Source of repackaged code about curated-data

[fossygirl]

@capfei Is this case covered in our curation principles document? https://docs.google.com/document/d/13o45CNtxo_Ca234x0NvyIVHiYQu_di1dJtmqQp769mU/edit#heading=h.x5ywe85q0ycj

If not, can we plan to put this on the agenda to discuss in the meeting next week?

[bduranc]

@capfei, @fossygirl

If I may offer my two cents...

I think we see this same type of case with things like WebJars as well. You have these bundles of common FOSS components, but of course WebJars.org is not the source origin of such components.

I think for Nuget, there are other aspects to keep in mind, like is it published by the same author, etc. If it's put up on Nuget, NPM, or anywhere else by someone other than the author or contributor of the original project, then this is even more reason to be skeptical.

In my opinion, the source origin, if possible, for that component is probably the better option. For example, for jQuery, I would use the official jQuery GH repo and not the WebJars one. This is better because it better represents the project's origin more accurately..

[ariel11]

@capfei - is this ready to close?