Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

dependency review: add 0BSD and Apache-2.0 variants #305

Merged
merged 1 commit into from
Dec 20, 2024

Conversation

tigrato
Copy link
Contributor

@tigrato tigrato commented Dec 20, 2024

Checks began failing this evening with the following issue:

The dependencies listed below have incompatible licenses:

  • pnpm-lock.yaml » [email protected] – License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT
  • pnpm-lock.yaml » [email protected] – License: 0BSD AND ISC AND MIT

The rollup library itself is licensed under MIT, but some of its dependencies are under ISC and 0BSD licenses [1].

Similarly, prettier is released under the MIT license, but several of its dependencies use other licenses [2].

[1] https://github.com/rollup/rollup/blob/master/LICENSE.md
[2] https://github.com/prettier/prettier/blob/main/LICENSE

Checks started failing this evening with:

  The following dependencies have incompatible licenses:
  pnpm-lock.yaml » [email protected] – License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT
  pnpm-lock.yaml » [email protected] – License: 0BSD AND ISC AND MIT

The `rollup` library is MIT but some of its dependencies are ISC and 0BSD [1]

The `prettier` is released under MIT but some of its dependencies use other licenses [2].

[1] https://github.com/rollup/rollup/blob/master/LICENSE.md
[2] https://github.com/prettier/prettier/blob/main/LICENSE

Signed-off-by: Tiago Silva <[email protected]>
@tigrato tigrato requested a review from a team as a code owner December 20, 2024 16:41
@tigrato tigrato merged commit 2a22679 into main Dec 20, 2024
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants