docs(exceptions): record exact printing uri-js tool license #54

Merged

james.maes merged 1 commits from docs/qqq-print-uri-license-20261101 into main 2026-11-01 23:05:45 +00:00

Conversation 0 Commits 1 Files Changed 1

+17

james.maes commented 2026-11-01 22:59:14 +00:00

Owner

Copy link

Copy source

Records the user-approved exception for the exact unmodified, development-only uri-js 4.4.1 package used transitively by ESLint in the printing protocol and Windows agent repositories.

GitHub dependency review classified its license as BSD-2-Clause AND BSD-2-Clause-Views. The record pins the version, lock integrity, installed license SHA-256, development-only scope, owner, review date and expiry. Consumer guards reject any other version, bytes, scope or npm exception. All other license and vulnerability checks remain required.

Validation: the register Markdown and whitespace checks pass. Both consumer script-quality gates pass, including strict Python analysis, 17 guard tests each, existing header/scan tests, and the actual installed license hash and dependency chain. Current Gitea checks must pass before merge; earlier GitHub checks are historical evidence only.

The change is limited to the exception register. Existing EX-0014 is unchanged. Printing's master owns the consumer branches and the user has explicitly approved this record and ordinary publication/merge after the required checks.

Records the user-approved exception for the exact unmodified, development-only `uri-js` 4.4.1 package used transitively by ESLint in the printing protocol and Windows agent repositories. GitHub dependency review classified its license as `BSD-2-Clause AND BSD-2-Clause-Views`. The record pins the version, lock integrity, installed license SHA-256, development-only scope, owner, review date and expiry. Consumer guards reject any other version, bytes, scope or npm exception. All other license and vulnerability checks remain required. Validation: the register Markdown and whitespace checks pass. Both consumer script-quality gates pass, including strict Python analysis, 17 guard tests each, existing header/scan tests, and the actual installed license hash and dependency chain. Current Gitea checks must pass before merge; earlier GitHub checks are historical evidence only. The change is limited to the exception register. Existing EX-0014 is unchanged. Printing's master owns the consumer branches and the user has explicitly approved this record and ordinary publication/merge after the required checks.

james.maes added 1 commit 2026-11-01 22:59:15 +00:00

docs(exceptions): record exact printing uri-js tool license ... a18179e90f

Approve only the unchanged development-only uri-js 4.4.1 package used transitively by ESLint, with version, integrity and license-byte guards. Other license and vulnerability gates remain required.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Signed-off-by: James Maes <james@kof22.com>

james.maes merged commit a18179e90f into main 2026-11-01 23:05:45 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

accessibility

Barrier affecting people with disabilities

autorelease: failed

Reserved version tag; no published release

autorelease: pending

autorelease: tagged

breaking

Incompatible new mandatory standards; requires a MAJOR release

bug

Something isn't working

dependencies

Pull requests that update a dependency file

documentation

Improvements or additions to documentation

duplicate

This issue or pull request already exists

enhancement

New feature or request

github_actions

Pull requests that update GitHub Actions code

good first issue

Good for newcomers

help wanted

Extra attention is needed

invalid

This doesn't seem right

question

Further information is requested

release: failed

Reserved release tag failed before public publication; preserved for audit.

release: ready

Maintainer-approved release preflight

wontfix

This will not be worked on

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

forge-recovery (Forge Recovery) james.maes (James Maes)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: KofTwentyTwo/standards#54