Plotly.js still containscountry-regex as a dependency. I'll just cite@keithrob from his original PR:

"The NPM package that is currently used by plotly,country-regex, is a very good package for taking common country names and correlating them to their ISO3 codes. However, it used a GPLed regex library from theR package countrycode. It is questionable whether country-regex can be a MIT license when it is a direct descendent of R version."

I'm not sure about the MIT license, but every project that uses plotly.js might be a derived work of this original GPL licensed project and therefore subject to its copyleft restrictions. This might light up in your deep inspecting license compliance tool and might make your lawyer sweaty.

see#3944
seekeithrob#1