License of project & dependencies?

[daniel-dewa]

Hi,

I'm trying to wrap my head around the licensing of this project, especially the Selective Disclosure part of the library.
When reading the source code, it looks like the code is using the SdJwtDoc class from the dependency SD-JWT.

SD-JWT does not appear to have its code publicly available, should it be assumed, that the package adheres to the Apache 2 license, just like the project, or which rights are you granted by the SD-JWT package authors??

I think this is a vital question, especially concerning commercial usage.

If you are not permitted to use SD-JWT, then it should be CLEARLY written in the README, that the wallet-framework contains proprietary code, which cannot be used commercially!

[daniel-dewa]

I somehow didn't find the source repository (lissi-id/sd-jwt-dotnet) using Google.

Maybe adding it to the nuget package description could help.