www-legal-discuss mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Marvin Humphrey <mar...@rectangular.com>
Subject Re: use of LICENSE and NOTICE
Date Wed, 28 Mar 2012 16:30:19 GMT
On Wed, Mar 28, 2012 at 12:51 AM, Oliver-Rainer Wittmann
<orwittmann@googlemail.com> wrote:

> On 27.03.2012 23:53, Marvin Humphrey wrote:

>> Two cases not covered explicitly earlier in this legal-discuss thread
>> were:
>>
>>   * Nested dependencies.
>
> Is it right that you think here of the LICENSE and the NOTICE file of 3rd
> party components which are Apache projects, like Apache APR?

Yes, APR would be a good example, and the NOTICE files of ASF Apache-licensed
products are the primary focus of this bullet point -- though of course any
open source distribution might have nested dependencies.  It is common for
Apache products to bundle each other (especially the convenience binaries for
Java projects which bundle jars), so this comes up a lot.

Consider an "Apache Foo" product which bundles APR.  Here's the content of
the NOTICE file from APR 1.4.6:

    Apache Portable Runtime
    Copyright (c) 2011 The Apache Software Foundation.

    This product includes software developed by
    The Apache Software Foundation (http://www.apache.org/).

    Portions of this software were developed at the National Center
    for Supercomputing Applications (NCSA) at the University of
    Illinois at Urbana-Champaign.

    This software contains code derived from the RSA Data Security
    Inc. MD5 Message-Digest Algorithm.

    This software contains code derived from UNIX V7, Copyright(C)
    Caldera International Inc.

If all of APR is bundled in Apache Foo's source release, that content must be
duplicated in the NOTICE file at the top level of the Apache Foo archive.
(APR's NOTICE file must also remain intact within the subdirectory where Foo
bundles APR.)

>>   * NOTICE files from Apache-licensed dependencies, particularly those
>>     from outside the ASF.
>
> Is it right that you think here of the NOTICE file of 3rd party components
> which are licensed under the Apache license, but are not Apache projects,
> like serf?

Yes.  Say that Apache Foo bundles Serf in addition to APR.  Serf's NOTICE file
contains only this text...

    This product includes software developed by
    The Apache Software Foundation (http://www.apache.org/).

... which should already be present in Apache Foo's NOTICE file, so no further
duplication is required.  However, if Serf's NOTICE file had contained
anything else, it would have been necessary to dupe it in Apache Foo's NOTICE.

Cheers,

Marvin Humphrey

---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org


Mime
View raw message