conda-forge / conda-forge.github.io

The conda-forge website.
https://conda-forge.org
BSD 3-Clause "New" or "Revised" License
131 stars 274 forks source link

Include source code in the package tarballs for GPL packages #1067

Open moorepants opened 4 years ago

moorepants commented 4 years ago

The GPL and other similar licenses require the source code to be distributed with the binary or equivalently alongside the binary if the binary is distributed. We distribute binaries of GPL libraries via anaconda.org, but the source code associated with that binary is not available in the tarball or alongside the tarball.

Some references:

A solution would be to include the source tarball downloaded in the build process in the resulting conda package tarball. This could be be done for all packages regardless of the license so you don't have to determine which licenses require this.

Alternatively, anaconda.org should also have a source tarball along side each unique release, similar to the source channels available with Ubuntu.

xhochy commented 4 years ago

Alternatively, anaconda.org should also have a source tarball along side each unique release, similar to the source channels available with Ubuntu.

I would prefer this option as we also want to have this in general as sometimes sources for packages become unavailabe some time after building the binary (this happens independent of the license).

wolfv commented 4 years ago

I think the source should be repackaged into regular .conda packages and uploaded to a special source channel. Would be cool to come up with a spec for this.

wolfv commented 4 years ago

(this could also be great for debugging if we figure out how to tell GDB from where to pick up the source files).

scopatz commented 4 years ago

A source channel or label would be ideal, I think