LEXCEPTIO quietly flags its fork as AGPL
A one-line licensing change that downstream forks need to read before they pull anything from LEXCEPTIO.
The change itself is tiny: LEXCEPTIO's project manifests now declare the fork as AGPL-3.0-only. The legal weight is not tiny. AGPL is a "network copyleft" license - its defining clause says that if you run AGPL-covered code as a hosted service, you have to publish your source, even if you never distribute the software the old-fashioned way. For most software licenses, simply running the code on your own servers triggers no obligations. AGPL is the exception.
The practical takeaway is for anyone building on top of this fork. If your own product sits under a more permissive license and you pull work from LEXCEPTIO after this point, you may be importing publish-your-source obligations you didn't sign up for. It's worth a legal sign-off before merging, not after. One wrinkle: the change is labelled as a routine dependency update, which buries a licensing decision under a misleading title - exactly the kind of thing that makes a later audit harder.
Spotted something wrong? Or know the PR text has fresher detail than the writeup above?