Skip to content

[upstream-queue] docs: add THIRD-PARTY.md license attribution#4

Open
damienriehl wants to merge 1 commit into
devfrom
chore/third-party-notices
Open

[upstream-queue] docs: add THIRD-PARTY.md license attribution#4
damienriehl wants to merge 1 commit into
devfrom
chore/third-party-notices

Conversation

@damienriehl

Copy link
Copy Markdown

[upstream-queue] — DO NOT MERGE

Staged inside the alea fork; dev/main stay pure upstream mirrors. Awaiting retarget to CatholicOS.

What

Adds THIRD-PARTY.md — OSS license attribution for the 24 direct runtime dependencies (portfolio item S075.3). Licenses read from installed *.dist-info/METADATA (not inferred).

Breakdown: MIT (10), BSD family (7), Apache-2.0 (4), and 3 weak/linking-exception copyleft (owlready2 LGPL-3.0, PyGithub LGPL-3.0, pygit2 GPL-2.0-with-linking-exception) — all consumed as unmodified imported libraries, so no copyleft obligation on ontokit-api's MIT source.

Clean: no AGPL, no unknown licenses, no vendored FOLIO CC-BY data.

Docs-only; no code or dependency changes.

Inventory of the 24 direct runtime dependencies and their SPDX licenses,
read from installed distribution metadata (not inferred). Breakdown: MIT (10),
BSD family (7), Apache-2.0 (4), plus 3 weak/linking-exception copyleft
(owlready2 LGPL-3.0, PyGithub LGPL-3.0, pygit2 GPL-2.0-with-linking-exception)
consumed as unmodified imported libraries. No AGPL; no unknown licenses; no
FOLIO CC-BY data vendored. ontokit-api itself remains MIT.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ELAutiUDrKdGf2vZAwgt9Q
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant