Dependency license audit

KyleMaas commented 3 years ago

For cleanliness's sake, and after seeing that the blog and gathering modules were AGPL, I started going through the dependencies, and there are only two that are AGPL:

ssb-blob-files
ssb-room

And then there is one that is LGPL:

ssb-db2

Everything else is MIT or more permissive. So, two questions:

What are the chances of ssb-blob-files and ssb-room being relicensed as MIT (or at least LGPL)?
Will Rooms 2.0 be permissively-licensed so it can be used as a standard (and adopted by Manyverse, Planetary, etc.), or is it going to AGPL-restricted as well?

arj03 commented 3 years ago

I think ssb-room is mainly because it bundles both the server and the client. It should be split out into a separate client library that then could be LGPL. Not sure about ssb-blob-files, you can ask.

arj03 commented 3 years ago

And yes the ssb-rooms should probably happen over the next month and a half.

KyleMaas commented 3 years ago

https://github.com/ssbc/ssb-blob-files/issues/18

arj03 commented 3 years ago

We are no longer using ssb-rooms, instead using ssb-room-client that is LGPL

arj03 / ssb-browser-core

Dependency license audit #28