Skip to content

Licensing issue: ssri is not permissively-licensed! #2057

@zkat

Description

@zkat

Problem

Yew is using ssri as one of its dependencies. That's great! The problem is that ssri@6 uses a non-permissive Parity license, which means that while Yew can keep being licensed the way it is, people using Yew in proprietary situations would not be compliant with this license because they're pulling in ssri as a dependency anyway.

The good news: because of this, and because I don't want to cause any trouble for anyone who may have accidentally used ssri like this, I've released [email protected], which changes the Parity-licensed code to be Apache-2.0 instead, which is 100% compatible.

As an additional thing: I hereby grant usage of [email protected] and below to anyone using it through Yew, as if it had been licensed to them under Apache-2.0. Hopefully this declaration also means that previously-released Yew versions are not "vulnerable" to this licensing situation. Please let me know if there's anything I can do to solidify this promise, as I have no intention on jumping on anyone over this. I just want Rust hacks to be good and positive <3.

Steps To Reproduce
Steps to reproduce the behavior:

  1. Go to https://github.com/zkat/ssri-rs/blob/HEAD/LICENSE.md
  2. Gasp in horror about the licensing situation.

Expected behavior
A permissive license.

Screenshots
If applicable, add screenshots to help explain your problem.

Environment:
N/A

Questionnaire

  • I'm interested in fixing this myself but don't know where to start
  • I would like to fix and I have a solution
  • I don't have time to fix this right now, but maybe later

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions