Skip to content

chore: declare MIT in package.json and add THIRD-PARTY-LICENSES.md #35

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
vklimontovich wants to merge 4 commits into
base: main
Choose a base branch
from
Open

chore: declare MIT in package.json and add THIRD-PARTY-LICENSES.md #35

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
a580529
chore: declare MIT in package.json and add THIRD-PARTY-NOTICES
vklimontovich May 13, 2026
2bd44b1
chore: replace huge THIRD-PARTY-NOTICES with compact LICENSES.md
vklimontovich May 13, 2026
7c7ff4e
chore: trim THIRD-PARTY-LICENSES.md to summary + weak-copyleft list
vklimontovich May 13, 2026
52ce37e
style: prettier --write packages/core/src/server.tsx
vklimontovich May 13, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
38 changes: 38 additions & 0 deletions THIRD-PARTY-LICENSES.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,38 @@
# Third-party licenses

This project is distributed under the MIT License (see `LICENSE`). MIT requires that the upstream LICENSE text be preserved in each third-party dependency's installed artifact — Bun's package cache does this by default.


## Summary

| Category | Count |
|---|---:|
| Permissive | 783 |
| Permissive (w/ attribution) | 78 |
| Weak copyleft | 12 |
| **Total** | **873** |

## What each category means

- **Permissive** — MIT, BSD, ISC, 0BSD, Unlicense, CC0, Boost. Use freely; keep the upstream LICENSE text in the dep.
- **Permissive (w/ attribution)** — Apache-2.0, Artistic, CC-BY. Same as permissive, plus preserve any upstream NOTICE file.
- **Weak copyleft** — MPL-2.0, LGPL, EPL, CDDL. Modifications to the licensed files must stay under the same license, but using the library as a dep does not force this project to open-source.

## Weak-copyleft dependencies

Explicit list — all safe as unmodified library deps:

| Package | Version | Ecosystem | License |
|---|---|---|---|
| `@edge-runtime/format` | 2.2.1 | npm | MPL-2.0 |
| `@edge-runtime/node-utils` | 2.3.0 | npm | MPL-2.0 |
| `@edge-runtime/ponyfill` | 2.4.2 | npm | MPL-2.0 |
| `@edge-runtime/primitives` | 4.1.0 | npm | MPL-2.0 |
| `@edge-runtime/vm` | 3.2.0 | npm | MPL-2.0 |
| `@img/sharp-libvips-darwin-arm64` | 1.2.4 | npm | LGPL-3.0-or-later |
| `@vercel/og` | 0.7.2 | npm | MPL-2.0 |
| `edge-runtime` | 2.5.9 | npm | MPL-2.0 |
| `lightningcss` | 1.30.2 | npm | MPL-2.0 |
| `lightningcss-darwin-arm64` | 1.30.2 | npm | MPL-2.0 |
| `next-mdx-remote` | 6.0.0 | npm | MPL-2.0 |
| `pip-requirements-js` | 1.0.2 | npm | MPL-2.0 |
1 change: 1 addition & 0 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
{
"name": "nextlytics-monorepo",
"private": true,
"license": "MIT",
"type": "module",
"workspaces": [
"packages/*",
Expand Down
4 changes: 3 additions & 1 deletion packages/core/src/server.tsx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -245,7 +245,9 @@ export function Nextlytics(userConfig: NextlyticsConfig): NextlyticsResult {
if (!ctx) {
// x-nl-page-render-id absent → check if middleware is at least active
if (!headersList.get(headerNames.active)) {
console.warn("[Nextlytics] nextlyticsMiddleware should be added in order for Server to work");
console.warn(
"[Nextlytics] nextlyticsMiddleware should be added in order for Server to work"
);
}
return <>{children}</>;
}
Expand Down
Loading