riseproject-dev / riseproject-dev/python-wheels
Investigate adding a license checker for built wheels
還沒有人認領這個 Issue。
- 主要語言
- Python
- 星號
- 0
- 分支
- 0
- 平均合併
- 16 小時 14 分鐘
- 30 天內合併 PR
- 952
描述
Right now, part of the wheel build review process has always involved downloading a built wheel, unpacking it, and inspecting it for:
- The project's LICENSE files and related data
- The presence of linked libraries included in the wheels as part of the final build process
- Any license compliance steps which needed to be taken based on the libraries found in step 2 (if any)
It would be very helpful to have this check automated along with everything else we've got running for every PR. However, while checking for the correct license according to the target project may be simple, having the workflow/script confirm that we aren't missing any supplemental licensing (or, possibly, that the wheels are actually failing to meet licensing requirements) is going to be more complicated.
貢獻指南
這個儲存庫沒有索引到貢獻指南
從這裡開始
- 先讀完整個 Issue,再讀專案的貢獻指南。
- 在 Issue 下留言說明你要接手 —— 這能避免兩個人做同樣的事。
- Fork 儲存庫,在一個分支上完成修改。
- 送出 Pull Request,並在描述裡引用這個 Issue 編號。
研究方向
先檢查現有的 workflow 或 script,該 workflow 或 script 會為每個 pull request 建置 wheels,接著檢查建置出的 wheels 是否包含 LICENSE 檔案和隨附的函式庫。定義應如何回報額外的授權和合規性發現;當自動化檢查能在 pull request 建置期間可靠地識別這些情況時,工作即完成。
由索引模型根據 Issue 內容生成。
評估
- 技術堆疊
- python
- 領域
- build-system, ci-cd
- Issue 類型
- 功能
- 難度
- 5/5
- 預估耗時
- 一週以上
- 活躍度
- 冷清
- 描述清晰度
- 需要釐清
- 新手友好度
- 35/100