Hacker News Reader

The package.json in that repository says "MIT". How does that work with the propietary license agreement?

I also wonder if the author has any way to prevent copyleft code entering their project. What would be a nuisance for a free software project could potentially kill a commercial one like this.

I do not mean this as a comment against copyleft or this particular project, I am really interested to know if there is a Semi-Automatic license scanner.

View on HN

License scanning is a big deal for enterprise, especially the ones deeply afraid of any "GPL infection". Black Duck is one such vendor of license scanning software.[0]

[0] https://www.blackducksoftware.com/

and it gives a lot of false positives and false negatives...

Thank you for spotting this will update the package.json license field now.

As for external code this is somewhat manual - yarn has a really helpful `yarn licenses` (https://classic.yarnpkg.com/en/docs/cli/licenses) which removes a lot of the pain for the JS side!

Reply on news.ycombinator.com