https://github.com/dapr/dapr/issues/3563 Skip to content Sign up * Why GitHub? Features - + Mobile - + Actions - + Codespaces - + Packages - + Security - + Code review - + Issues - + Integrations - + GitHub Sponsors - + Customer stories- * Team * Enterprise * Explore + Explore GitHub - Learn and contribute + Topics - + Collections - + Trending - + Learning Lab - + Open source guides - Connect with others + The ReadME Project - + Events - + Community forum - + GitHub Education - + GitHub Stars program - * Marketplace * Pricing Plans - + Compare plans - + Contact Sales - + Education - [ ] * # In this repository All GitHub | Jump to | * No suggested jump to results * # In this repository All GitHub | Jump to | * # In this organization All GitHub | Jump to | * # In this repository All GitHub | Jump to | Sign in Sign up {{ message }} dapr / dapr * Notifications * Star 14.3k * Fork 993 * Code * Issues 182 * Pull requests 22 * Actions * Security * Insights More * Code * Issues * Pull requests * Actions * Security * Insights New issue Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community. Pick a username [ ] Email Address [ ] Password [ ] [ ] Sign up for GitHub By clicking "Sign up for GitHub", you agree to our terms of service and privacy statement. We'll occasionally send you account related emails. Already on GitHub? Sign in to your account Jump to bottom Project includes a dependancy that has a license that forbids its use #3563 Open notbasetwo opened this issue Aug 18, 2021 * 9 comments * May be fixed by #3570 Open Project includes a dependancy that has a license that forbids its use #3563 notbasetwo opened this issue Aug 18, 2021 * 9 comments * May be fixed by #3570 Labels area/test/unit good first issue kind/compliance kind/devExperience P1 size/XS triaged/resolved Comments @notbasetwo Copy link @notbasetwo notbasetwo commented Aug 18, 2021 * edited Dapr depends on bouk/monkey, which has a license that forbids anybody to use it. The license is as follows: Copyright Bouke van der Bijl I do not give anyone permissions to use this tool for any purpose. Don't use it. I'm not interested in changing this license. Please don't ask. The package seems to be used in pkg/components/ standalone_loader_test.go. The text was updated successfully, but these errors were encountered: 11 16 We are unable to convert the task to an issue at this time. Please try again. The issue was successfully created but we are unable to update the comment at this time. @CodeMonkeyLeet Copy link Contributor @CodeMonkeyLeet CodeMonkeyLeet commented Aug 19, 2021 Thanks for the heads up! @yaron2 @artursouza this seems like it was introduced recently by PR #3158. Should this change be reverted? @daixiang0 Copy link Member @daixiang0 daixiang0 commented Aug 19, 2021 Still need to consider adding a license checker in case this issue occurs again. @yaron2 Copy link Member @yaron2 yaron2 commented Aug 19, 2021 Thanks for the heads up! @yaron2 @artursouza this seems like it was introduced recently by PR #3158. Should this change be reverted? This is only used in the test (and thus not.compiled and distributed in our binaries). We should not revert the entire PR, just rewrite the test. @yaron2 Copy link Member @yaron2 yaron2 commented Aug 19, 2021 * edited Also thanks for reporting @notbasetwo @artursouza artursouza added area/test/unit good first issue kind/ compliance kind/devExperience P1 size/XS triaged/resolved labels Aug 20, 2021 @daixiang0 daixiang0 linked a pull request that will close this issue Aug 20, 2021 remove bou.ke/monkey depencences #3570 Open 7 tasks @mpldr Copy link @mpldr mpldr commented Aug 22, 2021 I mean, you could just use it before the license was added: -- @89z Nope, before the License, it's All rights reserved. @Oppen Copy link @Oppen Oppen commented Aug 22, 2021 The T&C of GH imply you can use it due to the fact it's in a public repository. You would probably need to add it as a submodule just in case, because the terms say the grant applies when accessed via the GH service. See clause 5: If you set your pages and repositories to be viewed publicly, you grant each User of GitHub a nonexclusive, worldwide license to use, display, and perform Your Content through the GitHub Service and to reproduce Your Content solely on GitHub as permitted through GitHub's functionality (for example, through forking). You may grant further rights if you adopt a license. Emphasis mine. 4 @StoneCypher Copy link @StoneCypher StoneCypher commented Aug 22, 2021 @Oppen - GH's terms of service do not override the library's license. @notbasetwo Copy link Author @notbasetwo notbasetwo commented Aug 22, 2021 The T&C of GH imply you can use it due to the fact it's in a public repository. You would probably need to add it as a submodule just in case, because the terms say the grant applies when accessed via the GH service. See clause 5: If you set your pages and repositories to be viewed publicly, you grant each User of GitHub a nonexclusive, worldwide license to use, display, and perform Your Content through the GitHub Service and to reproduce Your Content solely on GitHub as permitted through GitHub's functionality (for example, through forking). You may grant further rights if you adopt a license. Emphasis mine. The keyphrase here is "through the GitHub Service". That doesn't give you permission to use it on your own machine. It gives you permission to eye up the repository. There are no complicated legal matters here - this is proprietary software with a license that does not permit it's usage. Even if on a technicality it may not stand up somewhere, it is also not in the spirit of FLOSS development to break the terms of a license. 1 2 @Oppen Copy link @Oppen Oppen commented Aug 22, 2021 @Oppen - GH's terms of service do not override the library's license. No, but the agreement grants special rights besides the license. It's essentially similar to dual licensing The keyphrase here is "through the GitHub Service". That doesn't give you permission to use it on your own machine. That's true. it is also not in the spirit of FLOSS development to break the terms of a license That's a completely different discussion. 1 Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment Assignees No one assigned Labels area/test/unit good first issue kind/compliance kind/devExperience P1 size/XS triaged/resolved Projects None yet Milestone No milestone Linked pull requests Successfully merging a pull request may close this issue. remove bou.ke/monkey depencences 8 participants @StoneCypher @artursouza @Oppen @yaron2 @daixiang0 @CodeMonkeyLeet @mpldr @notbasetwo * (c) 2021 GitHub, Inc. * Terms * Privacy * Security * Status * Docs * Contact GitHub * Pricing * API * Training * Blog * About You can't perform that action at this time. You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session.