Skip to content

Conversation

@musicinmybrain
Copy link
Contributor

The chosen Apache-2.0 license requires copies of the license text to be distributed with the software, but the published crates do not include it. This PR fixes that by adding symbolic links to the top-level LICENSE file, which are resolved during crate publication.

Before this PR:

$ git clone https://github.com/CycloneDX/cyclonedx-rust-cargo.git
$ cd cyclonedx-rust-cargo
$ cd cyclonedx-bom
$ cargo publish --dry-run
$ tar -tzvf ../target/package/cyclonedx-bom-0.8.0.crate | grep LICENSE
[no output]

After this PR:

$ cargo publish --dry-run
$ tar -tzvf ../target/package/cyclonedx-bom-0.8.0.crate | grep LICENSE
-rw-r--r-- 0/0           11341 2006-07-24 02:21 cyclonedx-bom-0.8.0/LICENSE

@musicinmybrain musicinmybrain requested a review from a team as a code owner December 6, 2025 08:37
@Shnatsel Shnatsel merged commit 305476e into CycloneDX:main Dec 8, 2025
7 of 9 checks passed
@lfrancke
Copy link
Contributor

lfrancke commented Dec 8, 2025

Thank you for the contribution!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants