incubator-ooo-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Pedro Giffuni <...@apache.org>
Subject Category-B tarballs in SVN (was Re: External libraries)
Date Thu, 12 Jan 2012 18:12:18 GMT

--- Gio 12/1/12, Rob Weir <robweir@apache.org> ha scritto:
...
> >
> > I hate to make developer's life difficult but, from
> > what is known, no Apache Project seems to be carrying
> > Category B software in their repositories (feel free
> > to prove me wrong). Not that it's a new problem, just
> > something we will have to think about.
> >
> 
> It is a service to downstream consumers.  Just as we
> aggregate licenses and notices to make it easier for
> them, we also aggregate the optional category-b code
> tarballs.
>

It is actually a disservice. Some of those tarballs are
obsolete and carry known security risks.
 
> Also, the MPL license requires that we make our modified
> files available electronically for 12 months.

Thank you for pointing this out.
This sounds pretty much unacceptable for Apache policies
and a good reason to avoid carrying such code in our
repository.

> 
> So I don't see a problem here, so long as we:
> 

I do see a problem and unless some higher power from
legal@ OKs it, my vote for a release or project
graduation will be -1 (binding), on the basis that
if we do this once we will likely be perpetuating
such practice in all releases.

Pedro.


Mime
View raw message