www-legal-discuss mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Steve Rowe (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (LEGAL-206) "greenmail" library purported to be ASL may actually be LGPL; is a dependency in several ASF projects
Date Wed, 09 Jul 2014 19:55:05 GMT

    [ https://issues.apache.org/jira/browse/LEGAL-206?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14056671#comment-14056671
] 

Steve Rowe commented on LEGAL-206:
----------------------------------

I downloaded all current Apache releases (a few days ago, via the mirror rsync command), recursively
unpacked all archives and compressed files, then grep'd and find'd case-insensitively for
greenmail.  

I didn't find any other projects with a greenmail dependency besides those listed in this
issue's description, though Axis2's releases don't contain the mail transport sub-module,
and so don't include a greenmail dependency.

I found the Geronimo "javamail 1.4" sub-project source release on Maven Central - AFAICT it's
not available on dist.apache.org or archive.apache.org - the most recent source release, from
July 2011, is here: [http://repo1.maven.org/maven2/org/apache/geronimo/javamail/geronimo-javamail_1.4/1.8.3/geronimo-javamail_1.4-1.8.3-source-release.tar.gz].
 The [vote thread for this release|http://mail-archives.apache.org/mod_mbox/geronimo-dev/201107.mbox/%3CCA+YP9s2eP9nn8rqWNGqt7MFRNE7gatLLtnfw5yoV883V_e54mw@mail.gmail.com%3E]
referenced the same source tarball from a staging repository on repository.apache.org, so
I guess release-via-Maven is the standard process for this sub-project?  After some manual
URL surgery, I was also able to find the same source release tarball on repository.apache.org,
at [https://repository.apache.org/service/local/repositories/releases/content/org/apache/geronimo/javamail/geronimo-javamail_1.4/1.8.3/geronimo-javamail_1.4-1.8.3-source-release.tar.gz],
though for some reason it's not visible via the repository browser web UI.

Here are the locations in source distributions - all appear as test dependencies:

* Apache Syncope 
** 1.1.7/syncope-1.1.7-source-release.zip:
*** syncope-1.1.7/pom.xml
*** syncope-1.1.7/core/pom.xml
*** syncope-1.1.7/core/src/test/java/org/apache/syncope/core/notification/NotificationTest.java
**** {code:java}
25: import com.icegreen.greenmail.util.GreenMail;
26: import com.icegreen.greenmail.util.ServerSetup;
{code}
** 1.0.9/syncope-root-1.0.9-source-release.zip:
*** syncope-root-1.0.9/parent/pom.xml
*** syncope-root-1.0.9/core/pom.xml
*** syncope-root-1.0.9/core/src/test/java/org/apache/syncope/core/notification/NotificationTest.java
**** {code:java}
23: import com.icegreen.greenmail.util.GreenMail;
24: import com.icegreen.greenmail.util.ServerSetup;
{code}
* Apache OODT
** apache-oodt-0.6-src.zip:
*** apache-oodt-0.6/protocol/imaps/pom.xml
*** apache-oodt-0.6/protocol/imaps/src/test/org/apache/oodt/cas/protocol/imaps/TestImapsProtocol.java
**** {code:java}
32: //GreenMail imports
33: import com.icegreen.greenmail.util.DummySSLSocketFactory;
34: import com.icegreen.greenmail.util.GreenMail;
35: import com.icegreen.greenmail.util.GreenMailUtil;
{code}
* Apache Oozie
** 4.0.1/oozie-4.0.1.tar.gz:
*** oozie-4.0.1/pom.xml
*** oozie-4.0.1/core/pom.xml
*** oozie-4.0.1/core/src/test/java/org/apache/oozie/action/email/TestEmailActionExecutor.java
**** {code:java}
30: import com.icegreen.greenmail.util.GreenMail;
31: import com.icegreen.greenmail.util.GreenMailUtil;
{code}
*** oozie-4.0.1/core/src/test/java/org/apache/oozie/sla/TestSLAEmailEventListener.java
**** {code:java}
35: import com.icegreen.greenmail.util.GreenMail;
36: import com.icegreen.greenmail.util.ServerSetup;
{code}
* Apache Geronimo
** geronimo-javamail_1.4-1.8.3-source-release.tar.gz:
*** geronimo-javamail_1.4-1.8.3/geronimo-javamail_1.4_provider/pom.xml
*** geronimo-javamail_1.4-1.8.3/geronimo-javamail_1.4_provider/src/test/java/org/apache/geronimo/javamail/store/imap/IMAPStoreTest.java
**** {code:java}
36: import com.icegreen.greenmail.util.GreenMail;
37: import com.icegreen.greenmail.util.ServerSetupTest;
{code}
*** geronimo-javamail_1.4-1.8.3/geronimo-javamail_1.4_provider/src/test/java/org/apache/geronimo/javamail/store/pop3/POP3StoreTest.java
**** {code:java}
36: import com.icegreen.greenmail.util.GreenMail;
37: import com.icegreen.greenmail.util.ServerSetupTest;
{code}

> "greenmail" library purported to be ASL may actually be LGPL; is a dependency in several
ASF projects
> -----------------------------------------------------------------------------------------------------
>
>                 Key: LEGAL-206
>                 URL: https://issues.apache.org/jira/browse/LEGAL-206
>             Project: Legal Discuss
>          Issue Type: Question
>            Reporter: Hoss Man
>
> Be advised that at least 5 Apache projects appear to depend on a third party library
known as "greenmail" which advertises itself in may places as being licensed under the ASL
2.0, however most of the greemail source files contain headers claiming LGPL.
> This issue requests that the Legal VP advise the affected projects on what they need
to do (if anything) moving forward to be in compliance with ASF policy.
> Projects known to be affected (but there may be more)...
> * Apache Syncope: http://svn.apache.org/repos/asf/syncope/trunk/pom.xml
> * Apache Geronimo: https://svn.apache.org/repos/asf/geronimo/javamail/trunk/geronimo-javamail_1.4/geronimo-javamail_1.4_provider/pom.xml
> * Apache OODT: http://svn.apache.org/repos/asf/oodt/trunk/protocol/imaps/pom.xml
> * Apache Oozie: https://git-wip-us.apache.org/repos/asf?p=oozie.git;a=blob;f=pom.xml;h=bad1e0fbee619f2e5020733792c4a09256b69dcf;hb=master
> * Apache Axis2: http://svn.apache.org/repos/asf/axis/axis2/java/core/trunk/modules/transport/mail/pom.xml



--
This message was sent by Atlassian JIRA
(v6.2#6252)

---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org


Mime
View raw message