Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 7A73E200B50 for ; Fri, 29 Jul 2016 18:10:22 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id 792FC160A6E; Fri, 29 Jul 2016 16:10:22 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id C150E160AA6 for ; Fri, 29 Jul 2016 18:10:21 +0200 (CEST) Received: (qmail 16162 invoked by uid 500); 29 Jul 2016 16:10:20 -0000 Mailing-List: contact legal-discuss-help@apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: Reply-To: legal-discuss@apache.org List-Id: Delivered-To: mailing list legal-discuss@apache.org Received: (qmail 15866 invoked by uid 99); 29 Jul 2016 16:10:20 -0000 Received: from arcas.apache.org (HELO arcas) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 29 Jul 2016 16:10:20 +0000 Received: from arcas.apache.org (localhost [127.0.0.1]) by arcas (Postfix) with ESMTP id 96CB92C0D65 for ; Fri, 29 Jul 2016 16:10:20 +0000 (UTC) Date: Fri, 29 Jul 2016 16:10:20 +0000 (UTC) From: "Dennis E. Hamilton (JIRA)" To: legal-discuss@apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (LEGAL-267) Questionable use of third party code in major code contribution MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 archived-at: Fri, 29 Jul 2016 16:10:22 -0000 [ https://issues.apache.org/jira/browse/LEGAL-267?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15399586#comment-15399586 ] Dennis E. Hamilton commented on LEGAL-267: ------------------------------------------ I think Alex is correct that this would be a third party dependency. I do wonder about this, though: "The contributor seems to be unrelated to ASM and has just copied the parts from ASM. Should we notify the ASM project ob this?" I think that the "willing contribution" by someone who has the right to do so comes up, among other things. The contributor has apparently made a derivative work of the BSD-licensed code. The question seems to be how to navigate that when incorporated in an Apache project source-code. The discussion on the pull request suggests that the code is modified although it is not clear what the extent of that is. > Questionable use of third party code in major code contribution > --------------------------------------------------------------- > > Key: LEGAL-267 > URL: https://issues.apache.org/jira/browse/LEGAL-267 > Project: Legal Discuss > Issue Type: Question > Reporter: Benedikt Ritter > > Hello, > the Apache Commons project has received a major code donation via GitHub [1]. It looks like good parts of that contribution have been copied from the ASM framework which is licensed under the terms of BSD 3-Clause License. Given the information of the Previously Asked Questions page [3], I assume that we could theoretically include this contribution. > - Can you confirm, that we can accept this contribution from a legal PoV? > - What would be a polite way to bring this to Commons BCEL WRT to the ASM project? The contributor seems to be unrelated to ASM and has just copied the parts from ASM. Should we notify the ASM project ob this? > - The discussion at GitHub already brought up the topic of adding a NOTICE file. This seems to be missing in the PR. Is that all that needs to be done to include this contribution? > Thank you! > [1] https://github.com/apache/commons-bcel/pull/7 > [2] http://asm.ow2.org/ > [3] http://www.apache.org/legal/resolved.html#category-a -- This message was sent by Atlassian JIRA (v6.3.4#6332) --------------------------------------------------------------------- To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org For additional commands, e-mail: legal-discuss-help@apache.org