Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 54E16200B41 for ; Thu, 7 Jul 2016 19:55:14 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id 53933160A72; Thu, 7 Jul 2016 17:55:14 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id A16D6160A4F for ; Thu, 7 Jul 2016 19:55:13 +0200 (CEST) Received: (qmail 68164 invoked by uid 500); 7 Jul 2016 17:55:11 -0000 Mailing-List: contact legal-discuss-help@apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: Reply-To: legal-discuss@apache.org List-Id: Delivered-To: mailing list legal-discuss@apache.org Received: (qmail 68129 invoked by uid 99); 7 Jul 2016 17:55:11 -0000 Received: from arcas.apache.org (HELO arcas) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 07 Jul 2016 17:55:11 +0000 Received: from arcas.apache.org (localhost [127.0.0.1]) by arcas (Postfix) with ESMTP id 08E822C02A9 for ; Thu, 7 Jul 2016 17:55:11 +0000 (UTC) Date: Thu, 7 Jul 2016 17:55:11 +0000 (UTC) From: "Dennis E. Hamilton (JIRA)" To: legal-discuss@apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (LEGAL-262) NOTICE requirements of dependencies with overly verbose NOTICE files MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 archived-at: Thu, 07 Jul 2016 17:55:14 -0000 [ https://issues.apache.org/jira/browse/LEGAL-262?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15366496#comment-15366496 ] Dennis E. Hamilton commented on LEGAL-262: ------------------------------------------ I think cleaning out inherited NOTICE information that is not relevant is a good idea (and one might want to suggest that to the dependencies that are on Apache project code). However, there is a common misunderstanding that it is important to underline. The ASF does not require, nor does it obtain, copyright transfers in its receipt of contributions. It obtains licenses from those who do have the exclusive rights that pertain to copyright holders. That is why it is inappropriate to remove in-the-code copyright notices of third parties, except under the provisions that are established for that being done. That is why, at the code file level, the stock ASF Notice is *not* a copyright notice (and should not be described as such). It is a license notice. ASF copyright can subsist in the releases made by Apache projects, but that applies only to the original ASF-project bits and not bits in which the copyright of others subsist. > NOTICE requirements of dependencies with overly verbose NOTICE files > -------------------------------------------------------------------- > > Key: LEGAL-262 > URL: https://issues.apache.org/jira/browse/LEGAL-262 > Project: Legal Discuss > Issue Type: Question > Reporter: Andrew Wang > > We're working on cleaning up our L&N over at HADOOP-12893. One question that came up is what we should add to our NOTICE for dependencies that have overly verbose NOTICE files. > For example, this is the Jetty NOTICE file: > https://github.com/eclipse/jetty.project/blob/jetty-9.3.x/NOTICE.txt > It lists out its dependencies and licenses, but that's not what NOTICE is for. We also already have LICENSE and NOTICE entries for all of these transitive dependencies. > This is the Xerces NOTICE: > https://svn.apache.org/repos/asf/xerces/java/trunk/NOTICE > We're also an Apache project, so it seems like the ASF lines are unnecessary. The copyright attributions also seem potentially unnecessary, considering this code was donated to the ASF when it became an ASF project. > Finally, here is the snappy-java NOTICE: > https://github.com/xerial/snappy-java/blob/master/NOTICE > These don't look like legally required notices either. 3-clause BSD doesn't require a NOTICE IIUC, we don't need to NOTICE our own code from Hadoop, and listing contributors isn't what NOTICE is for either. Not sure about the statically linked libstdc++, but LEGAL-230 did clear snappy-java for ASF use. -- This message was sent by Atlassian JIRA (v6.3.4#6332) --------------------------------------------------------------------- To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org For additional commands, e-mail: legal-discuss-help@apache.org