8000
Skip to content

Dependency License Issue: rogue_score (GPL-3.0) is not compatible with Apache 2.0 #748

Description

@harsh2b

Describe the bug
The project lists rogue_score as a dependency, which is licensed under the GNU General Public License v3.0 (GPL-3.0). This license is incompatible with the project's Apache 2.0 license, creating a license compliance issue.

To Reproduce
Steps to reproduce the behavior:

  1. Navigate to the pyproject.toml file at the root of the project.
  2. Observe the rogue_score dependency listed under [project.dependencies].
  3. Verify the GPL-3.0 license of the rogue package on its official PyPI page: https://pypi.org/project/rogue/

Expected behavior
The project's dependencies should be compatible with its Apache 2.0 license to ensure legal compliance and prevent license violations.

Screenshots
N/A

Additional context
Severity: High. This is a legal issue that could affect the project's licensing and downstream users.

A suitable replacement is the rouge-score package, which is licensed under the Apache 2.0 license and is a drop-in replacement for rogue_score in pyproject.toml.

Thanks for submitting your bug – we love squashing them!

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

    0