Huxing Zhang wrote on Thu, 21 Mar 2019 09:43 +00:00: > The dubbo admin 0.2.0 release candidate contains a front end project > which is based on Nodejs and npm. There is a transitive dependency > called wordwrap[1], in this dependency there is a file called > idleness.txt which is written by Bertrand Russell, the copyright text > is as follows[3]: > > "In Praise of Idleness and Other Essays (1932) – Copyrighted in the > United States until 2027 due to Renewal R320904" > > wordwrap is a dev dependency, which means it is only used during > development, and won't be used in production. The npm dependency tree > is as follows: > > [email protected] > ./dubbo-admin-ui > ├─┬ [email protected] > │ └─┬ [email protected] > │ └── [email protected] > └─┬ [email protected] > └─┬ [email protected] > └─┬ [email protected] > └─┬ [email protected] > └─┬ [email protected] > └── [email protected] > > The problem is that when a user download the source code, and type > "npm install", the wordwrap will be downloaded together with the > idleness.txt file.
Great question. I don't know whether it's a problem (the copyright renewal doesn't necessarily mean the copyright owner withholds redistribution rights), but have y'all considered asking wordwrap upstream to use a public domain text in their test suite to remove all doubt? I never expected to see Russel's name on _this_ mailing list. :) Cheers, Daniel
