This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+1 more
Summary
AI summaryRelicenses thaw-vllm from MIT to Apache-2.0 with patent grant and termination clause.
Full changelog
Relicenses thaw-vllm from MIT to Apache-2.0 — explicit patent grant and defensive patent termination clause that MIT lacks. No API changes, no performance changes.
PyPI 0.3.2 stays under MIT (immutable for anyone who already installed it); fresh installs of 0.3.3+ get Apache-2.0.
Also ships the new thaw logo in the README.
ForkPool receipt unchanged: 0.88s median per fork round on H100 8B (2026-04-20).
Reproducer: demos/fork_pool_rl.py
Receipt: site/receipts/2026-04-20_h100_fork_pool_rl.json
pip install thaw-vllm==0.3.3
Breaking Changes
- License change from MIT to Apache-2.0 for fresh installs of thaw-vllm version 0.3.3 and above
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Thaw
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]