Relicense Flagpost from AGPL-3.0 to Apache 2.0 (ADR-0035) - #300
Merged
Conversation
From v1.5.1 the platform is licensed under the Apache License 2.0. Releases up to and including v1.5.0 were published under AGPL-3.0 and remain available on those terms. - LICENSE replaced with the canonical Apache-2.0 text; NOTICE added naming the copyright holder. - The Flagpost Module Exception is retired and removed: under a permissive licence, modules need no additional permission to carry their own terms. The loader docstring now records that history. - README licence section and badge, CONTRIBUTING inbound=outbound (Apache-2.0 §5), and the frontend package metadata updated. - ADR-0035 records the decision and the options considered; ROADMAP gains the v1.5.1 entry. No functional changes.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
From v1.5.1, Flagpost is licensed under the Apache License 2.0.
Releases up to and including v1.5.0 were published under AGPL-3.0 and remain
available on those terms.
The rationale is recorded in ADR-0035: the AGPL (plus the bespoke Module
Exception) was a categorical blocker for the project's primary audience —
larger companies whose open-source policies ban AGPL outright — while the
practical protection for any future hosted offering lies in the trademark
(Apache-2.0 §6 withholds it) and operations, not the code.
Changes
LICENSEreplaced with the canonical Apache-2.0 text;NOTICEadded.MODULE-EXCEPTIONremoved — a permissive licence needs no additionalpermission for modules; the loader docstring records the history.
Apache-2.0 §5; frontend
package.json/ lockfile licence metadata.Relicensing feasibility was verified: all human commits belong to the
copyright holder's identities (Dependabot bumps are not copyrightable), so no
third-party consent was required.
No functional changes. On merge this ships as the v1.5.1 release.