diff --git a/app/components/footer.hbs b/app/components/footer.hbs index e25435dc090..4f8c37c73e9 100644 --- a/app/components/footer.hbs +++ b/app/components/footer.hbs @@ -22,7 +22,7 @@
crates.io provides several ways of accessing crate data and metadata,
diff --git a/app/templates/policies.hbs b/app/templates/policies.hbs
index 45547f47e09..36348c50e9e 100644
--- a/app/templates/policies.hbs
+++ b/app/templates/policies.hbs
@@ -1,162 +1,165 @@
-
- In general, these policies are guidelines. Problems are often contextual, and - exceptional circumstances sometimes require exceptional measures. We plan to - continue to clarify and expand these rules over time as new circumstances - arise. If your problem is not described below, consider - sending us an email. -
- -- We have a first-come, first-served policy on crate names. Upon publishing a - package, the publisher will be made owner of the package on Crates.io. -
- -- If someone wants to take over a package, and the previous owner agrees, the - existing maintainer can add them as an owner, and the new maintainer can remove - them. If necessary, the team may reach out to inactive maintainers and help - mediate the process of ownership transfer. -
- -- Using an automated tool to claim ownership of a large number of package names - is not permitted. We reserve the right to block traffic or revoke ownership - of any package we determine to have been claimed by an automated tool. -
- -- Many questions are specialized instances of a more general form: “Under what - circumstances can a package be removed from Crates.io?” -
- -- The short version is that packages are first-come, first-served, and we won’t - attempt to get into policing what exactly makes a legitimate package. We will - do what the law requires us to do, and address flagrant violations of the Rust - Code of Conduct. -
- -- You can't delete crates from the registry, but you can leave it open for - transferring ownership to others. -
- -- To do this, you must publish a version with a message in the README - communicating to crates.io support team that you consent to transfer the - crate to the first person who asks for it: -
+Short version: + crates.io is a critical resource for the Rust ecosystem, which hosts a variety of packages from a diverse group of + users. That resource is only effective when our users are able to work together as part of a community in good + faith. While using crates.io, you must comply with our Acceptable Use Policies, which include some restrictions on + content and conduct on crates.io related to user safety, intellectual property, privacy, authenticity, and other + limitations. In short, be excellent to each other!
+ +We do not allow content or activity on crates.io that:
+ +You are responsible for using crates.io in compliance with all applicable laws, regulations, and all of our policies. + These policies may be updated from time to time. We will interpret our policies and resolve disputes in favor of + protecting users as a whole. The crates.io team reserves the possibility to evaluate each instance on a case-by-case + basis.
+ +For issues such as DMCA violations, or trademark and copyright infringements, the crates.io team will respect the + legal decisions of the Rust Foundation as the official legal entity + providing the crates.io service.
+ +crates.io has a first-come, first-serve policy on crate names. Upon publishing a package, the publisher will be made + owner of the package on crates.io.
+ +If you want to take over a package, we require you to first try and contact the current owner directly. If the + current owner agrees, they can add you as an owner of the crate, and you can then remove them, if necessary. If the + current owner is not reachable or has not published any contact information the crates.io team may reach out to help + mediate the process of the ownership transfer.
+ +Crate deletion by their owners is not possible to keep the registry as immutable as possible. If you want to flag + your crate as open for transferring ownership to others, you can publish a new version with a message in the README or + description communicating to the crates.io support team that you consent to transfer the crate to the first person who + asks for it:
- I consent to the transfer of this crate to the first person who asks - help@crates.io for it. +-I consent to the transfer of this crate to the first person who asks help@crates.io for it.
The crates.io team may delete crates from the registry that do not comply with the policies on this document. In + larger cases of squatting attacks this may happen without prior notification to the author, but in most cases the team + will first give the author the chance to justify the purpose of the crate.
-- We do not have any policies to define 'squatting', and so will not hand over - ownership of a package for that reason. -
+Details on how to access the crates.io data can be found on the dedicated
- For issues such as DMCA violations, trademark and copyright infringement, - Crates.io will respect the Rust Foundation's legal decisions with regards to content that - is hosted. -
+Safety is one of the core principles of Rust, and to that end, we would like to ensure that cargo and crates.io have + secure implementations. To learn more about disclosing security vulnerabilities for these tools, please reference the + Rust Security policy + for more details.
-- The Rust project has a - Code of Conduct - which governs appropriate conduct for the Rust community. In - general, any content on Crates.io that violates the Code of Conduct may be - removed. Here, content can refer to but is not limited to: -
+Note that this policy only applies to official Rust projects like crates.io and cargo, and not individual crates. The + crates.io team and the Security Response working group are not responsible for the disclosure of vulnerabilities to + specific crates, and if any issues are found, you should seek guidance from the individual crate owners and their + specific policies instead.
-Thank you for taking the time to responsibly disclose any issues you find.
+ +- There are two important, related aspects: -
+We do not tolerate content associated with sexual exploitation or abuse of another individual, including where minors + are concerned. We do not allow sexually themed or suggestive content that serves little or no purpose other than to + solicit an erotic or shocking response, particularly where that content is amplified by its placement in profiles or + other social contexts.
+ +This includes:
- Cargo and crates.io are projects that are governed by the Rust Programming - Language Team. Safety is one of the core principles of Rust, and to that end, - we would like to ensure that cargo and crates.io have secure implementations. - To learn more about disclosing security vulnerabilities, please reference the - Rust Security policy for - more details. -
- -- Thank you for taking the time to responsibly disclose any issues you find. -
- -
- Before resorting to crawling crates.io, please read
-
- We allow our API and website to be crawled by commercial crawlers such as - GoogleBot. At our discretion, we may choose to allow access to experimental - crawlers, as long as they limit their request rate to 1 request per second or - less. -
- -
- We also require all crawlers to provide a user-agent header that allows us to
- uniquely identify your bot. This allows us to more accurately monitor any
- impact your bot may have on our service. Providing a user agent that only
- identifies your HTTP client library (such as "request/0.9.1
") increases the
- likelihood that we will block your traffic.
-
- It is recommended, but not required, to include contact information in your user
- agent. This allows us to contact you if we would like a change in your bot's
- behavior without having to block your traffic.
-
- Bad: "User-Agent: reqwest/0.9.1
"
- Better: "User-Agent: my_bot
"
- Best: "User-Agent: my_bot (my_bot.com/info)
" or "User-Agent: my_bot (help@my_bot.com)
"
-
- We reserve the right to block traffic from any bot that we determine to be in - violation of this policy or causing an impact on the integrity of our service. -
+We recognize that not all nudity or content related to sexuality is obscene. We may allow visual and/or textual + depictions in artistic, educational, historical or journalistic contexts, or as it relates to victim advocacy. In some + cases a disclaimer can help communicate the context of the project.
+ +crates.io retains full discretion to take action in response to a violation of these policies, including account + suspension, account termination, or removal of content.
+ +We will however not be proactively monitoring the site for these kinds of violations, but instead relying on the + community to draw them to our attention.
+ +While the majority of interactions between individuals in the Rust community falls within our policies, violations of + those policies do occur at times. When they do, the crates.io team may need to take enforcement action to address the + violations. In all cases, content and account deletion is permanent and there is no basis to reverse these moderation + actions taken by the crates.io team. Account suspension may be lifted at the team's discretion however, for + example in the case of someone's account being compromised.
+ +This policy is partially based on + + PyPI’s Acceptable Use Policy and modified from its original form.
+ +Licensed under the + Creative Commons Attribution 4.0 International license.