search

mongodb-js / connect-mongodb-session

Lightweight MongoDB-backed session store for Connect and Express
Apache License 2.0
176 stars 35 forks source link

AGPL Licensed Transient Dependency Limits Ability to Use #86

Closed rcollette closed 4 years ago

rcollette commented 4 years ago

My organization and Google forbid use of libraries that have a direct or transient dependency on a library licensed under the AGPL.

Google's Policy and explanation https://opensource.google/docs/using/agpl-policy/#:~:text=WARNING%3A%20Code%20licensed%20under%20the,NOT%20be%20used%20at%20Google.&text=Using%20AGPL%20software%20requires%20that,be%20licensed%20under%20the%20AGPL.

This project depends on archetype which in turn depends on standard-error. standard-error is licensed under the AGPL. https://github.com/moll/js-standard-error/blob/master/LICENSE

I have created issues through the dependency tree but hopefully it would be resolved quickly by standard-error adjusting their license. https://github.com/boosterfuels/archetype/issues/23

rcollette commented 4 years ago

Sorry this can be closed as a duplicate of https://github.com/mongodb-js/connect-mongodb-session/issues/84