[Buildroot] [PATCH 0/3] Add tainting support

Peter Korsgaard peter at korsgaard.com
Wed Nov 8 20:27:39 UTC 2023


>>>>> "Adam" == Adam Duskett <adam.duskett at amarulasolutions.com> writes:

 > Yes, but to your original points
 > https://patchwork.ozlabs.org/project/buildroot/list/?series=64340, this is
 > not
 > an acceptable solution to put  "NODEJS_SRC_LICENSE += , vendored
 > dependencies licenses probably not listed"

 > in the makefile, because there are several valid instances where you may be
 > able to guarantee the integrity of

 > the licenses and provide hashsums for each of them. Hence, the ability to
 > disable the taint check.

In that case you would probably make individual packages for those to
have the download/license/hash stuff integrated?

As is this seems very vague and not something that will be tested by the
autobuilders, so I prefer Yann's simple npm license addition.

-- 
Bye, Peter Korsgaard



More information about the buildroot mailing list