{"action":"created","issue":{"url":"https://api.github.com/repos/pypa/pip/issues/4941","repository_url":"https://api.github.com/repos/pypa/pip","labels_url":"https://api.github.com/repos/pypa/pip/issues/4941/labels{/name}","comments_url":"https://api.github.com/repos/pypa/pip/issues/4941/comments","events_url":"https://api.github.com/repos/pypa/pip/issues/4941/events","html_url":"https://github.com/pypa/pip/issues/4941","id":284329216,"number":4941,"title":"Optional nonfree license option in pip.conf?","user":{"login":"rurban","id":41809,"avatar_url":"https://avatars2.githubusercontent.com/u/41809?v=4","gravatar_id":"","url":"https://api.github.com/users/rurban","html_url":"https://github.com/rurban","followers_url":"https://api.github.com/users/rurban/followers","following_url":"https://api.github.com/users/rurban/following{/other_user}","gists_url":"https://api.github.com/users/rurban/gists{/gist_id}","starred_url":"https://api.github.com/users/rurban/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rurban/subscriptions","organizations_url":"https://api.github.com/users/rurban/orgs","repos_url":"https://api.github.com/users/rurban/repos","events_url":"https://api.github.com/users/rurban/events{/privacy}","received_events_url":"https://api.github.com/users/rurban/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2017-12-23T22:05:53Z","updated_at":"2017-12-23T22:20:56Z","closed_at":"2017-12-23T22:15:50Z","author_association":"NONE","body":"One PureOS and debian maintainer came up with the idea to ban cpanm, a perl packaging client, similar to pip, from PureOS, because \"it allows potential nonfree packages to be installed\". https://tracker.pureos.net/T277\r\n\r\nIf this will get through how will pip treat such a ban? \r\nE.g. provide a no-license-nonfree option in pip.conf, which needs to be overridden somehow when installing a \"nonfree\" licensed package.\r\nWho would maintain such a list of filtered licenses? I guess this should be handled downstream, in this case the pureos pip maintainer. I'm not sure if they will agree with debian nonfree or fedora nonfree, ...\r\nOr maybe there's already a maintainership of such a list.\r\n\r\nNext technical problem would be how to define such an optional list of forbidden or warned upon licenses. regex or comma-seperated list? \r\nAnd the policy: Warn or error.\r\nno-license-policy=(warn|error)\r\n\r\nI see a potential advantage for users to be warned on installing \"nonfree\" packages, e.g. the ACM license in randlib which forbids code to be used \"for financial gain\".\r\n"},"comment":{"url":"https://api.github.com/repos/pypa/pip/issues/comments/353751461","html_url":"https://github.com/pypa/pip/issues/4941#issuecomment-353751461","issue_url":"https://api.github.com/repos/pypa/pip/issues/4941","id":353751461,"user":{"login":"rurban","id":41809,"avatar_url":"https://avatars2.githubusercontent.com/u/41809?v=4","gravatar_id":"","url":"https://api.github.com/users/rurban","html_url":"https://github.com/rurban","followers_url":"https://api.github.com/users/rurban/followers","following_url":"https://api.github.com/users/rurban/following{/other_user}","gists_url":"https://api.github.com/users/rurban/gists{/gist_id}","starred_url":"https://api.github.com/users/rurban/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rurban/subscriptions","organizations_url":"https://api.github.com/users/rurban/orgs","repos_url":"https://api.github.com/users/rurban/repos","events_url":"https://api.github.com/users/rurban/events{/privacy}","received_events_url":"https://api.github.com/users/rurban/received_events","type":"User","site_admin":false},"created_at":"2017-12-23T22:20:56Z","updated_at":"2017-12-23T22:20:56Z","author_association":"NONE","body":"Thanks. That's exactly what I wanted to hear. Don't let them blackmail you."}}
{"actor":{"display_login":"rurban"}}