mitre / hipcheck

Automatically assess and score software repositories for supply chain risk.
https://mitre.github.io/hipcheck/
Apache License 2.0
62 stars 3 forks source link

Add notice to reflect the licenses of third-party software we use. #192

Closed alilleybrinker closed 1 week ago

alilleybrinker commented 2 months ago

Many open source licenses require some form of notice that you are using their code to be included in or included with the documentation of binaries you ship. I've used cargo-about to figure out what licenses we need to comply with in our own dependencies, and this PR represents draft work to get that reflected. Ideally we'd incorporate the cargo-about output to add something to the website, but I haven't done the work to sort that out myself yet.

alilleybrinker commented 1 week ago

Going to close this, as I think there are better ways than this auto-generated HTML thing.