SSPL-1.0 · Source available (not OSI-approved)
Not OSI-approved. Created by MongoDB to close the perceived AGPL loophole: offering the software as a service obliges you to release the entire service stack used to run it. In practice this makes commercial hosting untenable for most companies.
The same license produces different obligations depending on whether the software is distributed, hosted, or kept internal. This is the distinction most dependency scanners collapse.
| How you ship it | Result | Why |
|---|---|---|
| Hosted SaaS | Needs review | SSPL-1.0 is not an OSI-approved open source license. Licenses in this family commonly restrict offering the software as a commercial or competing service. The specific terms need individual review. |
| Distributed binary / app | Needs review | SSPL-1.0 is not an OSI-approved open source license. Licenses in this family commonly restrict offering the software as a commercial or competing service. The specific terms need individual review. |
| Delivered to customer | Needs review | SSPL-1.0 is not an OSI-approved open source license. Licenses in this family commonly restrict offering the software as a commercial or competing service. The specific terms need individual review. |
| Internal use only | Needs review | SSPL-1.0 is not an OSI-approved open source license. Licenses in this family commonly restrict offering the software as a commercial or competing service. The specific terms need individual review. |
| Published library | Needs review | SSPL-1.0 is not an OSI-approved open source license. Licenses in this family commonly restrict offering the software as a commercial or competing service. The specific terms need individual review. |
None
As a build-time dependency it is a different question.
SSPL-1.0 appears as a dev dependency, so it is not part of the artifact you ship. Distribution-triggered obligations do not arise. Tools that emit code into your output, such as code generators, are a separate case worth checking individually.
Want to know whether anything in your project is under SSPL-1.0?
Check your whole manifest →LicenseGuard reports information derived from published license texts and dependency manifests. It is not legal advice and using it does not create an attorney-client relationship. Results reflect license metadata as declared; they do not identify every obligation or violation. Consult qualified counsel for decisions that matter.