node-smpp icon indicating copy to clipboard operation
node-smpp copied to clipboard

Transitive dependency to GPLv3 package findhit-util

Open TjlHope opened this issue 3 years ago • 3 comments

Hi, we're looking to use this lib in a commercial project, and whilst checking the licenses noticed that node-smpp depends on findhit-proxywrap (BSD) which depends on findhit-util (GPLv3), meaning any derivative works need to be GPLv3 as well.

I've opened cusspvz/proxywrap#36 to see about removing that dep, but if that's not possible would you be open to a PR switching to a fork that removes the GPLv3 dep?

TjlHope avatar Apr 22 '22 13:04 TjlHope

Hi @TjlHope

Thanks for your work on proxywrap in order to avoid GPL3 license. Lets keep this issue open until your PR is merged

Again, thank you

juliangut avatar Apr 29 '22 08:04 juliangut

Hi @juliangut

The PR's been merged cusspvz/proxywrap#37 and released to npm as [email protected]

Would it be possible to get a new patch version of node-smpp pushed out with the findhit-proxywrap dep bumped to ^0.3.13 so there's no risk of pulling in the old GPL version?

LMK if a PR would help in any way.

Thanks!

TjlHope avatar May 10 '22 10:05 TjlHope

Hi @TjlHope

please, if you have the time prepare a PR with the proper version so we can make a new release with the change

juliangut avatar May 10 '22 10:05 juliangut