Licensing

Software developed by Software Heritage is released under the following licenses:

default license

GNU General Public License, version 3 or above (GPL3+) is our default license

web applications

GNU Affero General Public License, version 3 or above (AGPL3+) for Web applications and other software whose main purpose is offer a service via remote network interaction

puppet

Apache License, version 2 (Apache2) for Puppet recipes

See the license of specific software modules for details.

Below we list our external software dependencies, their licenses, and give pointers to how and why they are compatible with the above license choices.

An external dependency whose license is incompatible with the above license choices cannot be used in Software Heritage, so please carefully review the relevant licenses before adopting a new external dependency.

Licenses of external dependencies

Our external software dependencies are:

• celery: BSD2/PSF
• cryptojs: BSD3
• dulwich: GPL2+ in progress of being relicensed to GPL2+/Apache2
• flask: BSD3
• flask-api: BSD2
• flask-testing: BSD3
• libgit2: GPL2 with linking exception
• msgpack: Apache2
• psycopg2: LGPL3
• pygit2: GPL2 with linking exception
• python (runtime): PSF
• python-arrow: Apache2 (doc themes GPL3+)
• python-click BSD3
• python-dateutil: BSD3
• python-requests: Apache2
• python-retrying: Apache2
• qless-py: MIT
• redis-py: MIT
• vcversioner: ISC

When adopting a new external dependency, please add it to the above list, in alphabetical order and with a pointer to evidence of its license.

License compatibility

(non-GPL variants only)

• Apache2: GPL3-compatible
• BSD2: GPL-compatible
• BSD3: GPL-compatible
• ISC: GPL-compatible
• PSF: GPL-compatible