You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In one of our python projects (then jtd-to-proto, now py-to-proto), we added jtd as a dependency for validation based on its listed license as MIT being an acceptable license for commercial use. In scans of downstream projects, we realized that the dependency on strict_rfc3339 introduces a GPLv3 licensed dependency (see its pypi page) which our legal team deemed an inadmissible license dependency for commercial software that used our open source py-to-proto library. The request here is to clarify this library's MIT licensing and how it relates to the GPLv3 license on its required dependency. Things I could imagine working would include details of your interpretation of GPLv3 that allow this package to be MIT licensed, a plan to change the license to match the copy-forward nature of GPLv3, or a plan to remove the dependency.
Description
In one of our python projects (then
jtd-to-proto
, nowpy-to-proto
), we addedjtd
as a dependency for validation based on its listed license as MIT being an acceptable license for commercial use. In scans of downstream projects, we realized that the dependency onstrict_rfc3339
introduces a GPLv3 licensed dependency (see its pypi page) which our legal team deemed an inadmissible license dependency for commercial software that used our open sourcepy-to-proto
library. The request here is to clarify this library's MIT licensing and how it relates to the GPLv3 license on its required dependency. Things I could imagine working would include details of your interpretation of GPLv3 that allow this package to be MIT licensed, a plan to change the license to match the copy-forward nature of GPLv3, or a plan to remove the dependency.Context
py-to-proto
removingjtd
dependency: Remove validation IBM/py-to-proto#33py-to-proto
reimplementing validation logic: Internal validation IBM/py-to-proto#36The text was updated successfully, but these errors were encountered: