Skip to content

License issue GPL dependency rfc3987 #691

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
kdekker-kdr4 opened this issue Mar 14, 2024 · 1 comment
Closed

License issue GPL dependency rfc3987 #691

kdekker-kdr4 opened this issue Mar 14, 2024 · 1 comment
Labels
duplicate This issue or pull request already exists

Comments

@kdekker-kdr4
Copy link

cyclonedx-python (cyclonedx-bom==4.1.2) depends via cyclonedx-python-lib[validation]==6.4.3 on the package jsonschema, but with the special option format (jsonschema[format]).
This introduces the GPL dependency of package rfc3987, which I think is not the intention.

How to reproduce:

  • Install Python 3.10.11
  • In cmd call: pip install cyclonedx-bom

Prove:

image

image

Temporary user solution:

Downgrade cyclonedx-bom to a version without the dependency such as 3.11.7.

@jkowalleck
Copy link
Member

duplicates the original CycloneDX/cyclonedx-python-lib#568

@jkowalleck jkowalleck closed this as not planned Won't fix, can't repro, duplicate, stale Mar 14, 2024
@jkowalleck jkowalleck added the duplicate This issue or pull request already exists label Mar 14, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
duplicate This issue or pull request already exists
Projects
None yet
Development

No branches or pull requests

2 participants