[
https://issues.apache.org/jira/browse/GIRAPH-1172?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16406886#comment-16406886
]
ASF GitHub Bot commented on GIRAPH-1172:
----------------------------------------
Github user jdasch commented on the issue:
https://github.com/apache/giraph/pull/61
I did come across this thread [1], which discusses that
`com.google.code.findbugs:jsr305` is BSD, and documents that the JSR-305's BSD
license is included in the findbugs repo [2]. But the license for FindBugs
source is LGPL [3].
Unfortunately, Giraph is using `com.google.code.findbugs:annotations` which
includes both JSR-305 and some FindBugs annotations [4], [5] which do have LGPL
headers in the source listings.
[1] https://github.com/findbugsproject/findbugs/issues/128
[2]
https://github.com/findbugsproject/findbugs/blob/2.0.2/findbugs/licenses/LICENSE-jsr305.txt
[3]
https://github.com/findbugsproject/findbugs/blob/2.0.2/findbugs/licenses/LICENSE.txt
[4]
https://github.com/findbugsproject/findbugs/blob/2.0.2/findbugs/src/java/edu/umd/cs/findbugs/annotations/SuppressFBWarnings.java
[5]
https://github.com/findbugsproject/findbugs/blob/2.0.2/findbugs/src/java/edu/umd/cs/findbugs/annotations/SuppressWarnings.java
> Remove Findbugs dependency with incompatible license.
> -----------------------------------------------------
>
> Key: GIRAPH-1172
> URL: https://issues.apache.org/jira/browse/GIRAPH-1172
> Project: Giraph
> Issue Type: Improvement
> Affects Versions: 1.2.0
> Reporter: Jeff Dasch
> Priority: Major
> Fix For: 1.3.0
>
>
> The dependency com.google.code.findbugs:annotations:jar:2.0.2 has an
> incompatible LGPL license and needs to be removed.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
