When Elastic changed licensing from Apache 2.0 to SSPL/Elastic License, Logz.io was forced to migrate its entire backend to OpenSearch. Bonsai, the world's first Elasticsearch host, discovered the new SSPL would require releasing their entire management stack as open source.
Sources: Logz.io CEO post · Bonsai open letter
PACKAGE_LICENSE_MISMATCH detects license change between versions.
| Tool | Verdict | Details |
|---|---|---|
| OSS Risk Guard | Caught | PACKAGE_LICENSE_MISMATCH detects license change between versions. |
| Socket | Missed | No license change monitoring |
| Snyk | Missed | Scans current license only; no change detection |
| Sonatype (Nexus) | Missed | Scans current license only; no change detection |
| Black Duck | Missed | Scans current license only; no change detection |
| Endor Labs | Missed | Scans current license only; no change detection |