Skip to content

fix: add the Apache-2.0 LICENSE the manifest already declares - #9

Merged
h4x0r merged 1 commit into
mainfrom
fix/add-apache-licence
Aug 9, 2026
Merged

fix: add the Apache-2.0 LICENSE the manifest already declares#9
h4x0r merged 1 commit into
mainfrom
fix/add-apache-licence

Conversation

@h4x0r

@h4x0r h4x0r commented Aug 9, 2026

Copy link
Copy Markdown
Contributor

forensic-vfs-mount had no licence file of any name while:

  • Cargo.toml declared license = "Apache-2.0",
  • docs/terms.md told readers the crate is released under the Apache
    License 2.0 and linked them to blob/main/LICENSE — a 404,
  • and the crate has been published on crates.io since 0.1.0 carrying that
    licence claim.

This adds the file. The text is byte-identical to the rest of the fleet
(md5 3b83ef96387f14655fc854ddc3c6bd57), copied from the sibling
forensic-vfs repo, so the licence surface stays uniform across the 93
repos.

Why fix: and not chore:

Deliberate, so release-plz cuts a patch release. The published .crate
archives for 0.1.0 and 0.1.1 do not contain the licence — cargo only bundles
a LICENSE that exists at package time — so the repo being correct does not
by itself fix anything for a consumer pulling from the registry. Only a new
version does.

Not verified here: this host has no cargo, so I could not run
cargo package --list to demonstrate the file lands in the archive. Cargo
including a root LICENSE when the manifest has no include list is
documented behaviour, not something I measured.

Adjacent, deliberately left alone

  • The README has no badge row at all — the fleet standard calls for
    CI / License / Release / Sponsor. Adding a lone License badge to a README
    with no others would look worse than none; it wants doing as one change.
  • rust-version = "1.85" on a published library, against the fleet rule that
    libraries hold a low CI-verified floor (1.75/1.80). The crate is
    edition = "2021", so 1.85 may well be over-declared — but that is a claim
    to test by compiling, not to edit on a hunch.

The repo carried no licence file of any name while Cargo.toml declared
license = "Apache-2.0" and docs/terms.md linked readers to
blob/main/LICENSE, which 404'd. The crate has been published on crates.io
since 0.1.0 with a licence claim nothing in the repo backed.

Text is byte-identical to the rest of the fleet
(md5 3b83ef96387f14655fc854ddc3c6bd57), copied from the sibling
forensic-vfs repo.

Typed fix: rather than chore: so release-plz cuts a patch release -- the
published .crate files for 0.1.0 and 0.1.1 do not contain the licence, and
only a new version fixes that for anyone consuming it from the registry.
@h4x0r
h4x0r merged commit 89be2c8 into main Aug 9, 2026
16 checks passed
@h4x0r
h4x0r deleted the fix/add-apache-licence branch August 9, 2026 05:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant