search

glejeune / node-graphviz

Node.js interface to the GraphViz graphing tool
http://algorithmique.net
MIT License
197 stars 58 forks source link

Wrong license reported by npmjs.com #47

Open SvenJo opened 3 years ago

SvenJo commented 3 years ago

On npmjs, the package is reported as GPL-3.0 (see https://www.npmjs.com/package/graphviz)

From the history, the package.json is fixed, but without updating the version number (and without publishing to NPM?) (see https://github.com/glejeune/node-graphviz/commit/162db2ce97df510c40899c81b3f8e68210684290)

Please publish a new version to NPM with the fixed license information.

Thanks, Sven

WernerClemens commented 2 years ago

We can not use this package because of two GPL-license problems:

  1. License checkers handle this as GPL-3.0 based on the latest published package.json version 0.0.9 from 3. April 2019 - the PR correcting the package.json to MIT is from 8. April 2019 and not published, yet.

  2. License scan alerts on the file lib\ext\gvpr\dot2js.g // Copyright (c) 2010 Gregoire Lejeune gregoire.lejeune@free.fr // // This program is free software; you can redistribute it and/or modify // it under the terms of the GNU General Public License as published by // the Free Software Foundation; either version 2 of the License, or // (at your option) any later version. // // This program is distributed in the hope that it will be useful, // but WITHOUT ANY WARRANTY; without even the implied warranty of // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the // GNU General Public License for more details. // // You should have received a copy of the GNU General Public License // along with this program; if not, write to the Free Software // Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA // // Usage : // gvpr -f dot2js.g [-a ] ...