Hi,
Earlier this week we pushed in production a system that automatically downloads
new sources of projects packaged in Fedora, adjust the spec file in distgit to
match the new version and runs a scratch build on koji.
The system takes the new-release information from anitya [1], opens a ticket on
bugzilla for package flagged for monitoring on pkgdb and report whether the
scratch build was successful or not in that bugzilla ticket opened.
Today, I was asked the question whether there could be some legal issue about
automatically downloading new sources and running scratch builds with them.
I guess this could be a problem if a project suddenly went closed source or
started including non-free component(s).
On the other hand, I do not see this any different from scratch build performed
on packages before their review on bugzilla.
To clear this, could I have legal's opinion on this question?
Thanks,
Pierre