Closed Jake-Shadle closed 3 years ago
This would indeed be nice.
Is it possible to download and use that data set also for licenses to be able to run in CI without requiring online connection?
That would indeed be possible, their API does support fetching up to 1000 crate/package license definitions at a time, so the ones that exist could be fetched and cached, then only the ones that are missing could be either fetched in the future to see if the license information has been added since the last time, or they can be checked via the file system as they are done today.
Adding support for clearlydefined.io would be a big improvement in using a shared, single source of truth for licensing information, instead of the current method of forcing users to add configuration values in their repositories when there is a difference between the declared and detected licenses.