www-legal-discuss mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Kevan Miller (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (LEGAL-206) "greenmail" library purported to be ASL may actually be LGPL; is a dependency in several ASF projects
Date Thu, 03 Jul 2014 19:18:34 GMT

    [ https://issues.apache.org/jira/browse/LEGAL-206?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14051834#comment-14051834
] 

Kevan Miller commented on LEGAL-206:
------------------------------------

Hi. Thanks for the information. Has anyone contacted the greenmail community and asked for
clarification?

This is really a matter to take up with the community(s), directly. 

Of the pom.xml files that you reference, all but one are test dependencies. Build/test dependencies
aren't a problem. It's only a problem, if restricted license artifacts are bundled in our
products. 

Oozie may have an issue (I didn't build to confirm). From what I can tell, all of the other
projects look ok.

I'll note that this analysis appears to have only looked at the direct dependencies declared
in the project's pom.xml file. This is just a subset of the dependencies that might be bundled
by a project. Projects need to be concerned about all bundled dependencies. 

> "greenmail" library purported to be ASL may actually be LGPL; is a dependency in several
ASF projects
> -----------------------------------------------------------------------------------------------------
>
>                 Key: LEGAL-206
>                 URL: https://issues.apache.org/jira/browse/LEGAL-206
>             Project: Legal Discuss
>          Issue Type: Question
>            Reporter: Hoss Man
>
> Be advised that at least 5 Apache projects appear to depend on a third party library
known as "greenmail" which advertises itself in may places as being licensed under the ASL
2.0, however most of the greemail source files contain headers claiming LGPL.
> This issue requests that the Legal VP advise the affected projects on what they need
to do (if anything) moving forward to be in compliance with ASF policy.
> Projects known to be affected (but there may be more)...
> * Apache Syncope: http://svn.apache.org/repos/asf/syncope/trunk/pom.xml
> * Apache Geronimo: https://svn.apache.org/repos/asf/geronimo/javamail/trunk/geronimo-javamail_1.4/geronimo-javamail_1.4_provider/pom.xml
> * Apache OODT: http://svn.apache.org/repos/asf/oodt/trunk/protocol/imaps/pom.xml
> * Apache Oozie: https://git-wip-us.apache.org/repos/asf?p=oozie.git;a=blob;f=pom.xml;h=bad1e0fbee619f2e5020733792c4a09256b69dcf;hb=master
> * Apache Axis2: http://svn.apache.org/repos/asf/axis/axis2/java/core/trunk/modules/transport/mail/pom.xml



--
This message was sent by Atlassian JIRA
(v6.2#6252)

---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org


Mime
View raw message