From dev-return-9141-archive-asf-public=cust-asf.ponee.io@weex.incubator.apache.org Tue Jul 16 10:49:12 2019 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [207.244.88.153]) by mx-eu-01.ponee.io (Postfix) with SMTP id 76BF218064E for ; Tue, 16 Jul 2019 12:49:12 +0200 (CEST) Received: (qmail 2890 invoked by uid 500); 16 Jul 2019 10:49:11 -0000 Mailing-List: contact dev-help@weex.incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@weex.incubator.apache.org Delivered-To: mailing list dev@weex.incubator.apache.org Received: (qmail 2877 invoked by uid 99); 16 Jul 2019 10:49:11 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd4-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 16 Jul 2019 10:49:11 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd4-us-west.apache.org (ASF Mail Server at spamd4-us-west.apache.org) with ESMTP id 3658DC2E8C for ; Tue, 16 Jul 2019 10:49:11 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd4-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -11 X-Spam-Level: X-Spam-Status: No, score=-11 tagged_above=-999 required=6.31 tests=[ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=2, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=disabled Received: from mx1-ec2-va.apache.org ([10.40.0.8]) by localhost (spamd4-us-west.apache.org [10.40.0.11]) (amavisd-new, port 10024) with ESMTP id Vi7zsWgJdK_6 for ; Tue, 16 Jul 2019 10:49:09 +0000 (UTC) Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=207.244.88.153; helo=mail.apache.org; envelope-from=myrle@apache.org; receiver= Received: from mail.apache.org (hermes.apache.org [207.244.88.153]) by mx1-ec2-va.apache.org (ASF Mail Server at mx1-ec2-va.apache.org) with SMTP id A2AA6BC7D4 for ; Tue, 16 Jul 2019 10:49:09 +0000 (UTC) Received: (qmail 2863 invoked by uid 99); 16 Jul 2019 10:49:09 -0000 Received: from Unknown (HELO mailrelay1-lw-us.apache.org) (10.10.3.159) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 16 Jul 2019 10:49:09 +0000 Received: from mail-qt1-f173.google.com (mail-qt1-f173.google.com [209.85.160.173]) by mailrelay1-lw-us.apache.org (ASF Mail Server at mailrelay1-lw-us.apache.org) with ESMTPSA id 0DEA58234 for ; Tue, 16 Jul 2019 10:49:09 +0000 (UTC) Received: by mail-qt1-f173.google.com with SMTP id y26so19001568qto.4 for ; Tue, 16 Jul 2019 03:49:09 -0700 (PDT) X-Gm-Message-State: APjAAAXTCLry2SzlrtxhbsmML6RnZ0ykeY1mymJm2qtg4yiZqNCtHeOK DodTpsL/gvpV9wSeNCs0HXCVS0A2vt/tSp2nixo= X-Google-Smtp-Source: APXvYqzvKrXVU+5HRhs6+YoGrb9S9kZTlU+GG3HBxaQLWfEBzD0aG9e9kcdwodWlKnhU3eIFkuIz4Ipc2w/+jwSbu1E= X-Received: by 2002:ac8:2726:: with SMTP id g35mr22400381qtg.35.1563274148729; Tue, 16 Jul 2019 03:49:08 -0700 (PDT) MIME-Version: 1.0 From: Myrle Krantz Date: Tue, 16 Jul 2019 12:48:57 +0200 X-Gmail-Original-Message-ID: Message-ID: Subject: Concerned about the LGPL dependency in Webkit To: dev@weex.incubator.apache.org Content-Type: multipart/alternative; boundary="000000000000525cc0058dca20a7" --000000000000525cc0058dca20a7 Content-Type: text/plain; charset="UTF-8" Hey all, First of all: congratulations on your recent release! I wanted to circle back to this to make sure it gets resolved before the next release. First a summary of what has happened as I see it. If my summary is incorrect, please let me know: * At some point in the past Weex introduced a run-time and a compile-time dependency to Webkit. When adding the Webkit *.h to the repo, the correct license of those files was accidentally overwritten. * More recently, this mistake was discovered and a license review of Webkit as a dependency was made in which it was realized that Webkit: "As Webkit is under dual license, and it's almost impossible for us to figure out whether there is an function call chain like Weex.apiA->Webkit.BSD.apiB->Webkit.BSD.apiC->Webkit.LGPL.apiD. I'd like to know our proposed change is enough to fix the Category X dependency." ( https://lists.apache.org/thread.html/babe010a7814d4cf3d3d92588bee9dd22277b610daf83733d2622c91@%3Cgeneral.incubator.apache.org%3E ) * The question of whether Webkit could release like this was raised to the incubator and then to legal. * Despite the lack of resolution to this question, Weex was still allowed to make it's most recent release, because Weex is still in incubation. While reviewing the release, it became clear to me that Weex is including WebKit for it's JavaScriptCore. Within WebKit, JavaScriptCore is LGPL-licensed. So it is likely that your functional call chains will include LGPL-licensed code (after all that's the code you're including WebKit for). Is there an alternative implementation of JavaScriptCore that a user could use in place of the LGPL-licensed portions of WebKit? Best Regards, Myrle --000000000000525cc0058dca20a7--