smallstep / nosql

NoSQL is an abstraction layer for data persistency
Apache License 2.0
20 stars 23 forks source link

Remove MPL2.0 licensed dependency #68

Open sbruens opened 1 month ago

sbruens commented 1 month ago

Subject of the issue

There seems to be a license Incompatibility with github.com/go-sql-driver/mysql, a dependency pulled in by mysql/mysql.go. This makes packaging for downstream users difficult. As a downstream user I'm not familiar with your libary, but it seems like the dependency is not heavily used. Is there an alternatively licensed or custom implementation that could allow you to remove the dependency?

Your environment

N/A

Steps to reproduce

  1. Go to https://github.com/smallstep/nosql/blob/cea08a0ebaac8a2b09a35f2dbb3a01037630e9ca/go.mod#L8
  2. See the inclusion of github.com/go-sql-driver/mysql
  3. Observe its license declaration as MPL2.0

Expected behaviour

The project includes dependencies with licenses compatible with the Apache License 2.0 to avoid conflicts and ensure proper compliance for downstream users.

Actual behaviour

The project includes github.com/go-sql-driver/mysql, which is licensed under MPL2.0. This creates a license incompatibility issue as MPL2.0 has different copyleft requirements than Apache 2.0. This makes packaging potentially prohibitive for downstream users.

Additional context

N/A