Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 3B707200B93 for ; Sat, 17 Sep 2016 00:26:41 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id 3A199160AD9; Fri, 16 Sep 2016 22:26:41 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 56C62160AC4 for ; Sat, 17 Sep 2016 00:26:40 +0200 (CEST) Received: (qmail 23879 invoked by uid 500); 16 Sep 2016 22:26:39 -0000 Mailing-List: contact legal-discuss-help@apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: Reply-To: legal-discuss@apache.org List-Id: Delivered-To: mailing list legal-discuss@apache.org Received: (qmail 23868 invoked by uid 99); 16 Sep 2016 22:26:39 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd2-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 16 Sep 2016 22:26:39 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id A5D4C1A53DE for ; Fri, 16 Sep 2016 22:26:38 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 0.979 X-Spam-Level: X-Spam-Status: No, score=0.979 tagged_above=-999 required=6.31 tests=[KAM_LAZY_DOMAIN_SECURITY=1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001] autolearn=disabled Received: from mx2-lw-eu.apache.org ([10.40.0.8]) by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024) with ESMTP id ne6_bhiDpIIx for ; Fri, 16 Sep 2016 22:26:36 +0000 (UTC) Received: from mout.perfora.net (mout.perfora.net [74.208.4.194]) by mx2-lw-eu.apache.org (ASF Mail Server at mx2-lw-eu.apache.org) with ESMTPS id 77BC75F47C for ; Fri, 16 Sep 2016 22:26:34 +0000 (UTC) Received: from Air-McShane.local ([74.104.150.151]) by mrelay.perfora.net (mreueus002) with ESMTPSA (Nemesis) id 0M3Tde-1auIRW2G6S-00qyP5 for ; Sat, 17 Sep 2016 00:26:26 +0200 Subject: Re: The license for readme files in the works of ASF projects To: legal-discuss@apache.org References: From: Shane Curcuru Message-ID: <24100a23-f40b-6252-2b00-f59cebeae122@shanecurcuru.org> Date: Fri, 16 Sep 2016 18:26:24 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0) Gecko/20100101 Thunderbird/45.2.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K0:xrN969VsNgMdG3a7vLOWwrvkBGJXJZ62l9o/7i8modQ5h+y/LC/ Lk0s9wkvHNWy7+ljAhLXF7fbo4CZWTmBaA07JdFVSd7+Y6OxjxTUzAbG94izfASHe24dy74 yTwXzKhLxtIGC87iiHIRmpw6GR/8ym0SXJARoXMsoA949udExyOjT2qhGJAU/yvcmYmCN+a vEOhM9xMquUz+LiJjTrQA== X-UI-Out-Filterresults: notjunk:1;V01:K0:ihxt9+hCxBE=:g/J1VsXTgn37/lCd2KIPpy lcC2DkTV/lVZleQjwIsZDnYvXsIonIjDNpf2Lx/1NRv0oPRxkWztRfO94aZFisaG2qv9weIV7 qticdegViMhTArzYWZNf+BajBBEUwVV//SMbTswTmH1+qoCfVOb6eP1/gouy6HTMqlNm+ixGT j6BK1IP4vr+ZyHejBkZGQRbp9tZuEWk56wcBCfvxgGNdhhS+KobMojTrV5Cql4ipFGaTTWouz spYghxjJOV/T2oYdpQAt83QY5VDV4KR6OfNnRv3JQEsdLKl/eTEUqbxVdwFfa0jqQoNOg8TPh x2cSrcSlVFKJUsDsEnHMqJt8OE7NU1V4AkLDvJSOyz7W9hFgylnJvQ5ZKoVCkMrJ4sB/bM43P XRPS2HOJ8qfLqsJHIZBZIJ7lHiF3/INZ6jU68Drj/Yx9GCgFXGC7E5gW3J+VI1XpYA2ejQKwh BZhvZnSvzbbDZxa+1oCFuRSgYy7eTdXMlB5K0TusDR0X3c5EpEJKSryzZkjK6K2L2SFqdPQZ3 ATk3USYxoJI85QoWTtDNqvJXCzV74fGypjZqEehKH3AJCD4LyGJQ0sR7V76UUb6LZDhzJLWzE 2sRWkixnzYAweRwWrXERZotUomcr0bd3UepaPGKk/3ZWFVtbpBRy2BqDRnkwaQCicD3iDbhQn v0+2WnRc8pCKBRLi8mWBBwMHeGxOdF13uvWGt5A1DlKDkiGWIebXgjpXJ71hltzXIBuTIjHaQ +g1OZJId2J1/ZcTH archived-at: Fri, 16 Sep 2016 22:26:41 -0000 Greg Stein wrote on 9/16/16 5:14 PM: > Everything developed by the ASF needs to use the ALv2. I'm not even sure > why you're asking this question. Indeed, this is clearly documented as required policy, even if the documentation does not specifically mention README, docs, and other non-"software". But the clear intent is that all IP created by an Apache project is licensed under the ALv2. http://apache.org/licenses/#distributions http://apache.org/legal/release-policy.html#licensing http://apache.org/legal/resolved.html#licenses Obviously external bits of software included in Apache project releases also maintain their original LICENSE, and need to be NOTICEd. > Yes, it covers READMEs, documentation, images, and other non-code > assets. Third parties can use those items in their products, or they can > change them for their products. They fall under the same goal of > permissive licensing, and that is why we have and use the ALv2. > > People can muck up our code just as much as they can muck up README > files. We don't care. Let them. > > They just cannot use our *trademarks*, but that is a separate matter. > The code and the README and the docs and all of that are under > copyrighted, licensed to third parties under the ALv2. Trademarks are explicitly excluded from the license grants in ALv2, and thus all Apache trademark rights are reserved for the ASF on behalf of all Apache projects: http://apache.org/licenses/LICENSE-2.0.html#trademarks "6. Trademarks. This License does not grant permission to use the trade names, trademarks, service marks, or product names of the Licensor, except as required for reasonable and customary use in describing the origin of the Work and reproducing the content of the NOTICE file." If instead your question is about what some *other* organization should use for their license, that's out of scope for this list. - Shane > > -g > > On Fri, Sep 16, 2016 at 1:06 PM, Pierre Smits > wrote: > > True that is the policy. Regarding the code. But that policy is more > than just about use, But also about enabling modifications. Hence > the license validating that. > Yet there is also the protection of descriptive elements of the > projects and other stuff (think the Apache feather at ASF level) to > consider.. > > So I would say the AL2 license is not the most appropriate one when > projects want to restrict modification of certain artefacts. And > readme files describing the product could be one of those, so that > the project can control that changes to such files go through the > project, in stead of any 3rd party changing it willy-nilly in their > favor (and potentially damaging the reputation of he project or the > ASF). > > So what would the appropriate license be, in such cases? > > Best regards, > > Pierre Smits > > ORRTIZ.COM > OFBiz based solutions & services > > OFBiz Extensions Marketplace > http://oem.ofbizci.net/oci-2/ > > On Fri, Sep 16, 2016 at 7:11 PM, Greg Stein > wrote: > > Well, now you're actually asking a *policy* question rather than > a legal question. > > Regarding policy: that is absolutely what the Apache Software > Foundation wants to see. We made code available, and they used > it, ... AND they renamed stuff to not abuse our "Apache" > trademark. The ALv2 basically says "use the code, not our > trademarks". > > We want people to use our code. We don't need recognition for it. > > Cheers, > -g > > > On Fri, Sep 16, 2016 at 11:35 AM, Pierre Smits > > wrote: > > Thanks for the enlightenment of the change-over from ASL to > AL, Greg... > > For the rest, the answer doesn't do the question justice. > > Let me explain this with following hypothetical example: > > Apache HTTPServer (not to be confused with Apache HTTPD ;-)) > is available for forking through Github (you can find it > here: http://github/apache/apacheserver > with a readme file (with > a AL2 header included). This hypothetical readme contains > one single line stating: 'The Apache HTTPServer(r) is the > product of the same named open source community under the > umbrella of the Apache Software Foundation and delivers a > fast and flexible web server solution'. > > Together with a hypothetical logo and the name (a registered > trademark) this readme strenghtens the brand of the product, > the project and the foundation. > > Now, the repo is forked to a same named repo but in an other > account (lets say http://github/foo/apacheserver) and the > content (except the license header) is transformed into: > > This product delivers a solution to produce web pages, is > based on the concepts in nginEx and is the result of the > works of Wiley E. Coyote and Sylvester T. Cat of Acme Corp. > > Though in line with the AL2 (ability to modify the > artefact), the displayed result delivers a negative effect > with respect to brand recognition/reinformcement. Hence my > question: is in such a case the AL2 license the right one > for that particular artefact? > > Best regards, > > > Pierre Smits > > ORRTIZ.COM > OFBiz based solutions & services > > OFBiz Extensions Marketplace > http://oem.ofbizci.net/oci-2/ > > On Fri, Sep 16, 2016 at 2:08 PM, Greg Stein > > wrote: > > > > On Fri, Sep 16, 2016 at 5:40 AM, Pierre Smits > > > wrote: > > Hi all, > > Our ASL 2 license allows changes in the artefact > that is governed by that license. > > But is that the right license for readme files and > other similar artifacts enclosed in our releases? > > > There is no "ASL 2" license. There *is* an Apache > License v2.0 ... we dropped the "S[oftware]" when going > to v2 with the specific intent that it can be applied to > things like README files and documentation. That it > isn't just about code. > > Cheers, > -g > > > > > --------------------------------------------------------------------- To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org For additional commands, e-mail: legal-discuss-help@apache.org