Robert Grant
Robert Grant
Noticed this is an open bug in the library repo: https://github.com/CycloneDX/cyclonedx-python/issues/391
The gain of time probably is not sufficient vs the risk of mis-licencing someone's software. The safest is to have a blank licence field, or a proprietary licence as the...
Coincidentally enough I also am hitting this: license listing is essential for OSS projects and it would be fantastic if the `poetry show [--no-dev] --licences` open could be pursued.
@Erik-vdg I think that's a great summary. What does "in a hierarchical manner" mean in this instance? And what's the difference between "with" and "only"?
I hit this but on Linux, in a CI build: ```bash $ npm i added 848 packages in 19s 146 packages are looking for funding run `npm fund` for details...
Is it worth trying a custom tldn? I'm wondering if `centos2` is just looking in a different DNS server for `.com`.
Ah I didn't even consider that! I'll make it a bit clearer.
Update: it installed fine from https://github.com/robertlagrant/pyramid_simpleauth, where I removed that dep. Will see what happens.
@flemminglau is the hierarchical merge not what you're after? What's missing?
@salmanazmat666 it might be worth making progress by merging in the base branch?