jquery: Missing source code in 1.12.4 ⇒ not redistributable under normal OSS rules
I’m currently trying to upgrade the jQuery embedded in an older project from 1.10.0 to 1.12.4 and found multiple horrors, called the new external/ subdirectory.
jQuery 1.12.4 ships a minified-only npo v0.7.8-a with no source available, which makes jQuery 1.12.4 not Open Source, and not suitable for Debian to boot.
The npo repository does not have a git tag corresponding to v0.7.8-a (see https://github.com/getify/native-promise-only/issues/57 for the bug for that) and does not contain the minified compilation output, so I cannot find out the correct source code myself.
This makes jQuery 1.12.4 non-redistributable under OSS rules.
About this issue
- Original URL
- State: closed
- Created 5 years ago
- Comments: 18 (11 by maintainers)
Commits related to this issue
- Tests: update npo.js and include unminified source instead Close gh-4446 Ref gh-4445 — committed to jquery/jquery by timmywil 5 years ago
- Tests: update npo.js and include unminified source instead Close gh-4446 Ref gh-4445 — committed to jquery/jquery by timmywil 5 years ago
The bits in any
devDependencyare not shipped by a client/user of jQuery so their licenses should not matter. We may have used Adobe Photoshop to create some of the images used for testing but that does not mean you need a Photoshop license or the source code for it. The files inexternalare only in the repo because we had no other choice but to manage our development tool dependencies manually before the days ofnpmand lockfiles.BTW, we do copy over license files as well when they are available in the npm packages, but they weren’t available in native-promise-only or require-js. But the files copied do include links to their licenses in the comment banners. Also, this is something that hasn’t been touched in 4 years.