Skip to content

(via norrietaylor): docs(licensing): expand malachite LGPL-3.0 compliance analysis with sour - #904

Merged
macroscopeapp[bot] merged 1 commit into
pr/04-architecture-docsfrom
macroscope/pr/04-architecture-docs
Jul 22, 2026
Merged

(via norrietaylor): docs(licensing): expand malachite LGPL-3.0 compliance analysis with sour#904
macroscopeapp[bot] merged 1 commit into
pr/04-architecture-docsfrom
macroscope/pr/04-architecture-docs

Conversation

@macroscopeapp

@macroscopeapp macroscopeapp Bot commented Jul 22, 2026

Copy link
Copy Markdown

Summary

Expands the malachite LGPL-3.0 compliance analysis in the licensing documentation to provide a complete assessment of source-conveyance requirements under LGPL-3.0 §4(d)(0).

Changes

Updated the malachite LGPL compliance section (lines 29-34) to document:

  • Source conveyance mechanism: Clarifies that the project relies on GPLv3 §6(d) for source conveyance via network location (crates.io)
  • Cargo.lock limitations: Notes that Cargo.lock only records URLs and checksums rather than actually conveying source code
  • Relinking requirement: Explains how the LGPL relinking requirement is satisfied
  • Risk acknowledgment: Documents the potential compliance risk if crates.io were to remove the pinned versions

Motivation

The original documentation lacked sufficient detail about how LGPL-3.0 source-conveyance obligations are met when depending on malachite. This expanded analysis provides clearer guidance for compliance review and highlights an inherent risk in relying on package registry availability for license compliance.

Note

Macroscope: Fix It For Me

Activity

Currently: Auto-merged 477a0bb

Previously

Note

Expand LGPL-3.0 compliance analysis in licensing docs with source-conveyance details

Updates licensing.md to replace a brief acceptance note with a structured analysis of LGPL-3.0 §4(d)(0) and GPLv3 §6 compliance requirements.

  • Documents source-conveyance via GPLv3 §6(d) using crates.io, including the role and limitations of Cargo.lock
  • Clarifies the relinking approach via public repository and Cargo.toml dependency overrides despite static linking
  • Risk: notes that crates.io availability is not guaranteed and that neither vendoring under vendor/ nor a §6(b) written offer is currently implemented

Macroscope summarized 6d88fe1.

@coderabbitai

coderabbitai Bot commented Jul 22, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Free

Run ID: c2902930-4edb-4263-8f3f-1d36ce91e02d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Comment @coderabbitai help to get the list of available commands.

@macroscopeapp
macroscopeapp Bot merged commit 477a0bb into pr/04-architecture-docs Jul 22, 2026
2 checks passed
@macroscopeapp
macroscopeapp Bot deleted the macroscope/pr/04-architecture-docs branch July 22, 2026 14:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant