Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Copying the cookie crate without attribution violates its licenses #1556

Closed
SergioBenitez opened this issue Jun 9, 2020 · 2 comments · Fixed by #1558
Closed

Copying the cookie crate without attribution violates its licenses #1556

SergioBenitez opened this issue Jun 9, 2020 · 2 comments · Fixed by #1558
Assignees

Comments

@SergioBenitez
Copy link

SergioBenitez commented Jun 9, 2020

Hello!

It appears that the entirety of the cookie crate, with the exception of its license(s), has been copied into the actix-http crate . This is in violation of the two license options (MIT and Apache 2.0) at your disposal, both of which require attribution. Furthermore, it looks like upstream commits are simply being copied here, again without attribution. And, while this latter point doesn't further violate any licenses, I would consider it poor practice and poor open-source citizenship.

Please either attribute the cookie code as per either the MIT license or the Apache 2.0 license or remove the code from your repository. Better yet: why not use cookie as a dependency? You'd benefit from upstream improvements automatically, and any improvements you've made here could potentially benefit the community at large. In true open-source fashion: it's a win-win. Please do consider this latter option.

Thank you!

@robjtede robjtede mentioned this issue Jun 9, 2020
15 tasks
@robjtede robjtede self-assigned this Jun 9, 2020
robjtede added a commit that referenced this issue Jun 9, 2020
@robjtede
Copy link
Member

robjtede commented Jun 9, 2020

Thanks for pointing this out Sergio. PR #1558 migrates handling to the crate.

robjtede added a commit that referenced this issue Jun 17, 2020
@mocsy
Copy link

mocsy commented Jun 22, 2020

I remember reading it in the docs, that it was copied from that crate, and that it needed some modifications. There was a technical reason involved as well. I can't seem to find that part though.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants