Skip to content

Conversation

@wborn
Copy link
Member

@wborn wborn commented Mar 26, 2025

There are a lot of details in the license file that do not apply to this repository. This also allows for GitHub recognizing the license and show "AGPL-3.0 license" in the about section and repositories list.

@wborn wborn requested a review from richturner March 26, 2025 16:40
@richturner
Copy link
Member

@pierrekil I'd imagine we still want OpenRemote license here, maybe talk with @wborn about incompatibilities

@wborn
Copy link
Member Author

wborn commented Mar 27, 2025

If you want to add additional license details you can use multiple license files. That way it is still possible for GitHub to detect the license and show it in about and repository lists.

See for example: https://github.com/wborn/multiple-licenses


image


image


image


@pierrekil
Copy link
Member

@pierrekil I'd imagine we still want OpenRemote license here, maybe talk with @wborn about incompatibilities

Yes, still same license

@wborn wborn force-pushed the cleanup-license branch from eeed9f2 to 0ce4d43 Compare March 27, 2025 14:44
@wborn wborn mentioned this pull request Mar 27, 2025
5 tasks
@wborn
Copy link
Member Author

wborn commented Mar 28, 2025

I found some popular projects using AGPL-3.0 that also use the LICENSE file as-is. They document in either the README or other files their copyright text as well as details about files in their repositories that have other licenses, see:

@pierrekil
Copy link
Member

Let's follow

Keep same as in openremote repo:

  • Contributors.txt (for this repo)
  • Security.md

There are a lot of details in the license file that do not apply to this repository.
This also allows for GitHub recognizing the license and show "AGPL-3.0 license" in the about section and repositories list.
@wborn wborn force-pushed the cleanup-license branch 3 times, most recently from 25f02d7 to fa9f96c Compare March 31, 2025 13:08
@wborn
Copy link
Member Author

wborn commented Mar 31, 2025

OpenRemote Service ML Forceast is distributed under AGPL-3.0-only.

According to our license headers it is AGPL-3.0-or-later:

This program is free software: you can redistribute it and/or modify
it under the terms of the GNU Affero General Public License as
published by the Free Software Foundation, either version 3 of the
License, or (at your option) any later version.

For Apache-2.0 exceptions, see LICENSING.md.

There are no Apache 2 licensed files in this repository so I haven't added this file.

Contributors.txt (for this repo)

We decided to remove this file because this information is part of the Git repository details, see also:

@wborn wborn requested a review from pierrekil March 31, 2025 13:17
@wborn wborn force-pushed the cleanup-license branch from fa9f96c to 578b51f Compare March 31, 2025 14:33
@pierrekil
Copy link
Member

Are we using other libraries with AGPLv3?

@wborn
Copy link
Member Author

wborn commented Apr 1, 2025

Are we using other libraries with AGPLv3?

Not that I know of but it currently is all manual work to keep track of dependencies and their licenses.

Automating the generation of an overview of all dependencies and their licenses, along with creating a Software Bill of Materials (SBOM), can be beneficial. This will also help ensure compliance with the EU Cyber Resilience Act (CRA) once it takes effect.

See: https://fossa.com/blog/sbom-requirements-cra-cyber-resilience-act

@richturner
Copy link
Member

Looks like source code is not using our standard OpenRemote copyright header but maybe that needs to be handled in a separate PR.

@wborn
Copy link
Member Author

wborn commented Apr 3, 2025

Looks like source code is not using our standard OpenRemote copyright header but maybe that needs to be handled in a separate PR.

It's similar to the headers in openremote/openremote#1441.

@richturner
Copy link
Member

Looks like source code is not using our standard OpenRemote copyright header but maybe that needs to be handled in a separate PR.

It's similar to the headers in openremote/openremote#1441.

Will ask @dominiquekleeven to address separately

@richturner richturner merged commit 4f96a9f into main Apr 8, 2025
1 check passed
@richturner richturner deleted the cleanup-license branch April 8, 2025 09:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants