rust-embed icon indicating copy to clipboard operation
rust-embed copied to clipboard

rust-embed is tainted with MPL-2 via option-ext

Open neoeinstein opened this issue 1 year ago • 1 comments
trafficstars

Hello, I wanted to raise a note that this crate currently has a transitive dependency on option-ext. That library is MPL-2, a copyleft license. The option-ext dependency is brought in via shellexpand's dependency on dirs. The maintainer of dirs has explicitly stated that they added a dependency on option-ext for the express purpose of tainting the use of dirs with MPL-2, which thus taints any use of rust-embed. I have filed a ticket with shellexpand to recommend using an alternate dependency such as etcetera, which does not suffer from this tainting issue.

neoeinstein avatar Jan 08 '24 18:01 neoeinstein

Thanks. Hopefully shellexpand releases a new version soon. We might need to use alternatives with limitations if needed such as, https://crates.io/crates/tilde-expand

pyrossh avatar Jan 10 '24 09:01 pyrossh