Hi Justin,

We need an npm account, Does Apache have an official npm account?

hufeng,
thanks.

胡锋 <[email protected]> 于2020年1月15日周三 下午2:09写道:

> [+1] vote
>
> 胡锋 <[email protected]> 于2020年1月15日周三 下午12:15写道:
>
>> Hi Justin,
>>
>>  We don't actually use default-stylesheet.js.
>>
>> dubbo-js git/v3.0.0*
>> ❯ yarn why jsdom
>> yarn why v1.21.1
>> [1/4] 🤔  Why do we have the module "jsdom"...?
>> [2/4] 🚚  Initialising dependency graph...
>> [3/4] 🔍  Finding dependency...
>> [4/4] 🚡  Calculating file sizes...
>> => Found "[email protected]"
>> info Reasons this module exists
>>    - "_project_#ts-jest#jest-config#jest-environment-jsdom" depends on it
>>    - Hoisted from
>> "_project_#ts-jest#jest-config#jest-environment-jsdom#jsdom"
>> info Disk size without dependencies: "2MB"
>> info Disk size with unique dependencies: "7.45MB"
>> info Disk size with transitive dependencies: "14.83MB"
>> info Number of shared dependencies: 28
>> ✨  Done in 0.51s.
>>
>> jest unit testing framework includes this dependency
>>
>> Justin Mclean <[email protected]> 于2020年1月15日周三 上午5:36写道:
>>
>>> Hi,
>>>
>>> +1 (binding)
>>>
>>> I checked:
>>> - signatures and hashes are fine
>>> - LICENSE is fine
>>> - NOTICE all good
>>> - No unexpected binary files
>>> - All files have ASF headers
>>> - Can compile from source
>>>
>>> There is however another possible more serious issue in that this
>>> package may have A GPL dependancy, after compiling I can see this GPL
>>> licensed file [1]. While  JSdom is MIT licensed is seems it contains this
>>> file which is GPL licensed, is this file actually used?
>>>
>>> Thanks,
>>> Justin
>>>
>>> 1. ./node_modules/jsdom/lib/jsdom/browser/default-stylesheet.js
>>>
>>>
>>>

Reply via email to