Skip to content

Add third party licenses file and generator script #4

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
cmatzenbach wants to merge 4 commits into
base: master
Choose a base branch
from
Open

Add third party licenses file and generator script #4

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
58193ac
Add license generator script; push license file
cmatzenbach Jun 22, 2026
e642757
Update README with 3rd party license info
cmatzenbach Jun 22, 2026
010c30c
Remove script; update README to point to new gh script
cmatzenbach Jun 23, 2026
d8194bd
Remove license-checker dep
cmatzenbach Jun 24, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 14 additions & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -268,6 +268,20 @@ This project is inspired by the SQL parser [flora-sql-parser](https://github.com

[Apache-2.0](LICENSE)

## Third-party vendor licenses

A full list of third-party npm packages and their licenses is maintained in [`license/THIRD_PARTY_LICENSES.md`](license/THIRD_PARTY_LICENSES.md). To regenerate it after dependency changes, run:

```sh
npx github:heavyai/generate-third-party-licenses
```

This requires `node_modules` to be installed (`npm install`). The script is maintained in the [heavyai/generate-third-party-licenses](https://github.com/heavyai/generate-third-party-licenses) repo.

Every third-party module from npm that gets includes in the final, distributed bundle has its license verified and license text (if provided) or license type shipped in licenses.txt with the bundle. Licenses must be in the pre-approved list of permissive open-source licenses. If it's necessary to override a license for a module because it's missing or improperly tagged in its package.json, add an entry in license-overrides.json.

License descriptions and public license URLs are maintained in licenses.json as well, but they are not verified and might not be up to date.

## Buy me a Coffee

If you like my project, **Star** in the corresponding project right corner. Your support is my biggest encouragement! ^_^
Expand Down
Loading