@fsf Hello, I work on a CLI under #GNU #GPL 2.0 using a library dual-licensed Apache-2.0 and MIT. My question is about one dependency of this library which is Apache-2.0 only: can I continue to use the dual-licensed library or no? Link to the issue that I created on the library: https://github.com/algesten/ureq/issues/516 I hope that you can help me on my SBOM/SPDX and license check journey. Thanks a lot