Questions tagged [npm]

For questions about distributing open source projects via the JavaScript package manager 'npm', or other open source questions about using packages found there.

Filter by
Sorted by
Tagged with
1
vote
1answer
73 views

can I get rid of the GPL-v3 LICENCE file if I use GPL-v3 licensed code but declare it in `package.json`?

I've been working with a project lately involving the usage of live2d. live2d, however, is licensed under GPLv3, so in my understanding I must include the GPLv3 licence file in my repository. However,...
2
votes
1answer
125 views

OSS Attribution for Marketing Site built with React

I am building a marketing website using React and the ecosystem around it (Webpack, Babel, etc.). The site is shipped as a minified client-side bundle. NPM tells me there are a gazillion dependencies ...
4
votes
3answers
2k views

Can an NPM package have an MIT license on github if it depends on MIT packages with BSD-2, BSD-3 and Apache 2 licenses

I am trying to understand if an NPM package can be open-source on GitHub with an MIT license if it depends on NPM packages that are open-source on GitHub with a BSD-2, BSD-3, Apache 1 or Apache 2 ...
3
votes
1answer
385 views

Can we use excel4node for commercial

Now I am using excel4node in my product. excel4node is using jszip which using openent. excel4node is under MIT license, jszip under both MIT and GPl license, but openent is GPL licence. So can I use ...
1
vote
1answer
40 views

Dependencies installed via package managers

Is there any difference to provide for instance a npm package.json or to provide all the packages source code in the source code repository of the software project? What's the impact if the project ...
4
votes
1answer
73 views

Legally, is getting a js file from a server the same as installing npm package?

I'm working on a (most possibly) proprietary front-end React app for my company. We use this npm package as a plugin for TinyMce editor. Turns out, it has GPL v3 license, which isn't allowed as per ...
-1
votes
1answer
2k views

Can I copy ISC licence NPM package code into a commercial project?

For a commercial project I'm working on I am using an NPM package called 'react-image-crop'. https://www.npmjs.com/package/react-image-crop react-image-crop holds the ISC licence. Since I want to ...
5
votes
1answer
741 views

What is the appropriate way to include third-party libraries copyright notice and permission notice in my project source code?

I am writing a web app based on react framework and I am using npm package manager. Together with transitive dependencies I have about 800 MIT licensed dependencies. To comply with MIT, do I need to ...
6
votes
1answer
1k views

Etiquette around forks & npm

What is the etiquette around forking and NPM? Consider the following sequence of events: There is an existing open source project published on GitHub (or similar) under some standard permissive ...
8
votes
1answer
555 views

Reproducing all npm package Licenses

I'm about to release a website that uses a lot of open source software. There are likely 30-100 packages, and those probably include more packages. I've made sure none of them are the type of ...
8
votes
1answer
264 views

Is it OK to upload someone else's code to NPM?

Per user recommendation, this question is based on an SO question. ASX is a cool library I use for some of my projects, but it is not available on NPM. I filed an issue on the GitHub repo asking to ...
4
votes
1answer
3k views

How do you know what licences you used in an Angular project?

I'm working on a website that I plan to release as open source, and also publish it to a web host so that people can actually use it. The website uses Angular, and I used Angular CLI to create it. In ...
4
votes
1answer
429 views

Should I credit indirect depended package in my open source credit notice too? [duplicate]

My project about to launch to public. So I'm preparing open source credit notice page. Since my project is developed in JavaScript, there's lots of node_modules in the development directory. Here's ...
4
votes
1answer
936 views

Do packages listed in a package.json file need to be documented individually?

I am trying to understand the general clause contained in most licenses that reads as follows The above copyright notice and this permission notice shall be included in all copies or substantial ...