Declare proprietary licensing and enforce permissive-only dependencies

Continuum is intended to be sold, so every dependency has to permit
distribution in closed-source commercial software. Our own crate and npm
packages carried no licence field, which made `cargo deny` report the
Tauri crate as `unlicensed`.

The Nuxt/Tauri dependency graph audited clean (MIT/Apache/ISC/BSD, plus
BlueOak-1.0.0 - which is why this allow list carries BlueOak where
continuum-cad's did not). Two entries worth knowing, both recorded in
continuum-common's docs/LICENSES.md: `node-forge` is
`(BSD-3-Clause OR GPL-2.0)` and we elect BSD-3-Clause, and
`caniuse-lite` is CC-BY-4.0 build-time data that is not bundled into the
built SPA, so no attribution obligation today.

This commit is contained in:

octoturge

2026-10-03 10:10:15 +00:00

parent 72c3f76da4

commit 6d6ed62836

6 changed files with 44 additions and 0 deletions

									
										package.json
									
		+1
		
												View File
												
				@@ -1,5 +1,6 @@

				{

				  "name": "continuum-app",

				  "license": "UNLICENSED",

				  "private": true,

				  "version": "0.1.0",

				  "description": "Continuum print farm operator console - Nuxt SPA + Tauri 2 desktop shell",