Re:Crev: dependency vetting with a web of trust
by wyldfire on Friday January 04, 2019 @01:39PM
(#18826495)
I don't think you want/need web-of-trust to evaluate licensing. You probably just want to see "what is the full set of (transitive) licenses I'm agreeing to when taking on this new dependency?" Right? If so, there's cargo-license [1] for that.
[1] https://github.com/onur/cargo-license