A licence with a reputation, read rather than assumed, for a piece of infrastructure behind our own application.
the clause everybody worries about: if you modify the
software and let users interact with it over a network,
you must offer them the source of your modifications.
our situation:
we do not modify it — we run an unmodified release
our users interact with our application, not with it
so: nothing is required.
the case that WOULD matter: patching it and exposing it
directly. we do neither, and the fact that we do not is
now written down rather than assumed.
The obligation attaches to modification and to network interaction with the modified work, and running an unmodified binary behind an application triggers neither. Writing down which of the two we would have to change is the useful output — it is the trigger for revisiting, and it is more actionable than a general anxiety about a three-letter licence.