and any missing dependencies. If there license concerns up front I'll make sure I pick a distro/repo with compatible policy, like Debian main. If I want to double-check I'll run VRMS.