-
Notifications
You must be signed in to change notification settings - Fork 29
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fobject dependency issues #180
Comments
Ok, now the author just changed the license to GPL3, which means that you can no longer depend on it at all without causing other people to get infected. |
Sorry about the delay - I published v0.0.4 which upgrades all the deps (without any breaking changes). @lookfirst: With regards to being "infected", read this: http://www.rosenlaw.com/html/GPL.pdf ... accord, roots, and all the other related software is already FOSS and is fully compliant with the terms of the GPL. The license change just prevents you from taking the new version of fobject, modifying it, and then releasing it to users without providing the source code. IIRC, you can even use a GPL-3.0 module in a proprietary project so long as the source of that module isn't modified or that modified source code is provided to users (since a node module acts as a standalone component). The text of the GPL calls this an "aggregate":
|
You're right about the infected part, I take that back. The rosenlaw pdf was written in 2001, which is ~6 years before GPLv3 was published. It is referring to v2. |
Well then, it looks like the next step here is to bump the dependency and release. Anyone want to put in a PR? |
Ok merged up 👍 |
do a release please? |
released as |
(only applies to work after this commit)
It's worth noting that the definition of an "aggregate" under the GPLv3 differs to the version @slang800 quoted above. The actual definition includes an extra condition, highlighted below:
This suggests to me that if you were to use a GPL node module such as fobject within a node application, you could not consider it to be an aggregate, and so the special exemptions granted to aggregates would not apply. If you want to distribute a node application that uses a GPL node module, you have to decide whether your application would be considered to be a "work based on" the module. If it is, the whole application must be licensed under the GPL. It is somewhat debatable whether a program which uses a GPL library is considered to be a "work based on" that library. The GPL FAQ indicates that it is - see for example: |
Please bear with me, this is node backwards incompatibility dependency hell.
This project has a dependency on fobject. That project depends on [email protected].
[email protected] is incompatible with node 6. isaacs/node-graceful-fs#61
fobject author isn't fixing things for months now. notslang/fobject#4
So, you get the pressure now. Either dump fobject or find a replacement please.
The text was updated successfully, but these errors were encountered: