Make a licensing note somewhere about `pipenv check`
See original GitHub issueWhile writing https://github.com/pyupio/safety-db/pull/2261, I realised that commercial redistributors of pipenv
should take close note of the fact that pipenv check
relies on a CC-BY-NC-SA CVE database maintained by pyup.io: https://github.com/pyupio/safety-db
This means that commercial redistributors of pipenv
need to choose between:
- disabling
pipenv check
; - patching
pipenv
to use a different vulnerability database (e.g. one they maintain themselves); or - paying
pyup.io
for a commercial usage license
Issue Analytics
- State:
- Created 6 years ago
- Comments:36 (25 by maintainers)
Top Results From Across the Web
How to use pipenv in your python project - jcutrer.com
“goodbye requirements.txt, hello Pipfile”. In this article, I will introduce you to pipenv and show you how easy it is to use. pipenv...
Read more >Basic Usage of Pipenv - Read the Docs
Pipenv is a reference implementation for using Pipfile. Here is a simple example ... Note. All sub-dependencies will get added to the Pipfile.lock...
Read more >Make Pipenv create the virtualenv in the same folder
PIPENV_VENV_IN_PROJECT is an environment variable, just set it (the value doesn't matter, but must not be empty). Make sure to export it so ......
Read more >Pipenv: promises a lot, delivers very little | Chris Warrick
Pipenv is a Python packaging tool that does one thing reasonably well. It tries to promote itself as much more than it is....
Read more >Snyk for Python - Snyk User Docs
PyPI licenses are supported for all Python projects. ... To build the dependency tree, run pipenv install as Snyk needs this to create...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
I’ll work on it. Unless you want to do it 😃
Thanks for the openness @jayfk!