https://bugzilla.redhat.com/show_bug.cgi?id=2051874 --- Comment #10 from Fabio Valentini <decathorpe@xxxxxxxxx> --- > Are you sure? MIT + GPLv3 is effectively GPLv3, and License specifies the > effective license [https://docs.fedoraproject.org/en-US/packaging-guidelines/LicensingGuidelines/#_license_field]. I have not checked the entire dependency tree, just the direct dependencies. But whether the resulting "effective license" is still GPLv3 or not, my point is that this needs to be *checked* and *documented*. You can use the following script in a mock shell, after doing a mock build with "--without check" to list all crate licenses in the buildroot: for i in $(rpm -qa | grep "rust-.*-devel"); do rpm -q $i --qf "%{LICENSE}\n"; done | sort | uniq (Side note: For Rust packages, we actually usually don't even collapse things like "GPLv3 and MIT" into "GPLv3". Speaking for myself, I don't want to get involved in the intricacies of license compatibility matrices, so I just specify the non-collapsed versions explicitly.) -- You are receiving this mail because: You are always notified about changes to this product and component You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2051874 _______________________________________________ package-review mailing list -- package-review@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to package-review-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-review@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure