Josh is correct that there is some wiggle room on this specific issue (json.org license). The wiggle room is that existing projects have a grace period for removing the json.org dependency, with the deadline I think being June 2017.
Since Gossip has yet to make a release, I would lean toward removing it. It would be a good demonstration to the IPMC of the podling taking efforts to comply with license policy. > On Jan 3, 2017, at 4:54 PM, Gary Dusbabek <[email protected]> wrote: > > On Tue, Jan 3, 2017 at 10:45 AM, Josh Elser <[email protected]> wrote: > >> -1 due to a dependency on a project with a category-X license [1]. >> > > Wait. So you're saying that a transitive category-X licensed dependency is > verboten even when we do not include the binary or the source? > The litmus test I use is “Can the software be used without the category-X licensed dependency?” If the answer is “no” then it is verboten. -Taylor
