Skip to content

Clarify licensing for bundled third-party components#110

Merged
lippserd merged 2 commits intomainfrom
license
Mar 26, 2026
Merged

Clarify licensing for bundled third-party components#110
lippserd merged 2 commits intomainfrom
license

Conversation

@lippserd
Copy link
Copy Markdown
Member

@lippserd lippserd commented Mar 24, 2026

This package bundles third-party components under multiple upstream
licenses rather than a single package-wide MIT license.

  • Adjust the misleading license entry in composer.json.
  • Rename the root license file to LICENSE.md.
  • Scope the MIT text to Icinga-authored packaging glue.
  • Add THIRD_PARTY_LICENSES.md for non-MIT bundled components and assets.
  • Align README.md wording with the new licensing layout.

@lippserd lippserd requested a review from Al2Klimov March 24, 2026 10:20
@cla-bot cla-bot bot added the cla/signed label Mar 24, 2026
## License Summary

| License | Component | License Files / Notes |
|-------------------|-----------------------------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The poor guy who'll have to maintain this table over time...

Seriously speaking, are you ten billion percent sure reviewers of dependabot PRs will make sure this table is up to date?

If not, I'd do either of the following:

  • Add a GitHub action which automatically comments on newly opened dependabot PRs, telling reviewers to keep this in mind
  • Omit this table – shipped license files of the individual projects are there after all

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

GitHub Actions is a topic for later. Licenses must be displayed, and users should not be required to gather them on their own.

Rename the license file to `LICENSE.md`, switch to a Markdown heading,
and normalize the Icinga URL.

This aligns the license file with the repository's Markdown-based
documentation and establishes `LICENSE.md` as a consistent convention
across all Icinga repositories.
Adjust the package-wide MIT claim from `composer.json`, scope MIT to
Icinga-authored glue in `LICENSE.md`, add `THIRD_PARTY_LICENSES.md`,
and update the README to reflect the package's mixed licensing.
@lippserd lippserd merged commit b278a4e into main Mar 26, 2026
1 check passed
@lippserd lippserd deleted the license branch March 26, 2026 12:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants