https://bugzilla.redhat.com/show_bug.cgi?id=2246777 --- Comment #5 from Ben Beasley <code@xxxxxxxxxxxxxxxxxx> --- (In reply to Sandro from comment #4) > That's an issue to be addressed with regards to `python-plotly`. This > package doesn't ship any Javascript files. Although, it's rather useless > without `plotly`, should that no longer be permissible. It ships them in the source RPM. If something in the source archive violates packaging guidelines (like a precompiled executable), it’s enough to remove it in %prep. If there’s something that means we can’t redistribute a file from the source archive, we need to remove it before uploading to the lookaside cache so it doesn’t appear either in the lookaside cache or in the .src.rpm packages. > The PyPI sdist tarball - > https://files.pythonhosted.org/packages/0d/17/ > ba496e60f95020227a15f73965a64ea3f176cae7faed2d9302a14524b681/plotly-5.18.0. > tar.gz - does contain several license files: > > plotly-5.18.0/jupyterlab_plotly/nbextension/index.js.LICENSE.txt > plotly-5.18.0/jupyterlab_plotly/labextension/static/third-party-licenses.json > plotly-5.18.0/jupyterlab_plotly/labextension/static/486.6450efe6168c2f8caddb. > js.LICENSE.txt > plotly-5.18.0/jupyterlab_plotly/labextension/static/478.b48f45da3d88616ad3f9. > js.LICENSE.txt > plotly-5.18.0/LICENSE.txt > > Would these be sufficient to clarify the applicable Javascript licenses? If > so, I can have them included in the `python-plotly` package and update the > License: tag accordingly, if needed. The top-level LICENSE.txt is just the “overall” MIT license; it doesn’t have anything about the JavaScript dependencies. The others seem to pertain to the “Jupyter Extension for Plotly.py,” jupyterlab-plotly, https://github.com/plotly/plotly.py/tree/master/packages/javascript/jupyterlab-plotly. They do have some information about bundled dependencies and their licenses, but they lack the required license texts, and I’m not sure if they are complete. In any case, they don’t cover the massive dependency tree of https://github.com/plotly/plotly.js/, which is where the plotly.min.js bundle seems to come from. -- You are receiving this mail because: You are on the CC list for the bug. You are always notified about changes to this product and component https://bugzilla.redhat.com/show_bug.cgi?id=2246777 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-spam&short_desc=Report%20of%20Bug%202246777%23c5 _______________________________________________ package-review mailing list -- package-review@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to package-review-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-review@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue