Comments (4)
@caniko I like the idea, but:
- Do you know of any valid and up-to-date source of truth for those incompatibilities?
- What about projects that don't provide license info?
- Do you know of any other packaging-related tool that does this?
- How would that impact performance? My feeling is that it could add quite an overhead to many operations
- Until we get standardized license declarations (see PEP 639) it can be difficult to properly parse license information from packages
from poetry.
Do you know of any valid and up-to-date source of truth for those incompatibilities?
Incompatibilities between licenses is common knowledge. You are probably trying ask the source of truth poetry
would use, it would have to be a new project where this is crystalized by the authors and maintainers.
How would that impact performance? My feeling is that it could add quite an overhead to many operations
From my POV, performance impact would be minimal; however, I might be missing something.
Until we get standardized license declarations (see PEP 639) it can be difficult to properly parse license information from packages
Good point. Willing to wait.
from poetry.
Using license information to cause locking to fail sounds awful to me!
I'd suggest this is better left to a dedicated tool that checks the results eg - not a recommendation, just the first thing I found - https://pypi.org/project/licensecheck/#description
from poetry.
Given all the information, I would say that it's a plugin candidate or as Dimbleby suggested, a totally separate project. While the idea is nice, the maintenance overhead feels too big for me.
Incompatibilities between licenses is common knowledge.
Well, in poetry-core we have a license list that's over 600 entries long. I doubt anyone but a trained lawyer was able to point out exactly which ones are incompatible with each other.
from poetry.
Related Issues (20)
- Resolving dependencies timer obscures SSH private key password prompt HOT 3
- Prompt for git credentials when trying to install package from private repository when credential cache is empty HOT 2
- Building pybind11 error. HOT 10
- Add coverage report on testing HOT 3
- setuptools not installed when it is a transitive dependency on Python 3.12 HOT 3
- Terminate the child process when killed HOT 4
- Poetry forgetting some dependencies (mix of extras, groups and version markers) HOT 4
- Poetry is not handling rpath for pip installed object files HOT 2
- Poetry does not install a non-optional package from lock file HOT 2
- poetry shell does not activate virtual env HOT 2
- Not able to install package and leading to this error. HOT 1
- Poetry fails due to missing SSH keys for downloading optional dependencies HOT 4
- currupted version of pip/setuptools/virtualenv in cache
- Homepage doesn't show up on PyPI HOT 1
- Installation of Pycuda uses the wrong python executable HOT 2
- Cannot install package from git which depends on external dependencies HOT 1
- Poetry update in private repo removes secondary dependencis HOT 3
- test_add_git_constraint_with_extras is flaky HOT 2
- Poetry incorrectly detects outdated poetry.lock file HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from poetry.