Paperclip mimemagic dependency licensing implication

Paperclip is deprecated, but there may still be users of the gem that haven't upgraded for whatever reason.

There was a mimemagic change (https://github.com/rails/rails/issues/41750 https://github.com/minad/mimemagic/issues/97) that stems from incorrectly licensing mimemagic as MIT with a GPLv2 dependency. The old versions were yanked (new 0.3.6 added) and new versions are published as GPLv2. Codebases that pull in paperclip will possibly be taking the risk of GPLv2 code (IANAL) instead of MIT code.

I am not sure there's any alternative at the moment, but wanted to create this issue in case someone else runs into it.

Deprecation notice

Paperclip is currently undergoing deprecation in favor of ActiveStorage. Maintainers of this repository will no longer be tending to new issues. We're leaving the issues page open so Paperclip users can still see & search through old issues, and continue existing discussions if they wish.