cargo-about icon indicating copy to clipboard operation
cargo-about copied to clipboard

Handling of Apache "NOTICE" file

Open nicopap opened this issue 2 years ago • 0 comments

Currently cargo-about doesn't really comply with the Apache-2.0 license. Apache has a whole section introducing and specifying how to handle NOTICE files (4.d) , I see no handling of NOTICE in cargo-about. I've read about 10 times the NOTICE section and it seems that having a reproduction of all the NOTICE files is required; though IANAL.

Someone using cargo-about will be in contravention of the conditions of the Apache license if any of their dependency has a NOTICE file. The legally conscientious user will need to manually go through all their Apache-licensed dependencies dragging for stray NOTICE files. This undermines a major functionality of the plugin.

Solution: implement NOTICE handling by concatenating them and adding them to the output of cargo about generate.

nicopap avatar May 26 '22 13:05 nicopap