Stream: helpdesk (published)

Topic: Third-party license inclusion


view this post on Zulip wheeheee (Jul 27 2025 at 07:48):

What is the recommended way to comply with the requirements for redistributing and/or modifying third-party source code, like including a copy of these licenses right in the source file or in say a license folder? Or something like the julia repo's THIRDPARTY.md. Additionally, is it ok to just include a hyperlink to the repo's license?

view this post on Zulip Sascha Mann (Jul 27 2025 at 14:23):

wheeheee said:

What is the recommended way to comply with the requirements for redistributing and/or modifying third-party source code, like including a copy of these licenses right in the source file or in say a license folder? Or something like the julia repo's THIRDPARTY.md. Additionally, is it ok to just include a hyperlink to the repo's license?

I usually use a THIRD_PARTY_NOTICE.md file like this: https://github.com/julia-actions/setup-julia/blob/master/THIRD_PARTY_NOTICE.md

Not a lawyer but I don't think a link would be sufficient if the license requires that you include a copy of the license or a copy of the copyright notice.

For the MIT License in particular, this is worth a read: https://writing.kemitchell.com/2016/09/21/MIT-License-Line-by-Line.html

view this post on Zulip wheeheee (Jul 27 2025 at 14:29):

Wait so does the Julia repo do this properly here? Or they don’t need to because it downloads those repos in their entirety during make or something

view this post on Zulip wheeheee (Jul 27 2025 at 14:34):

So I guess I might have to open a PR in a repo I was contributing to, to fix the licensing situation because of a very old commit…but only from the most recent release onwards. Hopefully (and probably) no one cares after that because that third party license is pretty permissive otherwise…

view this post on Zulip wheeheee (Jul 27 2025 at 14:55):

I found a bit of a discussion here but not the resolution…

view this post on Zulip wheeheee (Jul 27 2025 at 14:55):

https://github.com/JuliaLang/julia/pull/42102

view this post on Zulip Sascha Mann (Jul 27 2025 at 21:42):

wheeheee said:

Wait so does the Julia repo do this properly here? Or they don’t need to because it downloads those repos in their entirety during make or something

I don't know enough to say that with confidence. It's also worth keeping in mind that as long as you show some good effort and intentions, most people are unlikely to go after you, especially in the context of open source software

view this post on Zulip wheeheee (Jul 28 2025 at 07:29):

That sounds reasonable, but I guess I just expected that at least a project as big as Julia would have lawyers make sure they’re legally bulletproof (hence they must have done everything by the book)


Last updated: Aug 14 2025 at 04:51 UTC