https://bugzilla.redhat.com/show_bug.cgi?id=2391300 --- Comment #13 from Petr Khartskhaev <pkhartsk@xxxxxxxxxx> --- There are 5 vendored crates which make use of the CC0-1.0 license: - dunce (https://gitlab.com/kornelski/dunce), which exclusively uses CC0-1.0 (despite crates.io licensing it under CC0-1.0 OR MIT-0 OR Apache-2.0?), but it is also a Windows-specific crate that is never used during the build, it is only bundled because of the way `cargo vendor` works, so I do not see the point in contacting the upstream there - constant_time_eq (https://github.com/cesarb/constant_time_eq), which is licensed with MIT-0 OR Apache-2.0 OR CC0-1.0 at the user's option, so there's no need to contact upstream. It is also licensed under MIT-0 OR Apache-2.0 in Fedora - enum-map and enum-map-derive (https://codeberg.org/xfix/enum-map), where the only file licensed under CC0-1.0 or MIT OR Apache-2.0 (which already isn't a problem) is the root-directory `Cargo.toml` that is not even used in the crates themselves. In Fedora it is licensed under MIT OR Apache-2.0 - imgref (https://github.com/kornelski/imgref), licensed under CC0-1.0 OR Apache-2.0 according to crates.io (the repository contains both license files but no source files have a license header). It is licensed exclusively under Apache-2.0 in Fedora >From what I understand, there is no need to contact any of the upstreams and it MIGHT be possible to remove the mention of CC0-1.0 completely, though I am confused about dunce, which seems to be the most problematic one. -- You are receiving this mail because: You are on the CC list for the bug. You are always notified about changes to this product and component https://bugzilla.redhat.com/show_bug.cgi?id=2391300 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-spam&short_desc=Report%20of%20Bug%202391300%23c13 -- _______________________________________________ package-review mailing list -- package-review@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to package-review-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-review@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
