diff --git a/app/components/footer.hbs b/app/components/footer.hbs index e25435dc090..4f8c37c73e9 100644 --- a/app/components/footer.hbs +++ b/app/components/footer.hbs @@ -22,7 +22,7 @@
diff --git a/app/templates/policies.hbs b/app/templates/policies.hbs
index 52d7a86b433..da9072fb1e2 100644
--- a/app/templates/policies.hbs
+++ b/app/templates/policies.hbs
@@ -1,164 +1,152 @@
-
- In general, these policies are guidelines. Problems are often contextual, and
- exceptional circumstances sometimes require exceptional measures. We plan to
- continue to clarify and expand these rules over time as new circumstances
- arise. If your problem is not described below, consider
- sending us an email.
-
- We have a first-come, first-served policy on crate names. Upon publishing a
- package, the publisher will be made owner of the package on Crates.io.
-
- If someone wants to take over a package, and the previous owner agrees, the
- existing maintainer can add them as an owner, and the new maintainer can remove
- them. If necessary, the team may reach out to inactive maintainers and help
- mediate the process of ownership transfer.
-
- Using an automated tool to claim ownership of a large number of package names
- is not permitted. We reserve the right to block traffic or revoke ownership
- of any package we determine to have been claimed by an automated tool.
-
- Many questions are specialized instances of a more general form: “Under what
- circumstances can a package be removed from Crates.io?”
-
- The short version is that packages are first-come, first-served, and we won’t
- attempt to get into policing what exactly makes a legitimate package. We will
- do what the law requires us to do, and address flagrant violations of the Rust
- Code of Conduct.
-
- You can't delete crates from the registry, but you can leave it open for
- transferring ownership to others.
-
- To do this, you must publish a version with a message in the README
- communicating to crates.io support team that you consent to transfer the
- crate to the first person who asks for it:
- Short version:
+ crates.io is a critical resource for the Rust ecosystem, which hosts a variety of packages from a diverse group of
+ users. That resource is only effective when our users are able to work together as part of a community in good
+ faith. While using crates.io, you must comply with our Acceptable Use Policies, which include some restrictions on
+ content and conduct on crates.io related to user safety, intellectual property, privacy, authenticity, and other
+ limitations. In short, be excellent to each other! We do not allow content or activity on crates.io that: You are responsible for using crates.io in compliance with all applicable laws, regulations, and all of our policies.
+ These policies may be updated from time to time. We will interpret our policies and resolve disputes in favor of
+ protecting users as a whole. The crates.io team reserves the possibility to evaluate each instance on a case-by-case
+ basis. For issues such as DMCA violations, or trademark and copyright infringements, the crates.io team will respect the
+ legal decisions of the Rust Foundation as the official legal entity
+ providing the crates.io service. crates.io has a first-come, first-serve policy on crate names. Upon publishing a package, the publisher will be made
+ owner of the package on crates.io. If you want to take over a package, we require you to first try and contact the current owner directly. If the
+ current owner agrees, they can add you as an owner of the crate, and you can then remove them, if necessary. If the
+ current owner is not reachable or has not published any contact information the crates.io team may reach out to help
+ mediate the process of the ownership transfer. Crate deletion by their owners is not possible to keep the registry as immutable as possible. If you want to flag
+ your crate as open for transferring ownership to others, you can publish a new version with a message in the README or
+ description communicating to thecrates.io support team that you consent to transfer the crate to the first person who
+ asks for it: The crates.io team may delete crates from the registry that do not comply with the policies on this document. In
+ larger cases of squatting attacks this may happen without prior notification to the author, but in most cases the team
+ will first give the author the chance to justify the purpose of the crate.
- We do not have any policies to define 'squatting', and so will not hand over
- ownership of a package for that reason.
- Details on how to access the crates.io data can be found on the dedicated
- For issues such as DMCA violations, trademark and copyright infringement,
- Crates.io will respect the Rust Foundation's legal decisions with regards to content that
- is hosted.
- Safety is one of the core principles of Rust, and to that end, we would like to ensure that cargo and crates.io have
+ secure implementations. To learn more about disclosing security vulnerabilities for these tools, please reference the
+ Rust Security policy
+ for more details.
- The Rust project has a
- Code of Conduct
- which governs appropriate conduct for the Rust community. In
- general, any content on Crates.io that violates the Code of Conduct may be
- removed. Here, content can refer to but is not limited to:
- Note that this policy only applies to official Rust projects like crates.io and cargo, and not individual crates. The
+ crates.io team and the Security Response working group are not responsible for the disclosure of vulnerabilities to
+ specific crates, and if any issues are found, you should seek guidance from the individual crate owners and their
+ specific policies instead. Thank you for taking the time to responsibly disclose any issues you find.
- There are two important, related aspects:
- We do not tolerate content associated with sexual exploitation or abuse of another individual, including where minors
+ are concerned. We do not allow sexually themed or suggestive content that serves little or no purpose other than to
+ solicit an erotic or shocking response, particularly where that content is amplified by its placement in profiles or
+ other social contexts. This includes:Package Ownership
-
- Removal
-
- How can I delete a crate I own from the registry?
-
-
+
+
+ Package Ownership
+
+
I consent to the transfer of this crate to the first person who asks
help@crates.io for it.
- Squatting
+ Data Access
- The Law
+ Security
- Code of Conduct
+
-
+ Sexually Obscene Content
+
+
-
+
We recognize that not all nudity or content related to sexuality is obscene. We may allow visual and/or textual + depictions in artistic, educational, historical or journalistic contexts, or as it relates to victim advocacy. In some + cases a disclaimer can help communicate the context of the project.
+ +crates.io retains full discretion to take action in response to a violation of these policies, including account + suspension, account termination, or removal of content.
+ +We will however not be proactively monitoring the site for these kinds of violations, but instead relying on the + community to draw them to our attention.
+ +While the majority of interactions between individuals in the Rust community falls within our policies, violations of + those policies do occur at times. When they do, the crates.io team may need to take enforcement action to address the + violations. In all cases, content and account deletion is permanent and there is no basis to reverse these moderation + actions taken by the crates.io team. Account suspension may be lifted at the team's discretion however, for + example in the case of someone's account being compromised.
+ +This policy is partially based on + + PyPI’s Acceptable Use Policy and modified from its original form.
-- Cargo and crates.io are projects that are governed by the Rust Programming - Language Team. Safety is one of the core principles of Rust, and to that end, - we would like to ensure that cargo and crates.io have secure implementations. - To learn more about disclosing security vulnerabilities, please reference the - Rust Security policy for - more details. -
- -- Thank you for taking the time to responsibly disclose any issues you find. -
- -
- Before resorting to crawling crates.io, please read
-
- We allow our API and website to be crawled by commercial crawlers such as - GoogleBot. At our discretion, we may choose to allow access to experimental - crawlers, as long as they limit their request rate to 1 request per second or - less. -
- -
- We also require all crawlers to provide a user-agent header that allows us to
- uniquely identify your bot. This allows us to more accurately monitor any
- impact your bot may have on our service. Providing a user agent that only
- identifies your HTTP client library (such as "request/0.9.1
") increases the
- likelihood that we will block your traffic.
-
- It is recommended, but not required, to include contact information in your user
- agent. This allows us to contact you if we would like a change in your bot's
- behavior without having to block your traffic.
-
- Bad: "User-Agent: reqwest/0.9.1
"
- Better: "User-Agent: my_bot
"
- Best: "User-Agent: my_bot (my_bot.com/info)
" or "User-Agent: my_bot (help@my_bot.com)
"
-
- We reserve the right to block traffic from any bot that we determine to be in - violation of this policy or causing an impact on the integrity of our service. -
+Licensed under the + Creative Commons Attribution 4.0 International license.
\ No newline at end of file