René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"[License Exception Request] [Cozystack] [MPL-2.0, OFL-1.1, CC0-1.0] noVNC, Geist font and Simple Icons bundled into the Cozystack dashboard console","articleBody":"### For which CNCF project are you requesting exceptions?\n\nCozystack\n\n### Are you an official maintainer of this project?\n\nYes\n\n### List of components requiring an exception\n\n| Component | Upstream URL | Project Usage URL | License(s) | Purpose |\n|---|---|---|---|---|\n| @novnc/novnc 1.6.0 | https://github.com/novnc/noVNC | https://github.com/cozystack/cozystack/blob/main/packages/system/dashboard/images/console/apps/console/package.json | MPL-2.0 | In-browser VNC client for the virtual machine console |\n| @fontsource-variable/geist 5.2.8 (Geist font) | https://github.com/vercel/geist-font | https://github.com/cozystack/cozystack/blob/main/packages/system/dashboard/images/console/packages/ui/package.json | OFL-1.1 | The dashboard's UI typeface |\n| simple-icons 16.22.0 | https://github.com/simple-icons/simple-icons | https://github.com/cozystack/cozystack/blob/main/packages/system/dashboard/images/console/apps/console/package.json | CC0-1.0 | SVG logos of the technologies behind the managed applications (PostgreSQL, Redis, Kubernetes and others), shown in the dashboard sidebar |\n\n### Distribution and integration model\n\n- [x] **CNCF-Distributed**: The CNCF project will distribute the dependency or the resulting combined artifacts to users.\n- [ ] **User-Fetched Dependency**\n- [ ] **System Component**\n- [ ] **Not Distributed + Not Needed by End User (Internal Project Tooling)**\n\n### Please explain\n\nThe console is Cozystack's web dashboard and is part of the distribution. The three packages are bundled into the console's static web assets at build time and shipped in the dashboard container image that Cozystack installs.\n\n### Modification status\n\n- [ ] **Modified Upstream**\n- [ ] **Modified Downstream**\n- [x] **Unmodified**: The CNCF project will use the dependency exactly as provided by the upstream maintainers without any changes to its source code.\n\n### Please explain\n\nAll three are consumed as published npm packages at pinned versions (`pnpm-lock.yaml`), without patches.\n\n### Structural separation\n\n- [x] **Separated Component**: The dependency's code will either be (a) kept in a distinct directory or module clearly separated from CNCF project code, or (b) retrieved at build/installation time from a third-party repository and never stored in the CNCF project repository.\n- [ ] **Intermingled Code**\n\n### Please explain\n\nThe packages are not stored in the repository; they are installed from the npm registry at build time and referenced only via `package.json` and `pnpm-lock.yaml`.\n\n### Communication mechanism\n\n- [x] **Static Linking**: The dependency and the CNCF project code will be combined into a single binary or similar type of artifact during the build process.\n- [ ] **Dynamic Linking**\n- [ ] **Separate Process**\n- [ ] **Network Interaction**\n\n### Please explain\n\nThe bundler combines the packages with the console's own code into the static JavaScript, CSS and font assets served to the browser. noVNC connects to the virtual machine's VNC endpoint over a WebSocket.\n\n### Data exchange\n\n- [x] **Tightly Coupled**\n- [ ] **Arms-Length Only**\n\n### Please explain\n\nThe console calls noVNC's JavaScript API in the same browser context. The font and the icons are static assets used as-is.\n\n### Additional information\n\nMPL-2.0 is file-level copyleft and does not extend to the console's own Apache-2.0 code. OFL-1.1 and CC0-1.0 are not on the allowlist, but OFL fonts and CC0 assets are already covered for other packages (font-awesome, highlight.js). Identified by the project's FOSSA scan during Incubation due diligence (cncf/toc#1916).\n","author":{"url":"https://github.com/tym83","@type":"Person","name":"tym83"},"datePublished":"2026-10-16T01:58:41Z","url":"https://github.com/cncf/foundation/issues/1572"}