cohere-python icon indicating copy to clipboard operation
cohere-python copied to clipboard

Add license to PyPI classifiers

Open WilliamRoyNelson opened this issue 5 months ago • 1 comments

Adds license to PyPI project classifiers

The reason that it is very important for this information to be present is that in an enterprise environment, security tools like Sonatype Nexus IQ are used to manage open source software risk. Nexus IQ specifically can be configured to classify packages according to their license. This prevents developers from inadvertently using licenses like GNU General Public License v2.0 without realizing that they may be legally obligated to make their entire project open source.

My understanding is that Nexus IQ uses the classifiers panel to determine a project's license. Because Cohere does not currently have a classifiers panel, Nexus cannot determine the license and treats it as a high-risk package. image

I also slightly modified the project.urls I don't know why it doesn't currently display on PyPI, possibly the quotation marks, possibly it should be source instead of Repository The Poetry Docs suggest that repository is valid, but I don't see the link on PyPI. Maybe Repository should be lower case: repository

I used NumPy as a model: https://github.com/numpy/numpy/blob/main/pyproject.toml#L53-L59

[project.urls]
homepage = "https://numpy.org"
documentation = "https://numpy.org/doc/"
source = "https://github.com/numpy/numpy"
download = "https://pypi.org/project/numpy/#files"
tracker = "https://github.com/numpy/numpy/issues"
"release notes" = "https://numpy.org/doc/stable/release"

image

WilliamRoyNelson avatar Sep 06 '24 03:09 WilliamRoyNelson