I'll double check tomorrow, but I checked 3 or 4 of the ones you listed and they're all dual licensed, one of them being the *GPL license and the other being an ASF-friendly one.
On Mon, Mar 18, 2019 at 5:45 PM Luciano Resende <luckbr1...@gmail.com> wrote: > > On Mon, Mar 18, 2019 at 4:03 PM Marcelo Vanzin > <van...@cloudera.com.invalid> wrote: > > > > On Mon, Mar 18, 2019 at 2:23 PM Luciano Resende <luckbr1...@gmail.com> > > wrote: > > > Also, there are lots of version mismatching between the included jars > > > and the third-party license file > > > > Could you be a little more explicit about this one? I don't even see a > > 3rd party license file. What exactly is the expectation here? > > > > -- > > Marcelo > > When you extract the binary distro, there is a THIRD-PARTY file which > lists the external dependencies and their licenses. > > I tried to validate some and noticed a few mismatches on the version: > > jars/jackson-jaxrs-1.9.13.jar > * JAX-RS provider for JSON content type > (org.codehaus.jackson:jackson-jaxrs:1.8.3 - > http://jackson.codehaus.org) > > Also, I just noticed the following (L)GPL dependencies. Are these new > ? Were it introduced since the previous release? Or are these > dual-licensed? > > > GNU General Public Library: > > * Streaming API for XML (javax.xml.stream:stax-api:1.0-2 - no url defined) > > GNU Lesser General Public License (LGPL), Version 2.1: > > * JAX-RS provider for JSON content type > (org.codehaus.jackson:jackson-jaxrs:1.8.3 - > http://jackson.codehaus.org) > * Xml Compatibility extensions for Jackson > (org.codehaus.jackson:jackson-xc:1.8.3 - http://jackson.codehaus.org) > > GPL: > > * JTransforms (com.github.rwl:jtransforms:2.4.0 - > http://sourceforge.net/projects/jtransforms/) > > GPL2 w/ CPE: > > * JAXB API bundle for GlassFish V3 (javax.xml.bind:jaxb-api:2.2.2 > - https://jaxb.dev.java.net/) > * JAXB RI (com.sun.xml.bind:jaxb-impl:2.2.3-1 - http://jaxb.java.net/) > * javax.ws.rs-api (javax.ws.rs:javax.ws.rs-api:2.0.1 - > http://jax-rs-spec.java.net) > * jersey-client (com.sun.jersey:jersey-client:1.9 - > https://jersey.java.net/jersey-client/) > * jersey-core (com.sun.jersey:jersey-core:1.9 - > https://jersey.java.net/jersey-core/) > * jersey-guice (com.sun.jersey.contribs:jersey-guice:1.9 - > https://jersey.java.net/jersey-contribs/jersey-guice/) > * jersey-json (com.sun.jersey:jersey-json:1.9 - > https://jersey.java.net/jersey-json/) > * jersey-server (com.sun.jersey:jersey-server:1.9 - > https://jersey.java.net/jersey-server/) > > GPLv2+CE: > > * JavaMail API (compat) (javax.mail:mail:1.4.7 - > http://kenai.com/projects/javamail/mail) > > LGPL: > > * JTransforms (com.github.rwl:jtransforms:2.4.0 - > http://sourceforge.net/projects/jtransforms/) > > LGPL 2.1: > > * Javassist (org.javassist:javassist:3.18.1-GA - > http://www.javassist.org/) > > > > > > -- > Luciano Resende > http://twitter.com/lresende1975 > http://lresende.blogspot.com/ -- Marcelo
