Say I commercialize a SaaS Web Application that uses a component licensed under GNU GPL v3 (like CKEditor5) or under Apache 2.0 license (like Material Design Icons), where and how should I give attribution for those components?

They are never distributed as source code, though they are running in the browser as bundled, minified JavaScript.

The Angular build process generates a file named 3rdpartylicenses.txt listing all components and all licenses. It's deployed on the web server.

Is that sufficient or should there be a "3rd party components" section in the SaaS' "Terms of Service"? If so, what should be listed? Is a simple link to the 3rdpartylicenses.txt mentioned above sufficient?

  • 1
    If your server provides (minified) JS to the user's browser, you most certainly are distributing it. Have you read this question, and does it help any?
    – MadHatter
    Feb 9, 2021 at 9:43
  • @MadHatter, I'm not sure. Unless you are saving that "as long as I do not strip out the JS comments indicating the license of those components from the bundled JavaScript, I do not need to write anything else anywhere", then that is not really my question.
    – dstj
    Feb 9, 2021 at 19:16
  • Is your question "I am distributing GPLv3 and Apache2-licensed javascript, what do I need to do to be license-compliant"? Because it seems to me that's what you're asking, even though it's not what you've written.
    – MadHatter
    Feb 9, 2021 at 19:28
  • Sort of, yes. I clarified the question.
    – dstj
    Feb 9, 2021 at 19:38
  • If that's what you want to ask, I strongly recommend that you ask it. Questions that say "I want to do this with this piece of software, is this my obligation?" can simply be answered "no", and are thus not as useful to the greater community, nor as edifying for the asker, as questions that ask "I want do do this with this piece of software, what are my obligations?".
    – MadHatter
    Feb 9, 2021 at 21:26


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.