-
Notifications
You must be signed in to change notification settings - Fork 23
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
option-ext
dependency
#21
Comments
Hey @crepererum,
So thanks for your offer, but everything works as intended. I'm closing this for now, but feel free to reopen if you have new information! Cheers, Simon |
`dirs-sys` v0.4.1 brings in an additional dependency, `option-ext`. `option-ext` is licensed with MPL-2.0. MPL-2.0 is a vaguely copyleft license, all of which are banned in Artichoke by `cargo-deny` and `deny.toml`. See: - dirs-dev/dirs-sys-rs#21 - dirs-dev/dirs-sys-rs@e169da7
`dirs-sys` v0.4.1 brings in an additional dependency, `option-ext`. `option-ext` is licensed with MPL-2.0. MPL-2.0 is a vaguely copyleft license, all of which are banned in Artichoke by `cargo-deny` and `deny.toml`. See: - dirs-dev/dirs-sys-rs#21 - dirs-dev/dirs-sys-rs@e169da7
yea, falling into this same problem, MPL-2.0 is not allowed (easily) by company, so we would basically have no other option but to use something else. edit: basically moved to etcetera this morning. easy enough. this crate is kinda GNU / stallman now with this sort of random licensing change. good luck |
`dirs-sys` v0.4.1 brings in an additional dependency, `option-ext`. `option-ext` is licensed with MPL-2.0. MPL-2.0 is a vaguely copyleft license, all of which are banned in Artichoke by `cargo-deny` and `deny.toml`. Complete the removal in `artichoke` and prevent regressions by banning this dep with `cargo-deny`. See: - dirs-dev/dirs-sys-rs#21 - dirs-dev/dirs-sys-rs@e169da7 - #2543 - #2556 - #2559
This is very bold coming from a company with a market cap of 2 TRILLION dollars. |
FWIW, I don't think that the usage of MPL is an issue in this case. Unlike the GPLs, MPL copyleft is limited to the source files that are explicitly licensed under these terms. Thus, you can use MPL within a permissive (or even proprietary) project without any licensing issues, as long as you adhere to the responsibilities mentioned in the license, which mostly boils down to providing the Licenses for the MPL licensed files as well as a link to the source code. If that is considered "too much" of a responsibility, just as a side-note: many permissive licenses also carry some heavy-hitting responsibilities, e.g. Apache:
|
yea i don't think the MPL is much of a problem, but i am also not the legal department and i think most larger companies will just tend to avoid gray areas. its not ideal, its not my preference, but it is what it is, just like this project is free to use whatever license they feel is best for their project. i don't have any ill will towards the project, but it doesn't change the reality of the licensing situation with most large companies. personally, i have never had issues with licensing open source stuff with BSD, MIT, or Apache and for very low level libraries, i personally think using more permissive can make them more popular, etc. i dont know the reason for the MPL in case, so its difficult to say if its the right choice or not. Rust is generally made wit MIT/Apache, https://www.rust-lang.org/policies/licenses, so low-level rust libraries probably should follow similarly, unless there is a good reason not to, otherwise it does have a cascading effect shrug .. again, just IMHO i mean, |
dirs-sys
0.4.1 was just released and comes w/ a new dependencyoption-ext
. I think this is a bit unfortunate due to two reasons:dirs-sys
is a rather low-level crate and just pulling a unused dependency just for a bit ofOption
convenience seems a bit excessive. Note thatoption-ext
was basically unused by the Rust ecosystem prior to this release:dirs-sys
(and all otherdirs-dev
project) are licensed under Apache2 + MIT (which is the de facto default for the Rust ecosystem),option-ext
is MPL which is a copyleft license.I can file a fix PR if this is OK w/ the maintainers.
The text was updated successfully, but these errors were encountered: