Skip to content

Missing license in gemspec (and RubyGems) #221

@whitemerry

Description

@whitemerry

The published openai gem is missing the license field in its gemspec file, which prevents the license information from being displayed on the gem's RubyGems page and causes failures in automated compliance audits.

Current Behavior

  • The gem's RubyGems page at https://rubygems.org/gems/openai shows no license information
  • The repository clearly states the code is under Apache-2.0 license
  • The LICENSE file exists in the repository

https://rubygems.org/gems/openai
Image

license_finder result:

Dependencies that need approval:
openai, 0.31.0, unknown
Error: Process completed with exit code 1.

Expected Behavior

The gemspec should include the license field so that:

  1. The license is properly displayed on RubyGems.org
  2. Automated tools can properly detect the gem's license
  3. Users can verify licensing compliance programmatically

Suggested Fix

Add the following line to openai.gemspec:

spec.license = "Apache-2.0"

Why This Matters

  • Compliance: Many organizations require license information to be explicitly declared for dependency scanning (license_finder gem)
  • Transparency: Users should be able to see the license information directly on RubyGems.org
  • Best Practices: Including the license in the gemspec is a Ruby community best practice
  • Tooling: Dependency management tools (like Bundler's bundle licenses command) rely on this field

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions