Hi, zhiyuan, I checked the license of `node-bcrypt-pbkdf`[1], which is BSD 3-clause not the BSD 4-clause. So I think we can use it in the APISIX dashboard project.
[1] https://github.com/joyent/node-bcrypt-pbkdf/blob/master/LICENSE Thanks, Ming Wen, Apache APISIX Twitter: _WenMing Zhiyuan Ju <juzhiy...@apache.org> 于2020年2月11日周二 上午10:41写道： > BTW, this module is used for development, but unexpected issue will occur > without it. I just created an Issue in [1] to apply for a License > whitelist. > > [1] https://github.com/joyent/node-bcrypt-pbkdf/issues/10 > > Best Regards! > @ Zhiyuan Ju <https://www.shaoyaoju.org/> > > > Zhiyuan Ju <juzhiy...@apache.org> 于2020年2月11日周二 上午10:24写道： > > > Hi Justin, > > > > Thanks for your check. > > > > The first one, jschardet could be removed, but the second is one of the > > dependencies for vue-cli, so it cannot be removed. > > > > Could we keep this dependency and do a release? > > > > Best Regards! > > @ Zhiyuan Ju <https://www.shaoyaoju.org/> > > > > > > Justin Mclean <jus...@classsoftware.com> 于2020年1月23日周四 上午9:20写道： > > > >> Hi, > >> > >> The KEYS file is now fine. However i’m still -1 due to Category X > >> dependancies, can you explain the below? > >> > >> While this is being sorted out you could make a release with the work in > >> progress disclaimer noting this issue. > >> > >> However I installed this [1] and running this: > >> license-checker --production > >> > >> Shows this as a dependancy: > >> ├─ jschardet@1.4.2 > >> │ ├─ licenses: LGPL-2.1+ > >> │ ├─ repository: https://github.com/aadsm/jschardet > >> │ ├─ publisher: António Afonso > >> > >> And this: > >> > >> ├─ bcrypt-pbkdf@1.0.0 > >> │ ├─ licenses: BSD-4-Clause > >> > >> Everything else there looked fine. > >> > >> Thanks, > >> Justin > >> > >> 1. https://www.npmjs.com/package/license-checker > > > > >
