Redis changed licensing from BSD to RSALv2/SSPLv1. The Linux Foundation immediately backed a community fork called Valkey. Redis CEO later admitted the move backfired: "No matter how much I said that the SSPL is essentially the same as open source, it was like pushing string uphill." Redis ultimately reversed course with Redis 8, but cloud providers continued using Valkey.
Sources: Redis CEO interview
PACKAGE_LICENSE_MISMATCH detects license change between versions.
| Tool | Verdict | Details |
|---|---|---|
| OSS Risk Guard | Caught | PACKAGE_LICENSE_MISMATCH detects license change between versions. |
| Socket | Missed | No license change monitoring |
| Snyk | Missed | Scans current license only; no change detection |
| Sonatype (Nexus) | Missed | Scans current license only; no change detection |
| Black Duck | Missed | Scans current license only; no change detection |
| Endor Labs | Missed | Scans current license only; no change detection |