ds300 / ds300/patch-package

Feature: Consider replacing json-stable-stringify to fulfill compliance for commercial products

Open
#494 0 comments 6 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
11.2k
Forks
325
PR merge metrics
No merged PRs in 30d

Description

Hello

This is kind of a feature request. This library directly depends on json-stable-stringify, which depends on jsonify, which has no license and thus cause problems with corporations, at least outside US. See: https://en.wikipedia.org/wiki/Public-domain_software .

Requests to set jsonify under a proper license are not considered: https://github.com/ljharb/jsonify/issues/2 .
An explicit request to allow the usage of jsonify in a commercial product was not given by the author.

There are many alternatives to json-stable-stringify which have proper licenses, such as:
- https://www.npmjs.com/package/json-stable-stringify-without-jsonify
- fast-stable-stringify

It would be great if you could switchover to one of these alternatives.
This would make your library and also others that depend on you, e.g. swagger-ui usable in commercial products.

Thanks.

Best regard
Jochen

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.