https://bugzilla.redhat.com/show_bug.cgi?id=2299712 --- Comment #10 from Miro Hrončok <mhroncok@xxxxxxxxxx> --- There are bundled things in the sources: uv-0.2.28/crates/uv-python/python/packaging is python3dist(packaging) = 24.1~~dev0; BSD-2-Clause OR Apache-2.0 This is not present in the uv package as Python files but it seems compiled into the uv executable: $ grep -E '__title__ = "packaging"' bin/uv grep: bin/uv: binary file matches $ grep -E '__author__ = "Donald Stufft and individual contributors"' bin/uv grep: bin/uv: binary file matches uv-0.2.28/crates/uv-extract/src/vendor/cloneable_seekable_reader.rs // Copyright 2022 Google LLC // Licensed under the Apache License, Version 2.0 <LICENSE-APACHE or // https://www.apache.org/licenses/LICENSE-2.0> or the MIT license // <LICENSE-MIT or https://opensource.org/licenses/MIT>, at your // option. This file may not be copied, modified, or distributed // except according to those terms. uv-0.2.28/crates/uv-client/src/remote_metadata.rs /// This method is derived from `prefix-dev/rip`, which is available under the following BSD-3 /// Clause license: /// /// ```text /// BSD 3-Clause License /// /// Copyright (c) 2023, prefix.dev GmbH /// /// ... /// ``` /// /// Additional work and modifications to the originating source are available under the /// Apache License, Version 2.0, ([LICENSE-APACHE](LICENSE-APACHE) or <https://www.apache.org/licenses/LICENSE-2.0>) /// or MIT license ([LICENSE-MIT](LICENSE-MIT) or <https://opensource.org/licenses/MIT>), as per the /// rest of the crate. uv-0.2.28/crates/pep440-rs uv-0.2.28/crates/pep508-rs Both are Apache-2.0 OR BSD-2-Clause, both re 0.6.0 seem to be from crates.io There are other crates in uv-0.2.28/crates/ that seem suspicious. Files in uv-0.2.28/crates/uv-virtualenv/src/activator/ seem bundled from virtualenv # Copyright (c) 2020-202x The virtualenv developers ... MIT -- You are receiving this mail because: You are on the CC list for the bug. You are always notified about changes to this product and component https://bugzilla.redhat.com/show_bug.cgi?id=2299712 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-spam&short_desc=Report%20of%20Bug%202299712%23c10 -- _______________________________________________ package-review mailing list -- package-review@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to package-review-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-review@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue