Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Wrong license spdx (MIT instead of Apache-2.0) is shown in the npmjs.com repository #162

Open
johannesstellnberger opened this issue Jan 28, 2025 · 5 comments

Comments

@johannesstellnberger
Copy link

In the metadata shown in the npmjs.com repository of this component is wrong (MIT instead of Apache-2.0).
If you display the license file (shown at code link) the correct license file is attached.

==> is it possible to correct this metadata so npm works with all metadata correct?

https://www.npmjs.com/package/@pkgjs/parseargs

Image

@ljharb
Copy link
Member

ljharb commented Jan 28, 2025

You're right there's a mismatch; I'd say the SPDX declaration takes precedence personally (50513fc) but the license file could be argued as well.

There are 10 non-bot contributors. Can each of you explicitly confirm whether you're comfortable with your contributions being Apache-2, MIT, or either? (Ideally, we'll go with MIT, but the important point is that all contributors agree)

@shadowspawn
Copy link
Collaborator

Related: #153 #154

Thanks for explicitly checking with contributors @ljharb

@kisaragi-hiu
Copy link
Contributor

I'm comfortable with either license for my contributions.

@darcyclarke
Copy link
Member

Apologies for the confusion here. Looks like this was a mistake I committed awhile back & never caught it. Given that I checked in the Apache license I believe that's likely what should take precedence even though the package.json metadata is often used by tools. I'm flexible though so I checked "either". I'll leave it to the current maintainers to decide how to move forward.

@shadowspawn
Copy link
Collaborator

shadowspawn commented Feb 16, 2025

@bcoe @Eomm

Tidying up the licence confusion in parseArgs repo. Would you please confirm whether you're comfortable with your contributions being Apache-2, MIT, or either?

You can just tick the appropriate checkboxes in this comment:
#162 (comment)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants