kennethreitz/pipenv
1
0
Fork 0
mirror of https://github.com/kennethreitz/pipenv.git synced 2026-06-05 22:50:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1749 from pypa/ncoghlan-update-pyupio-legal-note-for-db-removal

Browse Source 
Update `pipenv check` docs for Safety-DB removal
This commit is contained in:
Kenneth Reitz
2018-03-15 07:35:26 -04:00
committed by GitHub
parent 2282e7045f b493418c5d
commit fce2214e64
1 changed files with 7 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/advanced.rst
+7 -6
View File
@@ -187,12 +187,13 @@ Example::
.. note::
Commercial redistributors of `pipenv` should be aware that the public `Safety-DB`
project backing this feature is licensed as CC-BY-NC-SA by `pyup.io`. While
`pyup.io` have [stated explicitly](https://github.com/pypa/pipenv/issues/1651#issuecomment-372583779)
that commercial *use* of this `pipenv` feature is fine, commercial redistributors may want
to perform their own legal assessment and perhaps chat directly to `pyup.io` about
the specific licensing terms.
In order to enable this functionality while maintaining its permissive
copyright license, `pipenv` embeds an API client key for the backend
Safety API operated by pyup.io rather than including a full copy of the
CC-BY-NC-SA licensed Safety-DB database. This embedded client key is
shared across all `pipenv check` users, and hence will be subject to
API access throttling based on overall usage rather than individual
client usage.
☤ Community Integrations