search

Yelp / bravado-core

Other
109 stars 98 forks source link

GPL Violation? #405

Closed philipbjorge closed 7 months ago

philipbjorge commented 7 months ago

Describe the bug

We're trying to bring bravado-core into our codebases and it's flagging some license violations for us.

Expected behavior

I would expect all the licenses in bravado-core's dependencies and transitive dependencies to be in compliance with your package's license.

I am not a lawyer, but I'm pretty sure the copyleft nature of GPL requires this package now to be GPL?

At the very least, it would be good to have a workaround that lets us install this package without linking/installing the GPL dependencies.

It looks like there is maybe some work around this topic already -- Are you open to pull requests? https://github.com/Yelp/bravado-core/pull/261

Thanks

Appreciate you looking at this issue -- I know licensing and transitive dependencies aren't the most fun :)

philipbjorge commented 7 months ago

Some legal perspective -- This is probably fine in most contexts.

https://github.com/neptune-ai/neptune-client/issues/1588#issuecomment-1847023539