Skip to content

[FlightSQL] SQLite example pulls GPL-licensed modernc.org/ccorpus into all consumers' go.sum #803

@laurentgo

Description

@laurentgo

Describe the enhancement requested

The modernc.org/sqlite dependency (and its transitive chain: modernc.org/ccgo,
modernc.org/ccorpus — a 105 MB package embedding GCC test-suite C source files
licensed under the GPL) is a direct root-module dependency solely because of the
FlightSQL SQLite example package. This forces every downstream consumer of arrow-go
to include those packages in their go.sum and triggers warnings from automated
license-scanning tools (FOSSA, OSS Review Toolkit, etc.), even when they never
import any example code.

Proposal: move arrow/flight/flightsql/example/ into its own Go sub-module
(github.com/apache/arrow-go/v18/arrow/flight/flightsql/example). The two test
files that use the SQLite server as a backend (sqlite_server_test.go,
driver/driver_test.go) would move with it, and a go.work would be added for
local development. pkg.go.dev shows zero external importers of the example package
on v18.

Component(s)

Other

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions