Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 5D705200B84 for ; Tue, 20 Sep 2016 09:44:31 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id 5C06C160AC9; Tue, 20 Sep 2016 07:44:31 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 77D58160AA9 for ; Tue, 20 Sep 2016 09:44:30 +0200 (CEST) Received: (qmail 47361 invoked by uid 500); 20 Sep 2016 07:44:29 -0000 Mailing-List: contact dev-help@flex.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@flex.apache.org Delivered-To: mailing list dev@flex.apache.org Received: (qmail 47339 invoked by uid 99); 20 Sep 2016 07:44:29 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd4-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 20 Sep 2016 07:44:29 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd4-us-west.apache.org (ASF Mail Server at spamd4-us-west.apache.org) with ESMTP id D808BC0EEE for ; Tue, 20 Sep 2016 07:44:28 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd4-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -0.049 X-Spam-Level: X-Spam-Status: No, score=-0.049 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_NEUTRAL=0.652] autolearn=disabled Authentication-Results: spamd4-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=classsoftware-com.20150623.gappssmtp.com Received: from mx2-lw-us.apache.org ([10.40.0.8]) by localhost (spamd4-us-west.apache.org [10.40.0.11]) (amavisd-new, port 10024) with ESMTP id 1eOFRz2hmYF9 for ; Tue, 20 Sep 2016 07:44:25 +0000 (UTC) Received: from mail-pf0-f169.google.com (mail-pf0-f169.google.com [209.85.192.169]) by mx2-lw-us.apache.org (ASF Mail Server at mx2-lw-us.apache.org) with ESMTPS id CA8105F1EC for ; Tue, 20 Sep 2016 07:44:24 +0000 (UTC) Received: by mail-pf0-f169.google.com with SMTP id q2so4590917pfj.3 for ; Tue, 20 Sep 2016 00:44:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=classsoftware-com.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date :content-transfer-encoding:message-id:references:to; bh=yxIENA90O/BEu8CqeY+gVt8klpAh2VPT7K0zbnLfW2I=; b=OGOXXSKWYilp3Le2WBKasuwRwANUSAtW+P4Z/UeHv8I6/oIFfE2wZAUX1Vs1Qt7MQe swCwFfZxrcw5qoX+2n+xW3tJpdF9gbSKMZeay11rNpNWYOqYVK+Jc0cGB0vgKhyIk0m0 LtCqwZnWL+keD4GBqU+6jp1uWIS+RbYWeyFqfMjmd9Y1gFGzTOXRdaMnZkSdYXzsR2SM DRpaimU3BCmvOQdy0qNe4TW9cZ9S8KVfUkmBi13fwDHwIear3dX5HwyZ9dCiFYdF6VqZ JI8uxM4op8GxgN3Hcam+REVGbPb/02zOlhtUUP/LvGXM/dVkc4k79CwMGUvHaeC3TH+s TEDA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date :content-transfer-encoding:message-id:references:to; bh=yxIENA90O/BEu8CqeY+gVt8klpAh2VPT7K0zbnLfW2I=; b=EgB020yzzuA8Hbvryy6Oo/Mbkveryffz5nuZJR/gXvyGSZhLJ+DPnKVQOYEIDv3uIK seRhLSB+uDrKpYwiLr9BqTolJIbXYPnn0MDlAggYD6n1EyO9D9zgah0SzXH1enWqt33Z Y5AeEVv8+TXob0LuX0fg/xufIzDcAqSM++peVe7AzA/XhmSjmYxRG1P21xujgSopdoip OWy69VX62jC1S2+qXeZpIJ7peDlBbDwevjMLcUXSuiAGx21CHMrVsHvcJD+jzTxiq9jj CZU3/AMydyshtrOq1HIWpBOu9RlCji8oijx656CGHSJBkzQUrc9ceL+wFa7TGFMXlE1G 3j8w== X-Gm-Message-State: AE9vXwOV8I1Z8LwQyjXPbFUHuEuQjtCI6XhT5oqCrYQj/ivq1QEn2ffxBSj6N6+azqcWdg== X-Received: by 10.98.133.202 with SMTP id m71mr53562330pfk.155.1474357463738; Tue, 20 Sep 2016 00:44:23 -0700 (PDT) Received: from [192.168.0.4] (ppp121-44-253-33.bras2.syd2.internode.on.net. [121.44.253.33]) by smtp.gmail.com with ESMTPSA id n77sm42299631pfj.31.2016.09.20.00.44.21 for (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Tue, 20 Sep 2016 00:44:22 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Subject: Re: Current FlexJS license/notice issues From: Justin Mclean In-Reply-To: Date: Tue, 20 Sep 2016 17:44:19 +1000 Content-Transfer-Encoding: quoted-printable Message-Id: <8F3E5A47-1C28-45E4-A424-C9B9DC3CDDB7@classsoftware.com> References: To: dev@flex.apache.org X-Mailer: Apple Mail (2.3124) archived-at: Tue, 20 Sep 2016 07:44:31 -0000 Hi, > Are you proposing to get the OpenFL community to accept headers on = their source > files by submitting a pull request on their repos and then replicating > that header under the ASF header in Matrix.as? No I was going to add a header to make it clear that the code wasn=E2=80=99= t originally Apache licensed and originally come from somewhere else. > And are you going to have the build download their LICENSE.md file = from their > repo and adjust our LICENSE to point to it? Yes but only downloading it once and adding a file to our repo. It can = be found here. [1] I'd only use the MIT bits as the other bits don=E2=80=99= t apply to what we used. > Again, we are not consuming an entire artifact or file. The original code is copyright other people and under a different = license, as per policy [2] changes to a differently licensed file keeps = the original license. Even if it was extensively modified (and the bar = is generally very high for that) it would still be useful to note that = it was originally owned by someone else and under a different license. = The guiding principle also applies here, if it bundled and permissive = then it needs to be mentioned in license. And it=E2=80=99s also = important that we should abide by the terms of the MIT license and have = the copyright owner and full text somewhere. > Are you proposing to submit a pull request to the Flat UI folks to = have them put a correct > MIT license in their repo or README.md? No. They do however link to MIT [3] on their page so it clear what their = intent is and what the license text would be. > And then adjust our build to download that and point to it from our = LICENSE?=20 Yes as above. > I've been unable to find a volunteer to donate the end result to = CreateJS, > but I still think that's the best course of action. By donating the files I assume you mean they will no longer be bundled = in a release? If so then there needs to be nothing about them in our = license file, but if they are still bundled they would need to be = mentioned. > when my manager returns in about 3 weeks I will seek permission to = make the donation so we can avoid > debating this issue and maybe get some positive attention from the = CreateJS community. Adding the header is simple and covers us until that has been sorted = out. "Worse case" I=E2=80=99ll be happy to remove the header if required = at a later date. IMO It=E2=80=99s better to have a possible = documentation issue than a possible licensing error. > If we do the steps above, what else will need a pointer? And, if you = have > time, what policy document requires pointers? It=E2=80=99s only in the how to (that I=E2=80=99m aware of), but Ross (+ = others) has said to use the short form many times. It makes the license = smaller and easier to understand for anyone looking at. Oddly I can=E2=80=99= t find legal policy that says the full text must be copied into LICENSE = either, can you provide a link to that please? > AIUI, the how-to is only a how-to and not a policy document and = certainly allows copied of licenses. My (+others) understanding is both are allowed but the short form is = preferred. So am I good to make all of the above changes? Thanks, Justin 1. https://github.com/openfl/openfl/blob/develop/LICENSE.md 2. https://www.apache.org/legal/src-headers.html#3party (see points 3 + = 4) 3. https://opensource.org/licenses/mit-license.html