We ship 400 KB of MIT-licensed JavaScript to every visitor and not one copyright notice with it
PubTrivia is a Next.js app with 50 direct dependencies: 33 runtime and 17 development. That is a deliberately boring list. pnpm licenses list disagrees about the size of the problem: $ pnpm licenses list --json | jq 'to_entries | map({licence: .key, n: (.value | length)}) | sort_by(-.n)' licence packages MIT 511 Apache-2.0 36 ISC 22 BSD-2-Clause 11 BSD-3-Clause 8 BlueOak-1.0.0 5 MPL-2.0 3…
PubTrivia, a Next.js application, transmits 400 KB of MIT-licensed JavaScript to each visitor without including any copyright notice. The application has 50 direct dependencies, with 23 of those dependencies installed at different versions. The deployment process consists of 23 packages and three licenses, with four direct dependencies.
The largest dependency, postgres@3.4.9, is a public domain dedication with no conditions attached. Despite having a large number of dependencies and licenses, only five rows in the audit indicate the presence of transitive dependencies, and these require no decisions from the developers. The visitor's browser receives 79 public pages with 32 JavaScript chunks, but there are no license headers or attribution to be found.
The only attribution that appears is a copyright string in a font table, which is not displayed by browsers.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
