search

pypa / pip

The Python package installer
https://pip.pypa.io/
MIT License
9.51k stars 3.02k forks source link

Provide a way to restrict acceptable licenses for downloaded source code #7173

Open brettcannon opened 5 years ago

brettcannon commented 5 years ago

What's the problem this feature will solve? To help users not use software whose license does not meet some criteria the user has.

Describe the solution you'd like A way to specify what license trove classifiers are acceptable and either warn or error out if none of the trove classifiers exist (or at least if no trove classifier for a license is specified).

Alternative Solutions Get PyPI and/or twine to complain very loudly if no license is specified. :)

Additional context Basically having to hunt this stuff down sucks, so it might be helpful to expose this more upfront when people try to use software which might not meet corporate requirements.

chrahunt commented 5 years ago

Related to Improving license clarity with better package metadata (discuss.python.org). The Motivation section of the associated draft PEP gives some background on why trove classifiers may be troublesome in practice to handle license questions programmatically (mostly ambiguity, from reading the linked issues).

pradyunsg commented 5 years ago

I'm on board for doing this and I think we should wait for that PEP to get done before doing this.