Dependencies License check

[diconico07]

We are currently not checking our dependencies licenses, however per CNCF guidelines we should ask governing board for approval of dependencies not using allowed licenses.

I made a quick license audit of our dependencies and found two that should require approval from CNCF:

• opcua crate is under MPL license
• mock_instant crate is under 0BSD license

Tools like cargo-deny (used by kube-rs for example) exists to enforce this kind of requirements on dependencies.

[agracey]

Since opcua and mock_interval are not used by the platform itself, this might be a good reason to move the discovery handlers into their own repos.

[diconico07]

Okay, just edited the description, it's mock_instant not mock_interval 😇 , it's used in agent's test suite

[agracey]

Ah, gotcha. In that case, arguing for an exception seems better unless there's a differently licensed mocking library that's worth the migration.

[github-actions]

Issue has been automatically marked as stale due to inactivity for 90 days. Update the issue to remove label, otherwise it will be automatically closed.

[github-actions]

Issue has been automatically marked as stale due to inactivity for 90 days. Update the issue to remove label, otherwise it will be automatically closed.