[Buildroot] [PATCH 0/3] Add tainting support
Peter Korsgaard
peter at korsgaard.com
Wed Nov 8 20:27:39 UTC 2023
>>>>> "Adam" == Adam Duskett <adam.duskett at amarulasolutions.com> writes:
> Yes, but to your original points
> https://patchwork.ozlabs.org/project/buildroot/list/?series=64340, this is
> not
> an acceptable solution to put "NODEJS_SRC_LICENSE += , vendored
> dependencies licenses probably not listed"
> in the makefile, because there are several valid instances where you may be
> able to guarantee the integrity of
> the licenses and provide hashsums for each of them. Hence, the ability to
> disable the taint check.
In that case you would probably make individual packages for those to
have the download/license/hash stuff integrated?
As is this seems very vague and not something that will be tested by the
autobuilders, so I prefer Yann's simple npm license addition.
--
Bye, Peter Korsgaard
More information about the buildroot
mailing list