--- title: Non-free dependency discovered in Forgejo and removed description: A non-free software dependency (GSAP, via an indirect dependency chain originating from Gitea) was discovered in Forgejo on July 18, 2024. The dependency was... canonical: https://daily.dev/posts/non-free-dependency-discovered-in-forgejo-and-removed-zdwmtpmex twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Non-free dependency discovered in Forgejo and removed | daily.dev og:description: A non-free software dependency (GSAP, via an indirect dependency chain originating from Gitea) was discovered in Forgejo on July 18, 2024. The dependency was... og:url: https://daily.dev/posts/non-free-dependency-discovered-in-forgejo-and-removed-zdwmtpmex og:image: https://api.daily.dev/og/posts/ZDWmtPMeX.png og:image:alt: Non-free dependency discovered in Forgejo and removed og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Non-free dependency discovered in Forgejo and removed **[Forgejo News](https://daily.dev/sources/forgejo)** · 3 min read · 0 upvotes · 0 comments ## Summary A non-free software dependency (GSAP, via an indirect dependency chain originating from Gitea) was discovered in Forgejo on July 18, 2024. The dependency was used only for rendering a contribution graph. It was quickly removed and replaced within two days, blocking the v8.0.0 release until resolved. The fix was also backported to v7.0.6. Existing Forgejo binaries and container images containing the non-free code will be deleted from Codeberg. Two additional dependencies with incompatible copyleft licenses were also found and removed: one for APA citation formatting and elkjs (bundled via Mermaid). A new CI-integrated license-checking tool was introduced to prevent future violations. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Forgejo v16.0 is available](https://daily.dev/posts/forgejo-v16-0-is-available-vslb3fjkg) · Lobsters · 1 upvotes · 0 comments - [Forgejo 16.0.4 and 15.0.8 address critical security vulnerability](https://daily.dev/posts/forgejo-16-0-4-and-15-0-8-address-critical-security-vulnerability-vhpuap5nt) · LWN.net · 8 upvotes · 1 comments --- Tags: [#open-source](https://daily.dev/tags/open-source), [#forgejo](https://daily.dev/tags/forgejo) [View this post on daily.dev](https://daily.dev/posts/non-free-dependency-discovered-in-forgejo-and-removed-zdwmtpmex) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Non-free dependency discovered in Forgejo and removed","url":"https://daily.dev/posts/non-free-dependency-discovered-in-forgejo-and-removed-zdwmtpmex","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/non-free-dependency-discovered-in-forgejo-and-removed-zdwmtpmex"},"datePublished":"2026-07-26T07:48:50.490Z","dateModified":"2026-08-24T06:53:53.026Z","description":"A non-free software dependency (GSAP, via an indirect dependency chain originating from Gitea) was discovered in Forgejo on July 18, 2024. The dependency was...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/ecd9058ec824271361a436684af5bb15?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/ecd9058ec824271361a436684af5bb15?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Forgejo News","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Forgejo News","logo":"https://media.daily.dev/image/upload/s--Cq9uBvkb--/f_auto,q_auto/v1785052096/logos/forgejo?_a=BAMAMicg0","url":"https://daily.dev/sources/forgejo"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/non-free-dependency-discovered-in-forgejo-and-removed-zdwmtpmex","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"open-source,forgejo","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Forgejo News","item":"https://daily.dev/sources/forgejo"},{"@type":"ListItem","position":3,"name":"Non-free dependency discovered in Forgejo and removed"}]} ```