ventoy*: mark unfree, mark insecure

2025-05-10 18:47:21 +05:30
parent 161a0828df
commit 520534e533
1 changed files with 10 additions and 1 deletions
@@ -213,7 +213,16 @@ stdenv.mkDerivation (finalAttrs: {
      800+ image files are tested.  90%+ distros in DistroWatch supported.
    '';
    changelog = "https://www.ventoy.net/doc_news.html";
-    license = lib.licenses.gpl3Plus;
+    knownVulnerabilities = [
+      ''
+        Ventoy uses binary blobs which can't be trusted to be free of malware or compliant to their licenses.
+        https://github.com/NixOS/nixpkgs/issues/404663
+        See the following Issues for context:
+        https://github.com/ventoy/Ventoy/issues/2795
+        https://github.com/ventoy/Ventoy/issues/3224
+      ''
+    ];
+    license = lib.licenses.unfree;
    mainProgram = "ventoy";
    maintainers = with lib.maintainers; [
      johnrtitor