Skip to content

Adopt AGPL-3.0 + commercial dual licensing - #3

Merged
OmarRao merged 2 commits into
mainfrom
licensing/dual-license-agpl-commercial
Aug 4, 2026
Merged

Adopt AGPL-3.0 + commercial dual licensing#3
OmarRao merged 2 commits into
mainfrom
licensing/dual-license-agpl-commercial

Conversation

@OmarRao

@OmarRao OmarRao commented Jul 31, 2026

Copy link
Copy Markdown
Owner

Replaces the proprietary license with a dual-license model: AGPL-3.0 for public use (LICENSE) and a separate commercial license (COMMERCIAL-LICENSE.md) for closed-source / SaaS / reseller / distributor / white-label use.

What changed

  • LICENSE — verbatim official GNU AGPL-3.0 (GitHub-recognisable).
  • New: COMMERCIAL-LICENSE.md, TRADEMARKS.md, DEPENDENCY-LICENSE-REVIEW.md.
  • README: Licensing section, badge → AGPL-3.0 / Commercial, prior-releases note.
  • SPDX headers (AGPL-3.0-only OR LicenseRef-Commercial) on 57 first-party source files (*.py, app *.js, Dockerfile). No headers on HTML (quirks-mode risk), JSON, Markdown, assets, or config.
  • Docker image license labels → AGPL-3.0-only (one was a stray MIT).
  • Community files (CONTRIBUTING / PR / issue templates) updated for dual-license + contributor terms.
  • Version bump v1.10.0 → v2.0.0 (README / USERGUIDE / telemetry / Helm).

Notes

  • No application logic changed; 16/16 tests pass.
  • Sole human author is Omar Rao (other commits are snyk-bot) → no third-party consent required.
  • The repo was proprietary before (not MIT). Past releases remain under their original terms; AGPL applies to this and future versions.
  • DEPENDENCY-LICENSE-REVIEW.md flags PyGithub (LGPL-3.0) and semgrep (LGPL-2.1) for legal review — technical inventory, not legal advice.

OmarRao added 2 commits July 31, 2026 15:59
Replace the proprietary license with a dual-license model:
- LICENSE: verbatim official GNU AGPL-3.0 (GitHub-recognisable).
- COMMERCIAL-LICENSE.md: informational commercial-license notice (closed-source,
  SaaS, reseller, distributor, white-label, etc.; grant only via signed agreement;
  contact omarsrao@gmail.com).
- TRADEMARKS.md: name/logo/branding not granted by the software license.
- DEPENDENCY-LICENSE-REVIEW.md: technical dependency-license inventory (not legal
  advice); flags PyGithub (LGPL-3.0) and semgrep (LGPL-2.1).

Also:
- README: new Licensing section, badge -> AGPL-3.0 / Commercial, prior-releases note.
- SPDX headers (AGPL-3.0-only OR LicenseRef-Commercial) on 57 first-party source
  files (*.py, app *.js, Dockerfile). No headers on HTML (quirks-mode risk), JSON,
  Markdown, assets, or config.
- Docker image license labels -> AGPL-3.0-only.
- Version bump v1.10.0 -> v2.0.0 (README/USERGUIDE/telemetry/helm).

No application logic changed; 16/16 tests pass. Sole human author is Omar Rao
(other commits are snyk-bot), so no third-party consent required. Past releases
remain under their original terms.
@OmarRao

OmarRao commented Jul 31, 2026

Copy link
Copy Markdown
Owner Author

🟢 SecureScope Security Scan — PR #3

Metric Value
Risk Score 0/100
Critical Findings 0
Warnings 0
Commit f2b3fde

View full scan on SecureScope

@OmarRao
OmarRao merged commit 4b7f2d5 into main Aug 4, 2026
10 checks passed
@OmarRao
OmarRao deleted the licensing/dual-license-agpl-commercial branch August 11, 2026 18:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant