Damus
ARGVMI~1.PIF profile picture
ARGVMI~1.PIF
@nprofile1q...

Yeah, I find C's lack of proper dependency management disturbing.

In Rust/JS/Java land, you can ask your dependency manager to give you a list of transitive dependencies and their licenses. Then you can redistribute them (or, in Rust, statically link them) without hearing from anyone's lawyers.

What's happening here is this project is redistributing a bunch of libraries from MSYS2. It's probably legal, but without proper dependency management, it's hard to be completely sure.