Question: How to declare license of external dependencies?

fsfe / reuse-tool

reuse is a tool for compliance with the REUSE recommendations.

https://reuse.software

386 stars 147 forks source link

Question: How to declare license of external dependencies? #426

Closed vanitasvitae closed 2 years ago

vanitasvitae commented 2 years ago

Hey!

I'd like to know, how to declare the license for external dependencies, which are not part of the project repository itself but still part of the compiled binaries (eg. dependencies defined via build tools like gradle, maven etc.).

mxmehl commented 2 years ago

That's out of REUSE's scope as we only target an individual project, which is why I would close this issue. However, if you would like to provide information about a binary or ready package, a software bill of material is usually a sane choice. Perhaps https://github.com/spdx/spdx-sbom-generator might is useful for you?