Mailing-List: contact legal-discuss-help@apache.org; run by ezmlm
Precedence: bulk
Reply-To: legal-discuss@apache.org
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
Subject: Re: Country of Origin of various ASF projects
From: Craig Russell <craig.russell@oracle.com>
In-Reply-To: <D42A9E62.77C16%aharui@adobe.com>
Date: Tue, 18 Oct 2016 01:58:35 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <EEE5A5F1-380E-4F7B-8694-989830EEC4BB@oracle.com>
References: <DF4PR84MB013857F20390DBBB5B38D94E95D00@DF4PR84MB0138.NAMPRD84.PROD.OUTLOOK.COM> <A26F489B-A57F-4283-B2BD-04E677218554@hoplahup.net> <CAOGo0Vb4eoS1=f7PTtiDpjqZDdyF2kyDpJcgMU=H3degV6183Q@mail.gmail.com> <D42A9E62.77C16%aharui@adobe.com>
To: legal-discuss@apache.org
archived-at: Tue, 18 Oct 2016 08:58:54 -0000


> On Oct 17, 2016, at 3:28 PM, Alex Harui <aharui@adobe.com> wrote:
>=20
> And what are the rules if I compiled the code on a VM in the cloud?  =
Does
> it matter where that VM is running?
>=20
> Seems like folks who need TAA compliance should always work from =
source
> packages and compile it themselves.

+1

Apache deals in open *source*.

Convenience binaries can be built by anyone, anywhere there is a =
computer with an internet connection or a postal address where a tape =
(!) containing sources can be delivered.

Craig
>=20
> -Alex
>=20
> On 10/17/16, 2:15 PM, "sebb" <sebbaz@gmail.com> wrote:
>=20
>> Note also that each individual release may have a different release
>> manager who may reside in a different country.
>> And of course people may change their country of residence.
>>=20
>> On 17 October 2016 at 21:00, Paul Libbrecht <paul@hoplahup.net> =
wrote:
>>> Why can=E2=80=99t you or someone at your company rebuild within the =
US (or
>>> anywhere
>>> else appropriate) so that this compliance is guaranteed? It is =
generally
>>> expected that someone else successfully building will build the same
>>> artefact, even if differences such as modification date of binary =
files
>>> may
>>> exist. E.g. version numbers are the same.
>>>=20
>>> paul
>>>=20
>>>=20
>>> On 17 Oct 2016, at 21:50, Austin, Richard (Fort Collins)
>>> <richard.austin@hpe.com> wrote:
>>>=20
>>> Good afternoon,
>>>=20
>>> I am trying to determine the Country of Origin of a lengthy list of
>>> Apache
>>> open-source projects, in order to determine whether they are in
>>> compliance
>>> with the U. S. Trade Agreements Act (TAA).  (Some of our customers
>>> require
>>> this.)  TAA defines the Country of Origin as the country where the
>>> software
>>> is built--where final compilation occurs.  There is a LONG list of
>>> countries
>>> that are TAA-approved.
>>>=20
>>> One person at human-response@apache.org noted that each project is
>>> generally
>>> compiled on the local machine of the Release Manager for that =
specific
>>> version and then uploaded.  While I can contact each project =
separately
>>> to
>>> ask about the build country, I was advised that it might be worth
>>> checking
>>> with Apache Legal Affairs, in case a compilation of this information
>>> already
>>> exists.  (It seems very likely that other groups needing TAA =
compliance
>>> would have already been asking Apache about this.)
>>>=20
>>> Do you know of any centralized source of Country of Origin =
information
>>> for
>>> Apache projects?  Note that we are only looking for the country or
>>> countries--we do NOT need information on specific servers, cities, =
or
>>> states.
>>>=20
>>> Thanks very much for any information--or pointers to others who may =
have
>>> relevant information.
>>>=20
>>> Regards,
>>>  Richard Austin
>>>  Software Development Engineer
>>>  Hewlett Packard Enterprise
>>>=20
>>>=20
>>=20
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
>> For additional commands, e-mail: legal-discuss-help@apache.org
>>=20
>=20
>=20
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
> For additional commands, e-mail: legal-discuss-help@apache.org
>=20

Craig L Russell
clr@apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org