psycopg2-binary is listed as a production dependency in the common group and is used for PostgreSQL database access (osprey_worker/src/osprey/worker/lib/storage/postgres.py). It is licensed under the GNU Library/Lesser GPL (LGPL).
LGPL is intentionally designed to allow use in proprietary software: it requires that the LGPL-licensed library itself remain open, but does not impose GPL terms on the code that uses it. This is standard for database drivers — psycopg2 is one of the most widely used PostgreSQL libraries in Python.
This is likely fine to approve, but flagging here for an explicit decision rather than leaving it implicit.
Options:
- Approve LGPL for
psycopg2-binary (the standard path for most projects using this library)
- Switch to
psycopg (LGPL as well, but the newer maintained version) or asyncpg (Apache-2.0) if a license change is needed
Tracked here to unblock the license-check CI workflow, which currently skips this package pending a decision.
psycopg2-binaryis listed as a production dependency in thecommongroup and is used for PostgreSQL database access (osprey_worker/src/osprey/worker/lib/storage/postgres.py). It is licensed under the GNU Library/Lesser GPL (LGPL).LGPL is intentionally designed to allow use in proprietary software: it requires that the LGPL-licensed library itself remain open, but does not impose GPL terms on the code that uses it. This is standard for database drivers — psycopg2 is one of the most widely used PostgreSQL libraries in Python.
This is likely fine to approve, but flagging here for an explicit decision rather than leaving it implicit.
Options:
psycopg2-binary(the standard path for most projects using this library)psycopg(LGPL as well, but the newer maintained version) orasyncpg(Apache-2.0) if a license change is neededTracked here to unblock the license-check CI workflow, which currently skips this package pending a decision.