www-legal-discuss mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Steve Rowe (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (LEGAL-206) "greenmail" library purported to be ASL may actually be LGPL; is a dependency in several ASF projects
Date Sat, 12 Jul 2014 19:38:04 GMT

    [ https://issues.apache.org/jira/browse/LEGAL-206?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14059893#comment-14059893

Steve Rowe commented on LEGAL-206:

bq. I'll send an email pointing to this issue to each project's dev list.

Done - I sent the following to dev@syncope.apache.org, dev@oodt.apache.org, dev@geronimo.apache.org,
dev@oozie.apache.org, and java-dev@axis.apache.org:

Subject: Your project uses a possibly LGPL dependency: com.icegreen.greenmail:greenmail

Hi, my name is Steve Rowe, and I'm a member of the Apache Lucene PMC.

We recently discovered that the "greenmail" Java library, which declares its license as ASLv2
in its POM and elsewhere, has LGPL license headers in its source code files.  In response
the Lucene project reverted a recent commit containing this depedency.

I conducted a survey of current Apache releases and found that four Apache projects include
source code that links to the "greenmail" library: Syncope, OODT, Oozie and Geronimo.  Additionally,
Axis2 has a Maven POM that includes a "greenmail" dependency, though I couldn't find any current
releases containing this dependency.  Details are posted on <https://issues.apache.org/jira/browse/LEGAL-206>;
I would appreciate your project's involvement.

An issue was filed with the greenmail project on Sourceforge earlier this year asking for
clarification <http://sourceforge.net/p/greenmail/bugs/8/>, but there has been no response
on that issue, or any other issue, for that matter - the project may be dead, as it has seen
no activity for some time.

> "greenmail" library purported to be ASL may actually be LGPL; is a dependency in several
ASF projects
> -----------------------------------------------------------------------------------------------------
>                 Key: LEGAL-206
>                 URL: https://issues.apache.org/jira/browse/LEGAL-206
>             Project: Legal Discuss
>          Issue Type: Question
>            Reporter: Hoss Man
> Be advised that at least 5 Apache projects appear to depend on a third party library
known as "greenmail" which advertises itself in may places as being licensed under the ASL
2.0, however most of the greemail source files contain headers claiming LGPL.
> This issue requests that the Legal VP advise the affected projects on what they need
to do (if anything) moving forward to be in compliance with ASF policy.
> Projects known to be affected (but there may be more)...
> * Apache Syncope: http://svn.apache.org/repos/asf/syncope/trunk/pom.xml
> * Apache Geronimo: https://svn.apache.org/repos/asf/geronimo/javamail/trunk/geronimo-javamail_1.4/geronimo-javamail_1.4_provider/pom.xml
> * Apache OODT: http://svn.apache.org/repos/asf/oodt/trunk/protocol/imaps/pom.xml
> * Apache Oozie: https://git-wip-us.apache.org/repos/asf?p=oozie.git;a=blob;f=pom.xml;h=bad1e0fbee619f2e5020733792c4a09256b69dcf;hb=master
> * Apache Axis2: http://svn.apache.org/repos/asf/axis/axis2/java/core/trunk/modules/transport/mail/pom.xml

This message was sent by Atlassian JIRA

To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org

View raw message