Relicense: GPL-2.0-only → GPL-3.0-or-later#16
Conversation
bitsocial-telegram-bots depends on @plebbit/plebbit-js (pkc-js, GPL-3.0-or-later), which is legally incompatible with GPL-2.0-only. Move to GPL-3.0-or-later to resolve the conflict. - package.json: license -> GPL-3.0-or-later - LICENSE: replace verbatim GPLv2 text with GPLv3 - README: License section Relicensing authorized by cofounder / copyright holder.
📝 WalkthroughWalkthroughThis PR upgrades the project's license from GPL v2 to GPL v3. The LICENSE document is replaced with GPLv3 text, and license metadata in README.md and package.json are updated to reflect the new version. ChangesGPL v2 to v3 License Upgrade
Estimated code review effort🎯 3 (Moderate) | ⏱️ ~20 minutes Poem
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Caution
Some comments are outside the diff and can’t be posted inline due to platform limitations.
⚠️ Outside diff range comments (1)
package.json (1)
18-18:⚠️ Potential issue | 🔴 Critical | ⚡ Quick winFix license mismatch: pinned
@plebbit/plebbit-jsis GPL-2.0-only, not GPL-3.0-or-later.At commit
692ec349f01aa6d8e939ff1d6d07315ab92e4099,plebbit-js’spackage.jsondeclaresGPL-2.0-only, and theLICENSEfile indicates “GNU GENERAL PUBLIC LICENSE Version 2, June 1991”, so it doesn’t support the statedGPL-3.0-or-laterpremise for the relicense.🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In `@package.json` at line 18, The dependency entry for "`@plebbit/plebbit-js`" pinned to commit 692ec349f01aa6d8e939ff1d6d07315ab92e4099 incorrectly assumes GPL-3.0-or-later; that commit's package.json and LICENSE are GPL-2.0-only. Update the package.json dependency handling: either replace or repoint the "`@plebbit/plebbit-js`" entry (the git URL with commit 692ec349f01aa6d8e939ff1d6d07315ab92e4099) to a version/commit that is actually GPL-3.0-or-later, or explicitly mark it as GPL-2.0-only in our metadata and remove any relicense claims; alternatively remove/replace the dependency with a compatible-licensed package. Ensure changes reference the same package name "`@plebbit/plebbit-js`" and the offending commit hash when committing the fix.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Outside diff comments:
In `@package.json`:
- Line 18: The dependency entry for "`@plebbit/plebbit-js`" pinned to commit
692ec349f01aa6d8e939ff1d6d07315ab92e4099 incorrectly assumes GPL-3.0-or-later;
that commit's package.json and LICENSE are GPL-2.0-only. Update the package.json
dependency handling: either replace or repoint the "`@plebbit/plebbit-js`" entry
(the git URL with commit 692ec349f01aa6d8e939ff1d6d07315ab92e4099) to a
version/commit that is actually GPL-3.0-or-later, or explicitly mark it as
GPL-2.0-only in our metadata and remove any relicense claims; alternatively
remove/replace the dependency with a compatible-licensed package. Ensure changes
reference the same package name "`@plebbit/plebbit-js`" and the offending commit
hash when committing the fix.
ℹ️ Review info
⚙️ Run configuration
Configuration used: defaults
Review profile: CHILL
Plan: Pro
Run ID: de6ed04c-f6f8-4e94-885d-f95d16333892
📒 Files selected for processing (3)
LICENSEREADME.mdpackage.json
1 participant
Why
bitsocial-telegram-botsis GPL-2.0-only but depends on@plebbit/plebbit-js(= pkc-js, GPL-3.0-or-later). GPL-2.0-only is legally incompatible with GPL-3.0-or-later. Moving to GPL-3.0-or-later resolves the conflict.Changes
package.json:license→GPL-3.0-or-laterLICENSE: GPLv2 text → GPLv3README.md: License sectionAuthorized by cofounder / copyright holder. Licensing strategy, not legal advice.
Note
Low Risk
Documentation and SPDX metadata only; no code paths or deployment behavior change, though downstream distributors must comply with GPLv3 terms.
Overview
Relicensing aligns the project with its GPL-3.0-or-later dependency (
@plebbit/plebbit-js), replacing the prior GPL-2.0-only declaration that is incompatible with GPLv3.package.jsonnow declares"license": "GPL-3.0-or-later".LICENSEis replaced with the full GPLv3 text (including sample notices referencing version 3).README.mdLicense section is updated to GPL-3.0-or-later. No application source or runtime behavior changes.Reviewed by Cursor Bugbot for commit 1e47d6f. Bugbot is set up for automated code reviews on this repo. Configure here.
Summary by CodeRabbit