Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Inkeep, Inc. Customer License (IICL) v1.1 #156

Merged
merged 6 commits into from Aug 29, 2023
Merged

Conversation

benarent
Copy link
Contributor

Inkeep doesn't use a SPDX license. This PR is created to pass license check on https://github.com/gravitational/askpam/pull/1

This is their licence.

Inkeep, Inc. Customer License (IICL) v1.1
This license agreement ("Agreement") is a legal agreement between you (either an individual or a
single entity) and Inkeep, Inc. ("Inkeep") for the npm React component package `widgets` (the
"Software"). By installing, copying, or otherwise using the Software, you agree to be bound by the
terms of this Agreement.
1. Grant of License
Subject to the terms of this Agreement, Inkeep grants you a non-exclusive, non-transferable, limited license to install, copy, and use the Software solely for the purpose of serving Inkeep's search and chat services to your own end-users or employees. This license is applicable only as an Inkeep customer, and must be in accordance with Inkeep's search and chat service (the "Service"). You are not permitted to use the Software to act as a reseller, distributor, or vendor to provide Inkeep's search and chat services to third-party customers or use the Software with other search and chat services. The Software may only be used to serve your own end-users or employees.
2. Modification and Extension
As an Inkeep customer, you are granted the right to modify and extend the Software for your internal business purposes, provided that such modifications and extensions are used solely in conjunction with the Service.
3. Restrictions
a) You may not reverse engineer, decompile, or disassemble the Software.  
b) You may not distribute or make the Software available to any third parties.  
c) You may not sublicense, rent, lease, or lend the Software.  
d) You may not use the Software or any modifications or extensions thereof with any search and chat services other than the Service.  
e) You may not use the Software if you are not an Inkeep customer.
4. Termination
This Agreement will terminate automatically if you fail to comply with any of the terms and conditions of this Agreement or if you cease to be an Inkeep customer. Upon termination, you must destroy all copies of the Software, including any modifications or extensions.
5. Copyright The Software is protected by copyright laws and international copyright treaties, as
   well as other intellectual property laws and treaties. All title, copyright, and other
   intellectual property rights in and to the Software are owned by Inkeep or its licensors.
6. No Warranties Inkeep expressly disclaims any warranty for the Software. The Software is provided
   "as is" without any express or implied warranty of any kind, including but not limited to any
   warranties of merchantability, non-infringement, or fitness for a particular purpose.
7. Limitation of Liability In no event shall Inkeep or its licensors be liable for any damages
   whatsoever (including, without limitation, damages for loss of business profits, business
   interruption, loss of business information, or any other pecuniary loss) arising out of the use
   of or inability to use the Software, even if Inkeep has been advised of the possibility of such
   damages.
8. Governing Law This Agreement shall be governed by and construed in accordance with the laws of
   the jurisdiction in which Inkeep is incorporated, excluding its conflict of laws provisions.
9. Entire Agreement This Agreement constitutes the entire agreement between you and Inkeep with
   respect to the Software and supersedes all prior or contemporaneous understandings regarding the
   same, whether written or oral.
10. Additional Provisions With regard to the Software, you may only use the Software in production
    if you (and any entity that you represent) are in compliance with Inkeep's terms of service,
    available at https://inkeep.com/terms-of-service/ (the "Enterprise Terms"). You are free to
    modify the Software and publish patches to the Software, provided that such modifications and
    patches are used solely in conjunction with the Service. You agree that Inkeep and/or its
    licensors (as applicable) retain all right, title, and interest in and to all such modifications
    and/or patches. You may copy and modify the Software for development and testing purposes,
    without requiring a subscription. You agree that Inkeep and/or its licensors (as applicable)
    retain all right, title, and interest in and to all such modifications. You are not granted any
    other rights beyond what is expressly stated herein. Subject to the foregoing, it is forbidden
    to copy, merge, publish, distribute, sublicense, and/or sell the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT
NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES
OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
For all third-party components incorporated into the Software, those components are licensed under
the original license provided by the owner of the applicable component.

@benarent benarent requested review from a team August 29, 2023 18:00
@@ -36,5 +36,5 @@ jobs:
uses: actions/dependency-review-action@v3
with:
fail-on-severity: moderate
allow-licenses: 0BSD, Apache-2.0, BlueOak-1.0.0, BSD-2-Clause, BSD-2-Clause-FreeBSD, BSD-3-Clause, CC-BY-3.0, CC-BY-4.0, CC0-1.0, ISC, LGPL-2.1, MIT, MIT-0, MPL-2.0, ODC-By-1.0, OFL-1.1, Python-2.0, Unicode-DFS-2016, Unlicense, Zlib, (MIT OR Apache-2.0) AND Unicode-DFS-2016, Apache-2.0 AND BSD-3-Clause, ISC AND MIT, MIT AND Zlib, MIT AND BSD-3-Clause
allow-licenses: 0BSD, Apache-2.0, BlueOak-1.0.0, BSD-2-Clause, BSD-2-Clause-FreeBSD, BSD-3-Clause, CC-BY-3.0, CC-BY-4.0, CC0-1.0, ISC, LGPL-2.1, MIT, MIT-0, MPL-2.0, ODC-By-1.0, OFL-1.1, Python-2.0, Unicode-DFS-2016, Unlicense, Zlib, (MIT OR Apache-2.0) AND Unicode-DFS-2016, Apache-2.0 AND BSD-3-Clause, ISC AND MIT, MIT AND Zlib, MIT AND BSD-3-Clause AND IICL-1.1
Copy link
Contributor

@adaadb6 adaadb6 Aug 29, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
allow-licenses: 0BSD, Apache-2.0, BlueOak-1.0.0, BSD-2-Clause, BSD-2-Clause-FreeBSD, BSD-3-Clause, CC-BY-3.0, CC-BY-4.0, CC0-1.0, ISC, LGPL-2.1, MIT, MIT-0, MPL-2.0, ODC-By-1.0, OFL-1.1, Python-2.0, Unicode-DFS-2016, Unlicense, Zlib, (MIT OR Apache-2.0) AND Unicode-DFS-2016, Apache-2.0 AND BSD-3-Clause, ISC AND MIT, MIT AND Zlib, MIT AND BSD-3-Clause AND IICL-1.1
allow-licenses: 0BSD, Apache-2.0, BlueOak-1.0.0, BSD-2-Clause, BSD-2-Clause-FreeBSD, BSD-3-Clause, CC-BY-3.0, CC-BY-4.0, CC0-1.0, ISC, LGPL-2.1, MIT, MIT-0, MPL-2.0, ODC-By-1.0, OFL-1.1, Python-2.0, Unicode-DFS-2016, Unlicense, Zlib, (MIT OR Apache-2.0) AND Unicode-DFS-2016, Apache-2.0 AND BSD-3-Clause, ISC AND MIT, MIT AND Zlib, MIT AND BSD-3-Clause, IICL-1.1

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I added this in another commit, I'm still getting

Run actions/dependency-review-action@v3
  with:
    fail-on-severity: moderate
    allow-licenses: 0BSD, Apache-[2](https://github.com/gravitational/shared-workflows/actions/runs/6015942188/job/16318870939#step:3:2).0, BlueOak-1.0.0, BSD-2-Clause, BSD-2-Clause-FreeBSD, BSD-[3](https://github.com/gravitational/shared-workflows/actions/runs/6015942188/job/16318870939#step:3:3)-Clause, CC-BY-3.0, CC-BY-[4](https://github.com/gravitational/shared-workflows/actions/runs/6015942188/job/16318870939#step:3:4).0, CC0-1.0, ISC, LGPL-2.1, MIT, MIT-0, MPL-2.0, ODC-By-1.0, OFL-1.1, Python-2.0, Unicode-DFS-2016, Unlicense, Zlib, (MIT OR Apache-2.0) AND Unicode-DFS-2016, Apache-2.0 AND BSD-3-Clause, ISC AND MIT, MIT AND Zlib, MIT AND BSD-3-Clause, IICL
    repo-token: ***
Error: Invalid license(s) in allow-licenses: IICL

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I believe its checking against this list: https://spdx.org/licenses/

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

How do we whitelist / skip the check for a non SPDX license?

Copy link
Contributor

@wadells wadells Aug 29, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tracing some work from @jentfoo:

actions/dependency-review-action#385

Leads me to:

actions/dependency-review-action#423

allow-dependencies-licenses should get us there.

I'd recommend we skip trying to add the proprietary license, and instead say this dependency doesn't need a licence check. Try adding the following config:

allow-dependencies-licenses:
  - 'pkg:npm/%40inkeep/widgets'

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks Walt, I think I fixed it.

@reedloden reedloden merged commit ce2c819 into main Aug 29, 2023
3 checks passed
@reedloden reedloden deleted the benarent/add-license branch August 29, 2023 23:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants