mirror of
https://github.com/UNITRONIX/BetterDesk.git
synced 2026-10-24 13:32:34 +00:00
UNITRONIX
6af0c5a65a
Pin the upstream gateway source, verify checksums and licenses in CI, and prepare reviewed dependency update PRs. Keep runtime activation fail-closed while the VNC GPL dependency remains outside the project policy. Thanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow)
42 lines
1006 B
JSON
42 lines
1006 B
JSON
{
|
|
"schema_version": 1,
|
|
"review_status": "blocked",
|
|
"policy": "Only Apache-2.0, MIT, BSD-2-Clause, BSD-3-Clause and ISC runtime dependencies are permitted.",
|
|
"components": [
|
|
{
|
|
"name": "Apache Guacamole server",
|
|
"repository": "apache/guacamole-server",
|
|
"version": "1.6.0",
|
|
"license": "Apache-2.0",
|
|
"protocols": [
|
|
"rdp",
|
|
"vnc"
|
|
],
|
|
"status": "approved-source-only"
|
|
},
|
|
{
|
|
"name": "FreeRDP",
|
|
"repository": "FreeRDP/FreeRDP",
|
|
"license": "Apache-2.0",
|
|
"protocols": [
|
|
"rdp"
|
|
],
|
|
"status": "requires-runtime-build-verification"
|
|
},
|
|
{
|
|
"name": "LibVNCServer",
|
|
"repository": "LibVNC/libvncserver",
|
|
"license": "GPL-2.0",
|
|
"protocols": [
|
|
"vnc"
|
|
],
|
|
"status": "rejected"
|
|
}
|
|
],
|
|
"runtime_activation": {
|
|
"rdp": false,
|
|
"vnc": false,
|
|
"reason": "A signed runtime artifact and complete transitive SBOM/license review are still required."
|
|
}
|
|
}
|