Received: from forwardcorp1o.mail.yandex.net (forwardcorp1o.mail.yandex.net [95.108.205.193]) by nld3-dev1.alpinelinux.org (Postfix) with ESMTPS id 1246D7819D3 for <~alpine/devel@lists.alpinelinux.org>; Fri, 4 Jun 2021 14:52:07 +0000 (UTC) Received: from vla1-fdfb804fb3f3.qloud-c.yandex.net (vla1-fdfb804fb3f3.qloud-c.yandex.net [IPv6:2a02:6b8:c0d:3199:0:640:fdfb:804f]) by forwardcorp1o.mail.yandex.net (Yandex) with ESMTP id 93D772E15D7; Fri, 4 Jun 2021 17:52:06 +0300 (MSK) Received: from vla1-81430ab5870b.qloud-c.yandex.net (vla1-81430ab5870b.qloud-c.yandex.net [2a02:6b8:c0d:35a1:0:640:8143:ab5]) by vla1-fdfb804fb3f3.qloud-c.yandex.net (mxbackcorp/Yandex) with ESMTP id 0jt3tmLhcH-q61maFvM; Fri, 04 Jun 2021 17:52:06 +0300 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex-team.ru; s=default; t=1622818326; bh=pxPGqbOHb9aniYMFo8Xd+j2YQU50YOQMIKpS2Y/me+4=; h=To:Date:Message-Id:Subject:Cc:From; b=gwAwbybpKbWzUQ1HP69rVJ5UfdhdUZnwhPslK1PpbAX+cP7zOa+UYcrHXJsifVsjV zeFUV8c3P8IRv+JFbnlhO9hefJs0cPQO3Tkpr2u6sZGBQCPj7ptxxwT5duSbteSd37 mAi0mhruOy/YoilpmZ7iON/0JTN43Ls1VcTqOR4E= Authentication-Results: vla1-fdfb804fb3f3.qloud-c.yandex.net; dkim=pass header.i=@yandex-team.ru Received: from dynamic-spb.dhcp.yndx.net (dynamic-spb.dhcp.yndx.net [2a02:6b8:0:2309:a903:5b03:684:fdee]) by vla1-81430ab5870b.qloud-c.yandex.net (smtpcorp/Yandex) with ESMTPSA id czjHzFDH0e-q6oWmUD8; Fri, 04 Jun 2021 17:52:06 +0300 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client certificate not present) From: Liubov Grinkevich Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\)) Subject: License on the secdb data Message-Id: <8E704717-3507-42E5-91D5-CB4702DD1E2F@yandex-team.ru> Date: Fri, 4 Jun 2021 17:52:04 +0300 Cc: Andrey Ivanov To: ~alpine/devel@lists.alpinelinux.org X-Mailer: Apple Mail (2.3608.120.23.2.4) Hello! Thank you for https://secdb.alpinelinux.org/ service, it is very useful. = In our company we are planning to build a security scanner for our = customers, so we're interested in using data of this service. However, I'm wondering about using it in a commercial product because = I'm not sure in license terms for the data of this service. I would like = kindly ask your confirmation if we can use the feed data in our = commercial product. If there are any license or any other terms that we = need to comply with please do share it with us. =20 Could you please also tell, which service is preferable for taking = information about fixed CVE in packages, secdb or = https://security.alpinelinux.org/ ? =20 Sincerely yours, Grinkevich Liubov, Yandex.Cloud developer.=