text-unidecode is a transitive production dependency pulled in by faker (which is in the common dependency group). Its PyPI metadata lists Artistic License, GPL, and GPL v2+.
text-unidecode was originally created as an alternative to unidecode (see #354) to provide similar Unicode transliteration under a more permissive license, but its own metadata still lists GPL. Worth reviewing the actual license terms to determine whether it is usable in Osprey.
Options:
- Review and approve the license if it is acceptable
- Pin
faker to a version that doesn't depend on text-unidecode, or replace faker if it's not critical to production
Tracked here to unblock the license-check CI workflow, which currently skips this package pending a decision.
text-unidecodeis a transitive production dependency pulled in byfaker(which is in thecommondependency group). Its PyPI metadata lists Artistic License, GPL, and GPL v2+.text-unidecodewas originally created as an alternative tounidecode(see #354) to provide similar Unicode transliteration under a more permissive license, but its own metadata still lists GPL. Worth reviewing the actual license terms to determine whether it is usable in Osprey.Options:
fakerto a version that doesn't depend ontext-unidecode, or replacefakerif it's not critical to productionTracked here to unblock the license-check CI workflow, which currently skips this package pending a decision.