Skip to content

KServe transitive dependency license issue #183

Description

@Eta0

We currently use kserve (a.k.a. kfserving in older versions) as a dependency for the following online-inference examples:

KServe issue #2683 notes that their (previous) logging dependency table-logger is exclusively GPL-licensed in all of its PyPI releases.

  • table-logger switched to an MIT license in a commit in February, with the rest of its codebase in an identical state to its latest PyPI release (0.3.6). Nonetheless, the PyPI distribution that we use technically only embeds the GPLv2 license. They have not released anything on PyPI with the updated license.
  • kserve moved away from table-logger entirely in favour of tabulate (MIT-licensed) in kserve release 0.10.1.

Since this repository is not GPL-licensed, for compliance, we should either:

  • Pin the table-logger transitive dependency in our requirements.txt files alongside older kserve/kfserving dependencies to the latest Git version (git+https://github.com/AleksTk/table-logger@3cab68c59062ce4d9cb3b667f64e83a23789bf63), which embeds the MIT license, or
  • Update kserve dependencies to at least version 0.10.1

In each of the affected examples, and rebuild their associated Docker images.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workingdependenciesPull requests that update a dependency file

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions