{"action":"created","issue":{"url":"https://api.github.com/repos/bokeh/bokeh/issues/8495","repository_url":"https://api.github.com/repos/bokeh/bokeh","labels_url":"https://api.github.com/repos/bokeh/bokeh/issues/8495/labels{/name}","comments_url":"https://api.github.com/repos/bokeh/bokeh/issues/8495/comments","events_url":"https://api.github.com/repos/bokeh/bokeh/issues/8495/events","html_url":"https://github.com/bokeh/bokeh/issues/8495","id":390142605,"node_id":"MDU6SXNzdWUzOTAxNDI2MDU=","number":8495,"title":"Document Licenses of included projects","user":{"login":"dwt","id":57199,"node_id":"MDQ6VXNlcjU3MTk5","avatar_url":"https://avatars1.githubusercontent.com/u/57199?v=4","gravatar_id":"","url":"https://api.github.com/users/dwt","html_url":"https://github.com/dwt","followers_url":"https://api.github.com/users/dwt/followers","following_url":"https://api.github.com/users/dwt/following{/other_user}","gists_url":"https://api.github.com/users/dwt/gists{/gist_id}","starred_url":"https://api.github.com/users/dwt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dwt/subscriptions","organizations_url":"https://api.github.com/users/dwt/orgs","repos_url":"https://api.github.com/users/dwt/repos","events_url":"https://api.github.com/users/dwt/events{/privacy}","received_events_url":"https://api.github.com/users/dwt/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-12-12T09:45:28Z","updated_at":"2018-12-12T10:03:54Z","closed_at":null,"author_association":"NONE","body":"We're trying to be diligent about (checking/) showing all the licenses of the dependencies we use in our project, and to this end, it proves rather difficult to extract the licenses of the bundled js dependencies that bokeh ships.\r\n\r\nTo my understanding it is not enough to show for bokeh, that it is just under the new BSD-Clause, as all the bundled dependencies licenses would also need to be shown (as we are in effect using them too).\r\n\r\nMy workaround for now is to manually install bokeh from source, build BokehJS and then inspect the built up NPM-repo for all the installed tools, it would be much better however if the Bokeh-project has an always up to date document (on the website or in the repository) that lists all the licenses that it contains - bonus points if it's a plaintext file.\r\n\r\nWhat do you think? Can you provide such a document?"},"comment":{"url":"https://api.github.com/repos/bokeh/bokeh/issues/comments/446531307","html_url":"https://github.com/bokeh/bokeh/issues/8495#issuecomment-446531307","issue_url":"https://api.github.com/repos/bokeh/bokeh/issues/8495","id":446531307,"node_id":"MDEyOklzc3VlQ29tbWVudDQ0NjUzMTMwNw==","user":{"login":"dwt","id":57199,"node_id":"MDQ6VXNlcjU3MTk5","avatar_url":"https://avatars1.githubusercontent.com/u/57199?v=4","gravatar_id":"","url":"https://api.github.com/users/dwt","html_url":"https://github.com/dwt","followers_url":"https://api.github.com/users/dwt/followers","following_url":"https://api.github.com/users/dwt/following{/other_user}","gists_url":"https://api.github.com/users/dwt/gists{/gist_id}","starred_url":"https://api.github.com/users/dwt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dwt/subscriptions","organizations_url":"https://api.github.com/users/dwt/orgs","repos_url":"https://api.github.com/users/dwt/repos","events_url":"https://api.github.com/users/dwt/events{/privacy}","received_events_url":"https://api.github.com/users/dwt/received_events","type":"User","site_admin":false},"created_at":"2018-12-12T10:03:54Z","updated_at":"2018-12-12T10:03:54Z","author_association":"NONE","body":"Ideally, the License file of [BokehJS](https://github.com/bokeh/bokeh/blob/master/bokehjs/LICENSE) should include all the licenses of the bundled projects. I.e. something along the lines:\r\n\r\nParts of BokehJS are goverened by these licenses: ...\r\n\r\nSome examples of what I mean:\r\n* https://github.com/numpy/numpy/blob/master/LICENSE.txt\r\n* https://github.com/kwgoodman/bottleneck/blob/master/bottleneck/LICENSE\r\n\r\nI can provide more if necessary - but I believe that this is at least very much something one should do, if not actually a requirement, as you get all those licenses and their obligations if you include bokeh in your project."}}
{"actor":{"display_login":"dwt"}}