Skip to content

Conversation

@musicinmybrain
Copy link
Contributor

Change the SPDX license expression from MIT to
MIT AND Apache-2.0 AND BSD-3-Clause to reflect all of the licenses that apply to the crate’s sources.

Add license text for Apache-2.0 and the BSD-3-Clause license from Go’s time module to LICENSE. Like MIT, both of these licenses require the license text to be distributed with source and/or binaries.

Change the SPDX license expression from `MIT` to
`MIT AND Apache-2.0 AND BSD-3-Clause` to reflect all of the licenses
that apply to the crate’s sources.

Add license text for `Apache-2.0` and the `BSD-3-Clause` license from
Go’s `time` module to `LICENSE`. Like `MIT`, both of these licenses
require the license text to be distributed with source and/or binaries.
@anakrish
Copy link
Collaborator

@musicinmybrain Thanks for fixing this. Curious: Golang's time pkg (https://pkg.go.dev/time) is BSD-3. Where is the Apache-2.0 coming from?

@anakrish
Copy link
Collaborator

@unexge, Can you also take a look at this PR? I'm OK with this PR as-is since we should be correct about licenses, but want to understand where Apache 2.0 is coming from.

@musicinmybrain
Copy link
Contributor Author

@musicinmybrain Thanks for fixing this. Curious: Golang's time pkg (https://pkg.go.dev/time) is BSD-3. Where is the Apache-2.0 coming from?

Within the “source code,” there is src/builtins/time/diff.rs, which says

// Licensed under the MIT and Apache 2.0 License.

and more clearly identifies Apache-2.0-licensed code from https://github.com/icza/gox between

// The following implementation of this function is taken
// from https://github.com/icza/gox licensed under Apache 2.0.
//
// For details, see https://stackoverflow.com/a/36531443/1705598
//
// Copyright 2021 icza
// BEGIN REDISTRIBUTION FROM APACHE 2.0 LICENSED PROJECT

and

// END REDISTRIBUTION FROM APACHE 2.0 LICENSED PROJECT


A number of the .rego files in tests/ appear to be Apache-2.0 as well (and these are distributed in the published crates), e.g.,

# Copyright (c) 2023 Microsoft Corporation
#
# SPDX-License-Identifier: Apache-2.0

@musicinmybrain
Copy link
Contributor Author

By the way, the Apache-2.0 text in this PR is taken directly from https://www.apache.org/licenses/LICENSE-2.0.txt.

@anakrish
Copy link
Collaborator

@musicinmybrain Thanks!

@anakrish anakrish merged commit d626f75 into microsoft:main Jan 10, 2026
41 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants