Add license information to package metadata

[RobbeSneyders]

The typeshed packages pushed to Pypi don't have any license information in their metadata (types-pyyaml example).

We automatically check the licenses of all our dependencies, and currently need to add an exception for every typeshed package we use. It would be great if the license information could be added to the package metadata instead.

The fix would be to add the following to the base setup.cfg file.

[metadata]
license = Apache-2.0 license
classifier =
    License :: OSI Approved :: Apache Software License

I looked for the relevant code to submit a PR, but it seems like it's not a part of this repository. If I missed it, or it is available somewhere else, please point me to it and I'll happily submit a PR.

[Akuli]

Seems like it should go to empty_package/setup.py in typeshed-internal/stub_uploader.

[JelleZijlstra]

That's right.

Note that typeshed as a whole is partially licensed under Apache and partly under the MIT License according to https://github.com/python/typeshed/blob/master/LICENSE. I don't have context on why that is, but perhaps @JukkaL remembers. For simplicity in setup.py it'd be better to have only one license.

[RobbeSneyders]

Thanks for the info! I submitted a PR to that repo.

[JukkaL]

Some of the earliest stubs were taken from the stubs included with mypy, and they were under the MIT License. That could explain the situation, though I don't remember this very well.

[srittau]

The MIT license was added in 337abed by @matthiaskramm. Maybe Matthias has some insights? But if in doubt, we need to dual-license the stubs themselves.

[JukkaL]

I recognized some of the stubs added in that commit as coming from mypy. So my hypothesis above seems right.

The individual authors of those stubs should be visible in the mypy commit history, if we want to ask all the authors if they are fine with changing the license to Apache. Unfortunately we lost the commit history and author attribution as they were merged to typeshed.

[JukkaL]

On the other hand, if Apache is strictly more restrictive than the MIT license, including just the Apache license in the metadata seems okay to me. At least it's better than not having any information.