one-stop-analytics 1.13.11__tar.gz

one_stop_analytics-1.13.11/CHANGELOG.md

@@ -0,0 +1,42 @@
+## 1.13.11 — Licensing preparation (not a release)
+
+- Prepare the first public distribution under AGPL-3.0-only rather than MIT.
+- Add commercial-license discussion draft and preliminary dependency-license inventory.
+- Publication is blocked pending copyright-holder confirmation, contributor rights review, full dependency audit, and legal review.
+
+## 1.13.11 — JSON shape compatibility correction
+
+- Preserve index labels only for semantic indexes; `RangeIndex` DataFrames/Series keep legacy list shapes.
+- Keep `decision_report.column_profile`, `decision_report.categorical_profile`, and other positional profile tables as lists of records.
+- Add v1.13.5 CLI JSON shape snapshot checks for `analyze`, `batch`, and `eda`, documenting approved label-preservation exceptions.
+- Align release checklist and verification metadata with actual v1.13.11 test/build results; release is not an RC until `twine check` and remote CI pass.
+
+## 1.13.10
+- Preserve EDA index/category labels recursively across analyze JSON, including `decision_report.data_quality.categorical` and `quality_audit`.
+- Keep business-oriented collections on the existing list-of-records serialization contract.
+- Add regression coverage for decision-report category labels and unnamed numeric scalar lists in analyze JSON.
+
+## 1.13.8 — Restore JSON list compatibility outside EDA
+
+- Keep EDA index-aware JSON serialization for column/category labels.
+- Restore list-of-records serialization for DataFrames in business, batch, and other general CLI outputs.
+- Restore list serialization for Series outside EDA.
+- Add regression tests for both contracts, including Pareto-like business output shapes.
+
+## 1.13.7 — Preserve Series index labels in CLI JSON
+
+- Preserve meaningful EDA Series index labels in JSON.
+
+## 1.13.9
+- Preserve index/category labels for EDA sections serialized by `analyze --output *.json` and `batch`.
+- Serialize KPI and per-column descriptive statistics as named objects.
+- Keep legacy list-of-records JSON output for business and other non-EDA DataFrame payloads.
+- Add CLI regression coverage for analyze and batch label preservation.
+
+
+## Security hardening (unreleased, v1.13.11)
+
+- Replaced DuckDB file-path SQL interpolation with DuckDB relation APIs (`read_csv` / `read_parquet`) before creating the validated view.
+- Replaced interpolated SQL `LIMIT` construction and manual table/column SQL assembly with SQLAlchemy Core `Table` / `select` / `.limit()` expressions.
+- Added regression coverage for quoted file paths, unsafe view identifiers, and invalid limit values.
+- Full test suite: 169 passed, 3 skipped. Bandit could not be run in the build environment because it is not installed; rerun it in the release environment.

one_stop_analytics-1.13.11/COMMERCIAL-LICENSE-DRAFT.md

@@ -0,0 +1,67 @@
+# One Stop Analytics — Commercial License (Draft for Legal Review)
+
+**Status: DRAFT ONLY — NOT AN OFFER, NOT READY FOR SIGNATURE, AND NOT A SUBSTITUTE FOR LEGAL ADVICE.**
+
+This draft is a discussion template for a separate commercial license. It must
+be reviewed and completed by qualified counsel and the actual copyright holder
+before being offered to customers. The public package is intended to be offered
+under GNU Affero General Public License v3.0 only (AGPL-3.0-only). A commercial
+license would be a separate written agreement signed by an authorized licensor.
+
+## 1. Parties
+
+- **Commercial licensing contact (proposed):** Srijan Das — otanalytics.contact@gmail.com
+
+- **Licensor:** [LEGAL NAME, ENTITY TYPE, ADDRESS, AND CONTACT]
+- **Licensee:** [CUSTOMER'S FULL LEGAL NAME AND ADDRESS]
+- **Effective date:** [DATE]
+
+## 2. Licensed materials and scope
+
+The agreement must identify the exact One Stop Analytics version, components,
+permitted deployment environments, number of users/servers/instances, affiliates,
+and whether modification, redistribution, embedding, and SaaS use are permitted.
+No rights are granted to third-party dependencies, trademarks, or materials the
+Licensor does not own or have authority to sublicense.
+
+## 3. Commercial permissions
+
+Subject to the signed agreement and payment of applicable fees, the Licensor may
+grant specified permissions to use, modify, integrate, deploy, and/or redistribute
+the identified project without the AGPL obligations expressly waived in that
+agreement. The agreement must state precisely which obligations are waived and
+for which covered materials; it must not imply that unrelated works or third-party
+components are exempt from their own licenses.
+
+## 4. Fees, term, and renewal
+
+- Fees and payment schedule: [PRICE / CURRENCY / TAXES / PAYMENT TERMS]
+- Term and renewal: [TERM / RENEWAL / TERMINATION]
+- Usage limits or tiers: [USERS / INSTANCES / REVENUE / DEPLOYMENTS, IF ANY]
+
+## 5. Support, updates, and service levels
+
+Support, response times, maintenance, updates, security fixes, and service levels
+are included only if explicitly listed here: [DETAILS OR “NOT INCLUDED”].
+
+## 6. Ownership and notices
+
+The Licensor retains only those rights it actually owns or is authorized to license.
+Licensee must preserve any notices and comply with all licenses applicable to
+third-party components and separately licensed materials.
+
+## 7. Warranties, liability, confidentiality, and governing law
+
+These terms must be drafted by counsel for the intended jurisdiction and transaction:
+[WARRANTY / LIABILITY CAP / INDEMNITY / CONFIDENTIALITY / GOVERNING LAW / DISPUTES].
+
+## 8. Entire agreement and signatures
+
+The signed agreement must define precedence between this agreement and any other
+contract documents, and include authorized signatures for both parties.
+
+---
+
+**Before using this template:** replace every bracketed field, decide the exact
+commercial permissions, check third-party license constraints, and have a lawyer
+review enforceability and interaction with AGPL-3.0-only.

one_stop_analytics-1.13.11/COPYRIGHT

@@ -0,0 +1,7 @@
+Copyright notice for One Stop Analytics
+
+Copyright (C) 2026 Srijan Das
+
+Confirm that Srijan Das owns or is authorized to license the project copyright.
+Review all contributions, employment/contractor terms, and any copied or generated
+code before asserting exclusive dual-licensing rights.