Skip to content

Commit 1b5289d

Browse files
authored
fix(license): drop unused OFL-1.1 font from the published package (#1357)
The vendored copy of `blessed` pulls in the Terminus bitmap font (external/blessed/usr/fonts/ter-u14*.json), which is licensed OFL-1.1 and is only read by blessed's BigText widget — a widget the CLI never instantiates. Shipping it forced the package's declared license to be `MIT AND OFL-1.1`. Scope the blessed vendoring keep-list to `usr/*` so the terminfo files are retained while usr/fonts/** is dropped, and declare the license as plain `MIT`. Bump to 1.1.117.
1 parent 8a98d13 commit 1b5289d

3 files changed

Lines changed: 14 additions & 3 deletions

File tree

.config/rollup.dist.config.mjs

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -121,7 +121,13 @@ async function copyExternalPackages() {
121121
// Cleanup package files.
122122
await Promise.all(
123123
[
124-
[blessedPath, ['lib/**/*.js', 'usr/**/**', 'vendor/**/*.js']],
124+
// Keep blessed's terminfo (the flat files in usr/, e.g. usr/xterm) but
125+
// NOT usr/fonts/** — the OFL-1.1 Terminus bitmap font is only used by the
126+
// unused BigText widget, and shipping it forces an OFL-1.1 license. The
127+
// 'usr/*' glob matches one level deep, so usr/fonts/<file> is dropped.
128+
// Re-verify usr/ contents on a blessed upgrade (a nested terminfo dir
129+
// would be dropped too).
130+
[blessedPath, ['lib/**/*.js', 'usr/*', 'vendor/**/*.js']],
125131
[blessedContribPath, ['lib/**/*.js', 'index.js']],
126132
[
127133
socketRegistryPath,

CHANGELOG.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,11 @@ All notable changes to this project will be documented in this file.
44

55
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
66

7+
## [1.1.117](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.117) - 2026-06-08
8+
9+
### Changed
10+
- The published package no longer bundles the unused Terminus bitmap font (pulled in transitively by the vendored `blessed` dependency), so its declared license is now `MIT` instead of `MIT AND OFL-1.1`.
11+
712
## [1.1.116](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.116) - 2026-06-06
813

914
### Changed

package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,9 @@
11
{
22
"name": "socket",
3-
"version": "1.1.116",
3+
"version": "1.1.117",
44
"description": "CLI for Socket.dev",
55
"homepage": "https://github.com/SocketDev/socket-cli",
6-
"license": "MIT AND OFL-1.1",
6+
"license": "MIT",
77
"repository": {
88
"type": "git",
99
"url": "git+https://github.com/SocketDev/socket-cli.git"

0 commit comments

Comments
 (0)