-
-
Notifications
You must be signed in to change notification settings - Fork 1.2k
Remove dependencies with "bad" license. #1820
Copy link
Copy link
Closed as not planned
Labels
StaleThis issue/Pull Request is stale and will be automatically closedThis issue/Pull Request is stale and will be automatically closed
Description
Towards: cncf/sandbox#211
All third-party dependencies for external-secrets must comply with CNCF licensing policies - See Allowed third party license policy | cncf/foundation. I've opened cncf/foundation#485 to request exception for the hashicorp libs.
FOSSA report dashboard (requires login)
| Project | License | CNCP Exemption issue | Reason |
|---|---|---|---|
| https://github.com/hashicorp/go-immutable-radix | MPL-2.0 | cncf/foundation#400 | pkg/provider/vault |
| https://github.com/hashicorp/go-retryablehttp | MPL-2.0 | cncf/foundation#138 | pkg/provider/gitlab / xanzy/go-gitlab |
| https://github.com/hashicorp/go-plugin | MPL-2.0 | cncf/foundation#300 | pkg/provider/vault |
| https://github.com/hashicorp/go-rootcerts | MPL-2.0 | cncf/foundation#400 cncf/foundation#381 | pkg/provider/vault |
| https://github.com/hashicorp/go-secure-stdlib | MPL-2.0 | - | pkg/provider/vault |
| https://github.com/hashicorp/go-sockaddr | MPL-2.0 | cncf/foundation#381 | pkg/provider/vault |
| https://github.com/hashicorp/go-uuid | MPL-2.0 | cncf/foundation#294 | pkg/provider/vault |
| https://github.com/hashicorp/vault | MPL-2.0 | cncf/foundation#381 | pkg/provider/vault |
| https://github.com/hashicorp/go-version | MPL-2.0 | cncf/foundation#297 | pkg/provider/vault |
| https://github.com/hashicorp/yamux | MPL-2.0 | - | pkg/provider/vault |
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
StaleThis issue/Pull Request is stale and will be automatically closedThis issue/Pull Request is stale and will be automatically closed