ds300 / patch-package

Fix broken node modules instantly 🏃🏽‍♀️💨
MIT License
10.17k stars 283 forks source link

Feature: Consider replacing json-stable-stringify to fulfill compliance for commercial products #494

Open mapero opened 9 months ago

mapero commented 9 months ago

Hello

This is kind of a feature request. This library directly depends on json-stable-stringify, which depends on jsonify, which has no license and thus cause problems with corporations, at least outside US. See: https://en.wikipedia.org/wiki/Public-domain_software .

Requests to set jsonify under a proper license are not considered: https://github.com/ljharb/jsonify/issues/2 . An explicit request to allow the usage of jsonify in a commercial product was not given by the author.

There are many alternatives to json-stable-stringify which have proper licenses, such as:

It would be great if you could switchover to one of these alternatives. This would make your library and also others that depend on you, e.g. swagger-ui usable in commercial products.

Thanks.

Best regard Jochen