search

pilosus / pip-license-checker

Check license types for third-party dependencies: permissive, copyleft, proprietory, etc.
https://blog.pilosus.org/posts/2021/09/07/pip-license-checker/
Other
69 stars 3 forks source link

Fine grained copyleft detection: weak/partial copyleft, strong copyleft, "over the network"/SaaS-copyleft #58

Closed pilosus closed 3 years ago

pilosus commented 3 years ago

For now we detect only Copyleft licenses. But they are so different in their nature, that one copyleft license in different use cases behaves drastically different, e.g. a software linking a GPLv3 library running on the company's private server and as a distribution delivered to company's customers.

We have to introduce fine grained copyleft detection:

  1. Weak/Partial copyleft E.g. LGPL, MPL, GPL with linking exception Value for --fail flag: WeakCopyleft

  2. Strong copyleft E.g. GPL v2 or later Value for --fail flag: StrongCopyleft

  3. SaaS-copyleft E.g. AGPL, SSPL Value for --fail flag: NetworkCopyleft

We probably also want to support --fail "Copyleft" to include all kinds of copyleft