silent relicensing to a viral license is not good

[laurentrdc]

silent relicensing to a viral license is not good

[LaurentRDC]

The relicensing was not silent, as it has been announced in the changelog.

As far as I know, the only package that depends on scikit-ued is another package of mine, iris-ued. It is also being relicensed to GPLv3.

[KOLANICH]

The relicensing was not silent, as it has been announced in the changelog.

Almost noone reads changelogs. People just declare scikit-ued as a dependency, and pip just installs the latest version. And even if they follow and read, they have to have infinitily fast reaction on the changes to prevent GPL violation, if they allow pip to upgrade the lib. This way relicensing without taking measures to prevent confusion of GPLed versions to MITed ones automatically causes massive GPL violations. A paranoid psycho expecting such a relicense can even pin a version using < condition, but it won't help: as long as he installed some GPLed software using GPLed version, pip will just upgrade it, and GPL will still be violated.

As far as I know, the only package that depends on scikit-ued is another package of mine, iris-ued. It is also being relicensed to GPLv3.

We cannot know all the packages depending on scikit-ued, or any other library.