docs: add upstream attribution and NOTICE #3

Merged
thklein merged 2 commits from docs/attribution into main 2026-10-18 10:48:48 +00:00
Owner

Summary

Attribution and licensing cleanup, following basepeak-ai/gptscript#22. Everything stays under Apache-2.0. BasePeak GmbH holds the copyright on the fork's modifications.

  • LICENSE: no changes.

  • NOTICE (new): says this is a fork of https://github.com/gptscript-ai/node-gptscript (archived upstream), originally developed by Acorn Labs, Inc. (now Obot Inc.) and the gptscript-ai contributors. Copyright lines:

    • Copyright 2024-2025 Obot Inc. (formerly Acorn Labs, Inc.). The years come from the pre-fork history (2024-02 to 2025-12).
    • Modifications Copyright 2026 BasePeak GmbH

    Both are Apache-2.0. NOTICE also names the maintained location and carries the Apache-2.0 §4(b) modification statement (files modified since the fork on 2026-06-13; git history records the changes). Upstream had no NOTICE file, and no vendored or copied third-party code was found.

  • README:

    • Adds a "Fork notice / Attribution" block at the top.
    • The License section lists Obot Inc. (formerly Acorn Labs, Inc.; original work) and BasePeak GmbH (modifications), replacing Copyright (c) 2024, Acorn Labs, Inc. with its dead acorn.io link.
    • Installation: npm install @gptscript-ai/gptscript installed the archived upstream package from npmjs.com (0.9.9, repository github.com/gptscript-ai), not this fork. The fork is not published to any registry (no npm release, no Forgejo package), so the README now documents npm install git+https://git.basepeak.dev/basepeak-ai/node-gptscript.git. It explains that the package name and imports are unchanged, that the postinstall fetches the binary from the gptscript fork's releases (GPTSCRIPT_RELEASE_TOKEN if auth is needed), and how to opt out.
    • The smoke test used https://get.gptscript.ai/echo.gpt, but that domain no longer resolves. It is now npx gptscript --version.
  • package.json: repository.url now points to git.basepeak.dev/basepeak-ai/node-gptscript. Name, version and author are unchanged.

Verification

In an empty project, npm install git+https://git.basepeak.dev/basepeak-ai/node-gptscript.git (token from env) builds dist/, downloads bin/gptscript, and npx gptscript --version prints v0.9.10+77d3fcb0.

## Summary Attribution and licensing cleanup, following basepeak-ai/gptscript#22. Everything stays under Apache-2.0. BasePeak GmbH holds the copyright on the fork's modifications. - **LICENSE**: no changes. - **NOTICE** (new): says this is a fork of https://github.com/gptscript-ai/node-gptscript (archived upstream), originally developed by Acorn Labs, Inc. (now Obot Inc.) and the gptscript-ai contributors. Copyright lines: - `Copyright 2024-2025 Obot Inc. (formerly Acorn Labs, Inc.)`. The years come from the pre-fork history (2024-02 to 2025-12). - `Modifications Copyright 2026 BasePeak GmbH` Both are Apache-2.0. NOTICE also names the maintained location and carries the Apache-2.0 §4(b) modification statement (files modified since the fork on 2026-06-13; git history records the changes). Upstream had no NOTICE file, and no vendored or copied third-party code was found. - **README**: - Adds a "Fork notice / Attribution" block at the top. - The License section lists Obot Inc. (formerly Acorn Labs, Inc.; original work) and BasePeak GmbH (modifications), replacing `Copyright (c) 2024, Acorn Labs, Inc.` with its dead acorn.io link. - **Installation**: `npm install @gptscript-ai/gptscript` installed the *archived upstream* package from npmjs.com (0.9.9, repository github.com/gptscript-ai), not this fork. The fork is not published to any registry (no npm release, no Forgejo package), so the README now documents `npm install git+https://git.basepeak.dev/basepeak-ai/node-gptscript.git`. It explains that the package name and imports are unchanged, that the postinstall fetches the binary from the gptscript fork's releases (`GPTSCRIPT_RELEASE_TOKEN` if auth is needed), and how to opt out. - The smoke test used `https://get.gptscript.ai/echo.gpt`, but that domain no longer resolves. It is now `npx gptscript --version`. - **package.json**: `repository.url` now points to git.basepeak.dev/basepeak-ai/node-gptscript. Name, version and author are unchanged. ## Verification In an empty project, `npm install git+https://git.basepeak.dev/basepeak-ai/node-gptscript.git` (token from env) builds `dist/`, downloads `bin/gptscript`, and `npx gptscript --version` prints `v0.9.10+77d3fcb0`.
docs: add upstream attribution and NOTICE
All checks were successful
test / test (pull_request) Successful in 17s
3c08b121d0
docs: avoid npx registry fallback, add homepage
All checks were successful
test / test (pull_request) Successful in 16s
28f71a3925
thklein force-pushed docs/attribution from 28f71a3925
All checks were successful
test / test (pull_request) Successful in 16s
to 35e0f404f0
All checks were successful
test / test (pull_request) Successful in 16s
2026-10-18 10:48:16 +00:00
Compare
thklein deleted branch docs/attribution 2026-10-18 10:48:48 +00:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
basepeak-ai/node-gptscript!3
No description provided.