Can I use a PyPI package in closed-source software?

Short answer: A BSD-3-Clause package, shipped closed-source: Yes. An LGPL-3.0 package, distributed: Yes. A GPL-3.0 package, modified and distributed: Yes.

It depends on the package's declared license; MIT, BSD and Apache-2.0 are common on PyPI. Pass the project URL as source_url and Rightshold reads it.

A BSD-3-Clause package, shipped closed-source: Yes

License: BSD 3-Clause "New" or "Revised" License (BSD-3-Clause, curated)

• Every use you described is granted by BSD 3-Clause, and nothing you described is prohibited.

Duties: attribution, license_notice, no_endorsement

An LGPL-3.0 package, distributed: Yes

License: GNU Lesser General Public License v3.0 (LGPL-3.0-only, curated)

• Every use you described is granted by LGPL 3.0, and nothing you described is prohibited.

Duties: attribution, license_notice, share_alike, source_disclosure

A GPL-3.0 package, modified and distributed: Yes

License: GNU General Public License v3.0 (GPL-3.0-only, curated)

• Every use you described is granted by GPL 3.0, and nothing you described is prohibited.

Duties: attribution, license_notice, state_changes, share_alike, source_disclosure

Context

• The declared license is the publisher's claim; check the LICENSE file shipped with the package.

Sources

• PyPI core metadata: License-Expression

Check it yourself (free, no key)

{
  "tool": "check_license",
  "arguments": {
    "license": "BSD-3-Clause",
    "intended_use": {
      "commercial_use": true,
      "redistribution": true
    }
  }
}

Computed from Rightshold's license profiles; not legal advice. Updated 2026-10-19. JSON · Markdown