From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id B549B138334 for ; Wed, 11 Sep 2019 23:48:25 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id D844AE0AC8; Wed, 11 Sep 2019 23:48:21 +0000 (UTC) Received: from smtp.gentoo.org (woodpecker.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 93E16E09C1 for ; Wed, 11 Sep 2019 23:48:21 +0000 (UTC) Received: from whubbs1.gaikai.biz (unknown [100.42.103.5]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: williamh) by smtp.gentoo.org (Postfix) with ESMTPSA id 2B24634B06F; Wed, 11 Sep 2019 23:48:20 +0000 (UTC) Received: (nullmailer pid 21630 invoked by uid 1000); Wed, 11 Sep 2019 23:48:15 -0000 Date: Wed, 11 Sep 2019 18:48:15 -0500 From: William Hubbs To: gentoo-dev@lists.gentoo.org Cc: antarus@gentoo.org, mjo@gentoo.org, ulm@gentoo.org Subject: Re: [gentoo-dev] [PATCH 3/3] dev-vcs/hub: migrate to go-module.eclass Message-ID: <20190911234815.GA21591@whubbs1.dev.av1.gaikai.org> Mail-Followup-To: gentoo-dev@lists.gentoo.org, antarus@gentoo.org, mjo@gentoo.org, ulm@gentoo.org References: <20190911172128.18885-1-williamh@gentoo.org> <20190911172128.18885-4-williamh@gentoo.org> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="2fHTh5uZTiUOsy+g" Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.10.1 (2018-07-13) X-Archives-Salt: 4d139bcd-512e-45ea-a950-3136d36c1427 X-Archives-Hash: 8475fe5c99749f088fab993bf9aadda3 --2fHTh5uZTiUOsy+g Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Sep 11, 2019 at 04:34:27PM -0700, Alec Warner wrote: > On Wed, Sep 11, 2019 at 10:39 AM Michael Orlitzky wrote: >=20 > > On 9/11/19 1:21 PM, William Hubbs wrote: > > > +++ b/dev-vcs/hub/hub-2.12.3.ebuild > > > ... > > > > > > LICENSE=3D"MIT" > > > > This license is wrong, as it's pretty much guaranteed to be every time > > you commit one of these packages. I find it pretty troubling that one > > corporation is able to force this stuff through even though it's a > > security and legal hazard for everyone else. > > >=20 > How is it wrong? >=20 > https://github.com/github/hub/blob/master/LICENSE The argument is that because of the vendoring, LICENSE=3D needs to list all licenses for the vendored dependencies that are different from MIT as well. Personally I don't have a comment about this, but that's what is being pushed for. I'll let you guys debate this but it isn't really relevant to the eclass. ;-) William --2fHTh5uZTiUOsy+g Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- iF0EARECAB0WIQTVeuxEZo4uUHOkQAluVBb0MMRlOAUCXXmHnQAKCRBuVBb0MMRl OJwrAJ9p+zSs8DzqoYI1IEgCvpodMt6VxwCgolNfm1ynegbUVQ0byDF+c+VCXjs= =MKZm -----END PGP SIGNATURE----- --2fHTh5uZTiUOsy+g--