Skip to main content
← Back to list
01Issue
FeatureShippedExtensionsPublic
Assigneesskunk-ape

Relationships

#3325 swamp-extensions: declare license: in every @swamp manifest and in codegen output

Opened by skunk-ape · 10/12/2026· Shipped 10/13/2026

Part 3 of 6 of the extension license requirement (#3323–#3328). Plan: Extension license proposal (https://claude.ai/code/artifact/8c256b86-ce33-4898-8b70-223ec3b827f2). Depends on #3324 being merged.

Change (swamp-extensions)

  • Add license: to every @swamp manifest (706 published), taken from its LICENSE file. 696 share one text: AGPL-3.0-only WITH AdditionRef-Swamp-Extension-Exception. deno-runner/LICENSE.txt is AGPL-3.0-or-later. Check each outlier by hand.
  • Codegen generators emit the field.
  • A CI check fails a manifest without the field.
  • Merges only with Seth's approval: CI publishes on any manifest change, so this republishes every first-party extension.

Optional, separate

The registry's tarball analyzer could suggest an inferred SPDX id to third-party authors, for them to confirm, never applied silently. In a 182-extension sample, 156 of 182 were MIT or Apache-2.0 full texts, which can be matched exactly.

02Bog Flow
✓OPEN✓TRIAGED✓IN PROGRESS✓SHIPPED+ 1 MOREASSIGNED+ 6 MOREREVIEW+ 13 MOREPR_MERGED+ 2 MORESESSION_SUMMARIZED

Shipped

10/13/2026, 7:28:32 PM

Click a lifecycle step above to view its details.

03Sludge Pulse
skunk-ape assigned skunk-ape10/13/2026, 1:03:56 PM
Editable. Press Enter to edit.

skunk-ape commented 10/13/2026, 1:20:00 PM

Decision (Seth, 2026-10-13): the AdditionRef-Swamp-Extension-Exception addition is not needed. The Swamp Extension and Definition Exception is a permission from Swamp's copyright holders that lets anyone write their own extensions and license them as they choose. It is not a license an extension declares: third-party extensions declare their own license (MIT, Apache-2.0, ...), and first-party @swamp extensions declare plain AGPL-3.0-only (#3325).

For #3325: every @swamp manifest declares license: AGPL-3.0-only. LICENSE.txt (currently the or-later notice) and the source headers (currently v3 with the exception) are corrected to AGPL-3.0-only with no exception, and every extension gets a version bump. The CI check that fails a manifest without license: moves to a separate trust-root change.

skunk-ape commented 10/13/2026, 1:34:58 PM

Correction (Seth, 2026-10-13): first-party @swamp extensions declare license: AGPL-3.0-or-later, not AGPL-3.0-only. That matches the LICENSE.txt every package already ships, so the license files stay as they are. The source headers (which say AGPL version 3 with the Swamp Extension and Definition Exception) are corrected to version 3 or any later version, with no exception. The AdditionRef decision above is unchanged.

skunk-ape commented 10/13/2026, 8:44:45 PM

Parked 2026-10-13 (Seth): the license is now optional, so declaring license: in the first-party manifests is not urgent. The work so far is kept on its branch. Before resuming, decide how to declare the AGPL-3.0-only + Swamp Extension and Definition Exception license, since only plain SPDX ids now count.

skunk-ape commented 10/13/2026, 10:11:48 PM

Correction to the 'Parked' note above (coordinator error): #3325 had already merged before that note was posted, as https://git.swamp-club.com/swamp-club/swamp-extensions/pulls/489 (f416b5890). First-party manifests declare license: AGPL-3.0-or-later (Seth's correction of 2026-10-13), and 696 of 697 extensions are published; aws/ec2 is tracked in #3390. Nothing is parked.

Sign in to post a ripple.