Hi! I'm from the Fedora Project and we are looking to package goose in Fedora and tiny-keccak is one of its Rust dependencies. A challenge we are running into is that tiny-keccak is under a CC0 license - it's now the consensus amongst open source license legal folks that CC0 doesn't account for patent issues and Creative Commons themselves recommend CC0 as a content license and not a source code license.
Because of the patent issues the license could cause, Fedora no longer accepts CC0 licensed code:
https://lwn.net/ml/fedora-legal/CAC1cPGw1xScGAXo-0NRs92zFB7ptRxTt=oCYi0BxfZDfAgUtYQ@mail.gmail.com/
We were wondering if you would consider dual-licensing this project with an MIT or Apache 2.0 license? Another project we're including as part of this work is constant_time_eq and they have three license options: https://github.com/cesarb/constant_time_eq
The option to use and distribute tiny-keccak under MIT-0, 0BSD, MIT, or Apache 2.0 would greatly enable our efforts to package open source tools for our userbase that rely on it. Thanks in advance for your consideration!
Hi! I'm from the Fedora Project and we are looking to package
goosein Fedora andtiny-keccakis one of its Rust dependencies. A challenge we are running into is thattiny-keccakis under a CC0 license - it's now the consensus amongst open source license legal folks that CC0 doesn't account for patent issues and Creative Commons themselves recommend CC0 as a content license and not a source code license.Because of the patent issues the license could cause, Fedora no longer accepts CC0 licensed code:
https://lwn.net/ml/fedora-legal/CAC1cPGw1xScGAXo-0NRs92zFB7ptRxTt=oCYi0BxfZDfAgUtYQ@mail.gmail.com/
We were wondering if you would consider dual-licensing this project with an MIT or Apache 2.0 license? Another project we're including as part of this work is
constant_time_eqand they have three license options: https://github.com/cesarb/constant_time_eqThe option to use and distribute
tiny-keccakunder MIT-0, 0BSD, MIT, or Apache 2.0 would greatly enable our efforts to package open source tools for our userbase that rely on it. Thanks in advance for your consideration!