poi-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andrew Oliver" <acoli...@gmail.com>
Subject Resignation and Warning Re: HDGF, chunks_parse_cmds.tbl, and GPLv3
Date Mon, 08 Dec 2008 05:59:38 GMT
OMG!!!!  You guys are so cavalier.  It breaks my heart to say this
but, this project is doomed.  When you're not assuming that everything
will just work out you're checking in GPL (or in your other message
LGPL) and refuse to do any of your own due diligence telling me to
check behind you!  First the whole "oh we don't feel like clarifying
with MS" and now this.  Oddly, all the flak I got was here.  Microsoft
was really cooperative and had it not been for some intervening
illnesses, emergencies I have no doubt that I'd have an agreement
already that had:

1. An deliberate extension of patent protections to any/all work
funded by microsoft via third parties donated to the project
2. Extension of the OSP to "compatibility" vs just "implementation of the spec"

We already made progress with Microsoft's clarifications surrounding OSCON.

However, my goal was to insure the long term viability of the project
and safeguard its users.  I can't do that alone and the project is now
populated with people who do not share this goal.  An agreement from
Microsoft would only hide the cough not the underlying tuberculous.

I hereby resign all rolls and committer rights and no longer wish to
be associated with this project.  I now consider it unsafe to use
because the project committers do not take legal issues seriously (as
demonstrated by this thread) and pursue individualistic goals while
ignoring the long term interests of the users and the project.

-Andy

PS it is pure lunacy not to do an IP audit before a major release.
The board ought to demand it especially after this demonstration of
poor judgment.

On Mon, Dec 8, 2008 at 12:39 AM, David Fisher <dfisher@jmlafferty.com> wrote:
> Andy,
>
> I was hasty I have now checked. Both Zukka's issue and mine are VSDUMP. They
> aren't a secret. It is in the NOTICE.
>
>>
>> apachecat@jmldev1:~/apache-poi/trunk/src/scratchpad/src/org/apache/poi/hdgf>
>> find . -exec grep -li vsdump {} \; -exec grep -ni vsdump {}
>> \;./.svn/text-base/HDGFLZW.java.svn-base
>> 27: * According to VSDump, "it's a slightly perverted version of LZW
>> 30: * (http://www.gnome.ru/projects/vsdump_en.html)
>> ./chunks/.svn/text-base/ChunkFactory.java.svn-base
>> 34: * Makes use of chunks_parse_cmds.tbl from vsdump to be able
>> ./chunks/ChunkFactory.java
>> 34: * Makes use of chunks_parse_cmds.tbl from vsdump to be able
>> ./HDGFLZW.java
>> 27: * According to VSDump, "it's a slightly perverted version of LZW
>> 30: * (http://www.gnome.ru/projects/vsdump_en.html)
>
> The page referenced in the source is now 404. Not good.
>
>> In other words "no, no one has taken a serious look to make sure there
>> are no more such issues"
>
> Please, don't put words in my mouth. I said I was questioning it too. I
> wasn't saying that no one has looked into it.
>
> Let's see what Nick has to say. Then we can decide if it must be removed. If
> we must really be LGPL free.
>
> Or we need to change the NOTICE to mention both uses in the single
> scratchpad component.
>
> If you feel that you need to do your own due diligence please feel free.
> More eyes are always better,
>
> Regards,
> Dave
>
>> On Sun, Dec 7, 2008 at 11:59 PM, David Fisher <dfisher@jmlafferty.com>
>> wrote:
>>>
>>> There is this one from the NOTICE that I wanted to bring up before FINAL.
>>>
>>>> A single resource file of the POI scratchpad component HDGF is taken
>>>> from
>>>> VSDump, and is under the GNU General Public Licence version 3 (GPL v3):
>>>>      http://gplv3.fsf.org/
>>>> Since this is a data file, and has no compiled version (the original
>>>> file is distributed in both source and binary versions of POI), there
>>>> should
>>>> be little difference in licencing requirements compared to the ASL.
>>>> For those wishing to avoid this component, the HDGF part of the POI
>>>> scratchpad should be omitted.
>>>> See http://www.gnome.ru/projects/vsdump_en.html
>>>
>>> This is used by the class. o.a.p.hdgf.HDGFLZW. Are we good with this one?
>>>
>>> An LZW implementation, do we need to worry about Unisys?
>>>
>>> Regards,
>>> Dave
>>>
>>> On Dec 7, 2008, at 10:27 PM, Andrew Oliver wrote:
>>>
>>>> This is a pretty biggy.  I used to do periodic license audits.  Are we
>>>> sure this is the only problem?
>>>>
>>>> On Sun, Dec 7, 2008 at 12:12 PM, Jukka Zitting <jukka.zitting@gmail.com>
>>>> wrote:
>>>>>
>>>>> Hi,
>>>>>
>>>>> On Sun, Dec 7, 2008 at 3:43 PM, Jukka Zitting <jukka.zitting@gmail.com>
>>>>> wrote:
>>>>>>
>>>>>> The GPLv3 does seem to allow (GPLv3 section 4) verbatim copies of
such
>>>>>> source files without the the viral effects, but any modifications
>>>>>> (GPLv3 section 5) to the chunkds_parse_cmds.tbl file would require
>>>>>> licensing entire POI under that license.
>>>>>
>>>>> Thinking about this a bit more I figured that this reasoning just
>>>>> doesn't work. HDGF is a "work based on" chunks_parse_cmds.tbl, and
>>>>> thus falls under section 5 of GPLv3.
>>>>>
>>>>> Unless we can get the original author to grant as an alternative
>>>>> license to the file, it should be removed or replaced in one way or
>>>>> another. I filed bug #46361 [1] for this.
>>>>>
>>>>> [1] https://issues.apache.org/bugzilla/show_bug.cgi?id=46361
>>>>>
>>>>> BR,
>>>>>
>>>>> Jukka Zitting
>>>>>
>>>>> ---------------------------------------------------------------------
>>>>> To unsubscribe, e-mail: dev-unsubscribe@poi.apache.org
>>>>> For additional commands, e-mail: dev-help@poi.apache.org
>>>>>
>>>>>
>>>>
>>>> ---------------------------------------------------------------------
>>>> To unsubscribe, e-mail: dev-unsubscribe@poi.apache.org
>>>> For additional commands, e-mail: dev-help@poi.apache.org
>>>>
>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: dev-unsubscribe@poi.apache.org
>>> For additional commands, e-mail: dev-help@poi.apache.org
>>>
>>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@poi.apache.org
>> For additional commands, e-mail: dev-help@poi.apache.org
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@poi.apache.org
> For additional commands, e-mail: dev-help@poi.apache.org
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@poi.apache.org
For additional commands, e-mail: dev-help@poi.apache.org


Mime
View raw message