Replace TinyMCE as default WYSYWYG because of license incompatibility

[fballiano]

Hi everybody, TinyMCE v7 is GPL, GPL is incompatible with BSD3 (grapejs' license) and since TinyMCE v6 (the latest MIT version) will be end of life very soon but although it should still be supported, latest TinyMCE 6.8.5 triggers all dependabot vulnerability alerts because of this.

I think grapejs' default WYSYWYG should be changed.

My suggestion nowadays is to us https://quilljs.com, which is probably the most popular MIT alternative, and there's already a grapejs plugin to use it: https://github.com/Ju99ernaut/gjs-quill which I think would make things easier.

[mosh-tudor]

Wait a minute, Grapesjs doesn't TinyMCE built in.
Or am I missing something? 🤔

[fballiano]

no, sure, but a project that uses grapejs would probably have both grapejs and tinymce and either

• uses tinymce6, which is MIT but has an unpatched CVE and it's almost EOL
• user tinymce7, which is GPL and will make all the client project GPL, which is most probably not possible

so in my opinion a MIT project like grapejs should either

• be tied to another MIT project like quilljs
• have all the wysiwyg-related code (all the adapters for any wysiwyg editors) as plugins so that the core is decoupled from any editor

[artf]

correct, there is no TinyMCE in the core

[fballiano]

then I don't understand https://app.grapesjs.com/docs-sdk/plugins/rte/tinymce it seems to me to understand that tinymce is, in some way, installed by default but then we've to revert to v6, which is going to be EOL soon..

[artf]

Well, it's a plugin, it's not inside the core

[fballiano]

my bad then, sorry! :-)