www-legal-discuss mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Carte Project (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (LEGAL-333) Maven Central Repository terms are incompatible with the Apache License
Date Mon, 02 Oct 2017 20:15:00 GMT

    [ https://issues.apache.org/jira/browse/LEGAL-333?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16188748#comment-16188748
] 

Carte Project commented on LEGAL-333:
-------------------------------------

bq. it seems quite reasonable that Sonatype (or any other repository) wants to stay clear
of such damages and would forward respective claims to the people that submit their content
to the repository - e.g. consider somebody would try to use Maven Central to share pirated
content or software.

Yes, so they should be emphasising that their submitters are able to license their content
under the stated licenses, instead of using terms like the one being commented. You may want
to look at the legal terms of the main opensource hosting platforms, although some get things
better than others (for example I dislike Github terms).

> Maven Central Repository terms are incompatible with the Apache License
> -----------------------------------------------------------------------
>
>                 Key: LEGAL-333
>                 URL: https://issues.apache.org/jira/browse/LEGAL-333
>             Project: Legal Discuss
>          Issue Type: Question
>            Reporter: Carte Project
>            Assignee: Chris A. Mattmann
>
> All or nearly all of the ASF's Java software projects are distributed through the Maven
Central Repository operated by Sonatype, Inc. Their "full terms of service" (as they are described
in [this page|http://central.sonatype.org/pages/ossrh-guide.html]) can be found here:
> [http://central.sonatype.org/pages/central-repository-producer-terms.html]
> The "Indemnity for Submissions" clause states:
> bq. You agree to indemnify and hold harmless Sonatype and its affiliates, suppliers,
partners, officers, agents, and employees from and against any claim, demand, losses, damages
or expenses (including reasonable attorney's fees) arising from your Submissions.
> To me, the obligation to indemnify against any claim "arising from your Submissions"
sounds somewhat incompatible with the 8 and 9 clauses of the [Apache License 2.0|http://www.apache.org/licenses/LICENSE-2.0].
And my understanding is that all of the ASF's Maven artifacts are nearly-automatically deployed
on that repository.
> Am I missing something?  Any comments?



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org


Mime
View raw message