riseproject-dev / riseproject-dev/python-wheels

Investigate adding a license checker for built wheels

未关闭
#167 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看

还没有人认领这个 Issue。

enhancement infrastructure
主要语言
Python
星标
0
派生
0
平均合并
16 小时 14 分钟
30 天内合并 PR
952

描述

Right now, part of the wheel build review process has always involved downloading a built wheel, unpacking it, and inspecting it for:

  1. The project's LICENSE files and related data
  2. The presence of linked libraries included in the wheels as part of the final build process
  3. Any license compliance steps which needed to be taken based on the libraries found in step 2 (if any)

It would be very helpful to have this check automated along with everything else we've got running for every PR. However, while checking for the correct license according to the target project may be simple, having the workflow/script confirm that we aren't missing any supplemental licensing (or, possibly, that the wheels are actually failing to meet licensing requirements) is going to be more complicated.

贡献指南

这个仓库没有索引到贡献指南

从这里开始

  1. 先读完整个 Issue,再读项目的贡献指南。
  2. 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
  3. Fork 仓库,在一个分支上完成修改。
  4. 提交 Pull Request,并在描述里引用这个 Issue 编号。

调研方向

首先检查现有的 workflow 或脚本,该 workflow 或脚本会为每个 pull request 构建 wheels,然后检查构建出的 wheels 中是否包含 LICENSE 文件和捆绑的库。定义应如何报告补充的许可和合规性发现;当自动化检查能够在 pull request 构建期间可靠地识别这些情况时,工作即完成。

由索引模型根据 Issue 内容生成。

评估

技术栈
python
领域
build-system, ci-cd
Issue 类型
功能
难度
5/5
预计耗时
一周以上
活跃度
冷清
描述清晰度
需要澄清
新手友好度
35/100

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。