Skip to content

docs: add THIRD_PARTY_LICENSES.md with full dependency license audit#567

Merged
ken-guru merged 1 commit intomainfrom
copilot/add-third-party-licenses
Apr 22, 2026
Merged

docs: add THIRD_PARTY_LICENSES.md with full dependency license audit#567
ken-guru merged 1 commit intomainfrom
copilot/add-third-party-licenses

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Apr 22, 2026

Audits all declared dependencies for license compatibility and produces a THIRD_PARTY_LICENSES.md at the repo root to attribute and document third-party software.

Findings

All 30 declared packages use permissive licenses — no copyleft (GPL/LGPL/AGPL) present, no violations.

License Packages
MIT (×26) React, Next.js, Bootstrap, Jest, Cypress, ESLint, Zod, et al.
Apache-2.0 (×3) @vercel/blob, @vercel/speed-insights, typescript
BSD-3-Clause (×1) qs (override)
ISC (×1) test-exclude (override)
BlueOak-1.0.0 (×1) glob (override)

Document contents

  • Compliance summary table mapping each license to its redistribution requirements
  • Three separate tables: runtime deps, dev deps, and overrides — each with version, license, and upstream repo URL
  • Condensed license text + compliance notes per license type
  • Note flagging the orphaned apps/mobile/node_modules directory (no package.json; likely a stale artifact worth cleaning up or gitignoring)

@vercel
Copy link
Copy Markdown

vercel Bot commented Apr 22, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
github-copilot-agent-assisted-next-app Ready Ready Preview, Comment Apr 22, 2026 11:45am

@ken-guru ken-guru marked this pull request as ready for review April 22, 2026 11:46
@ken-guru ken-guru self-requested a review as a code owner April 22, 2026 11:46
@ken-guru ken-guru merged commit d21e26f into main Apr 22, 2026
9 checks passed
@ken-guru ken-guru deleted the copilot/add-third-party-licenses branch April 22, 2026 11:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants