patch-package icon indicating copy to clipboard operation
patch-package copied to clipboard

Feature: Consider replacing json-stable-stringify to fulfill compliance for commercial products

Open mapero opened this issue 2 years ago • 0 comments

Hello

This is kind of a feature request. This library directly depends on json-stable-stringify, which depends on jsonify, which has no license and thus cause problems with corporations, at least outside US. See: https://en.wikipedia.org/wiki/Public-domain_software .

Requests to set jsonify under a proper license are not considered: https://github.com/ljharb/jsonify/issues/2 . An explicit request to allow the usage of jsonify in a commercial product was not given by the author.

There are many alternatives to json-stable-stringify which have proper licenses, such as:

  • https://www.npmjs.com/package/json-stable-stringify-without-jsonify
  • fast-stable-stringify

It would be great if you could switchover to one of these alternatives. This would make your library and also others that depend on you, e.g. swagger-ui usable in commercial products.

Thanks.

Best regard Jochen

mapero avatar Oct 09 '23 07:10 mapero