Welcome to the Inedo Forums! Check out the Forums Guide for help getting started.
If you are experiencing any issues with the forum software, please visit the Contact Form on our website and let us know!
Missing default GPL rule
-
Fresh install doesn't ship with any default GPL/copyleft compliance rule
Quick question on License Compliance from our Enterprise trial evaluation. Our understanding from your documentation was that a fresh ProGet install ships with some kind of default policy flagging GPL/copyleft licenses for review. On our fresh Enterprise trial instance, that wasn't the case — a package we tested (MySql.Data 8.4.0, correctly detected as GPL-2.0-only) was Compliant by default, with no Specified License Rule in place at all until we added one ourselves.
Once we added a rule marking GPL-2.0-only as Noncompliant, enforcement worked exactly as expected — the same real 400 Bad Request block we see for vulnerability-based quarantine applied identically.
Is a default GPL/copyleft rule meant to be pre-configured out of the box, and we're missing a setup step, or is that something every install needs to configure explicitly regardless of edition? Want to make sure we don't have a false sense of security assuming default license enforcement exists when it doesn't.
Thanks,
Sai -
Hi @sai.pabbareddy ,
There is no rule, but I believe admins are encouraged to create one as part of the "onboarding" process when creating feeds, at some point.
Can you point to the documentation that shows that? We will clarify the documentation.
Thanks,
Alana -
Went back through your docs and our own notes trying to pin down a specific page, and honestly — we can't find one. The closest we got was a page showing how to create a Specified License Rule (e.g., setting GPL-3.0 to noncompliant), but every example there is clearly a user-configured policy, not a factory default. We think our original impression was a general one from early research rather than something we can point to a specific article for, so no need to go hunting on our end — sounds like it was just an assumption on our part rather than something your docs actually claimed.
Good to have it confirmed either way: no default license rule ships out of the box, and creating one (GPL or otherwise) is expected as part of setting up a feed. We'll document it that way.
Thanks,
Sai
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login