Details
-
Improvement
-
Status: Closed
-
Major
-
Resolution: Fixed
-
None
-
None
Description
Currently, we do not include license files from third-party components. As some licenses require attribution, we should include the correct license files from components we depend on.
For the go modules we can probably leverage https://github.com/google/go-licenses to provide the metadata. This provides both dependency checking of forbidden licenses, and automatic downloads of license files.
The yunikorn-web repository only needs our own LICENSE/NOTICE files, as we have no 3rd party go dependencies, and javascript deps are written to /html/3rdpartydependencies.txt in the generated image.
Attachments
There are no Sub-Tasks for this issue.