NuGet packages - licenseUrl is deprecated

Posts   
 
    
mbp
User
Posts: 21
Joined: 03-Jun-2021
# Posted on: 22-Mar-2024 12:02:12   

Hi,

We use tooling to check the licenses of our dependencies. We noticed that SD.LLBLGen.Pro NuGet packages are using licenseUrl and pointing to https://www.llblgen.com/Pages/buy.aspx

However, licenseUrl is deprecated (see: https://learn.microsoft.com/en-us/nuget/reference/nuspec#license and https://github.com/NuGet/Announcements/issues/32)

Instead, a license file should be included with the package.

Otis avatar
Otis
LLBLGen Pro Team
Posts: 39617
Joined: 17-Aug-2003
# Posted on: 22-Mar-2024 18:09:31   

No, the license url in the nuget package is for a link to e.g. GPL, BSD2, MIT etc. We could have left it empty, but added a link to the website. It's not enforced. Our runtimes don't use license files, but are usable by people who have a valid license.

Frans Bouma | Lead developer LLBLGen Pro
mbp
User
Posts: 21
Joined: 03-Jun-2021
# Posted on: 02-Apr-2024 08:34:11   

As mentioned, licenseUrl is deprecated - so it is recommended to move away from that, see the following quote:

We will monitor the adoption of clients that can understand the “license” property and NuGet.org will disable the use of licenseUrl when that adoption has reached a threshold.

I believe the proper way would be to add a LICENSE file which includes information that the package is usable by people who have a valid license - and obviously this could include a link to the website.

Otis avatar
Otis
LLBLGen Pro Team
Posts: 39617
Joined: 17-Aug-2003
# Posted on: 02-Apr-2024 21:31:57   

We'll see what we can do, but this is low prio.

Frans Bouma | Lead developer LLBLGen Pro