Skip to content

Clarify MIT licensing with GPL dependency #3

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
gabe-l-hart opened this issue Jun 28, 2023 · 0 comments
Open

Clarify MIT licensing with GPL dependency #3

gabe-l-hart opened this issue Jun 28, 2023 · 0 comments

Comments

@gabe-l-hart
Copy link

Description

In one of our python projects (then jtd-to-proto, now py-to-proto), we added jtd as a dependency for validation based on its listed license as MIT being an acceptable license for commercial use. In scans of downstream projects, we realized that the dependency on strict_rfc3339 introduces a GPLv3 licensed dependency (see its pypi page) which our legal team deemed an inadmissible license dependency for commercial software that used our open source py-to-proto library. The request here is to clarify this library's MIT licensing and how it relates to the GPLv3 license on its required dependency. Things I could imagine working would include details of your interpretation of GPLv3 that allow this package to be MIT licensed, a plan to change the license to match the copy-forward nature of GPLv3, or a plan to remove the dependency.

Context

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant