Re: [Bug-librejs] Suggestion for license tracking via a common database

[Andrew Roffey]

Matthew Carter:
> I think a good solution would be to have a license database built 
> into LibreJS (or hosted online that LibreJS can query) to pull out 
> license data for known free JS code.
> 
> It would be much more maintainable (and easy for other LibreJS users
>  to find working websites) if I, or another LibreJS user could have 
> simply sent in my file's license, URL and md5 sum (or sha256) to a 
> hosted database in some type of delimited format similar to this (and
> maybe a link to where the full codebase license can be found, to
> verify truth):


You could even take it a step further and use digital signatures as
opposed to file hashes, such as used by Debian for package management.

Although I don't know what difficulties would be faced in introducing
the necessary cryptographic functions/libraries to the LibreJS add-on so
it might be infeasible.

-- 
Andrew Roffey  http://andrew.roffey.org
 mailto|xmpp:address@hidden
 see website for GPG/OTR pubkeys