https://issues.apache.org/bugzilla/show_bug.cgi?id=46756

           Summary: Improved LICENSE and NOTICE files
           Product: POI
           Version: 3.5-dev
          Platform: All
        OS/Version: All
            Status: NEW
          Keywords: PatchAvailable
          Severity: normal
          Priority: P2
         Component: POI Overall
        AssignedTo: [email protected]
        ReportedBy: [email protected]


Created an attachment (id=23297)
 --> (https://issues.apache.org/bugzilla/attachment.cgi?id=23297)
Patch to update the NOTICE and LICENSE files

As discussed on the mailing list, I did a quick review of the main components
included in the latest beta release and updated the LICENSE and NOTICE files
accordingly.

See the attached patch for the proposed changes. The updated NOTICE file only
contains the copyright attributions required by the various included licenses,
and the LICENSE file embeds the full license texts (or equivalent) of the
included components.

Some notes:

* I'm not sure if the chunks_parse_cmds.tbl was re-licensed under the ALv2 or
if the author granted ASF a CLA-style license to distribute the file. In the
latter case we wouldn't need to include the entry I've now added in the NOTICE
file.

* The DOM4J license has a weak advertising clause that I asked Apache Legal
about. See https://issues.apache.org/jira/browse/LEGAL-43. The initial response
suggests that the license is fine and that no extra credit beyond what I've
already included is needed.

* The JSR 173 API jar is another slightly troublesome case, see
https://issues.apache.org/jira/browse/LEGAL-42. Early response from Apache
Legal  suggests that we should rather use the ALv2 version available from
Apache Geronimo.

* The XMLBeans NOTICE file is a bit complex. I've tried my best to identify
which parts of XMLBeans are included in POI and to include only the relevant
entries from the XMLBeans NOTICE.

* I only reviewed the licensing of the included jar files (and the
chunds_parse_cmds.tbl file). Are there source files (or non-jar binaries)
within POI that are not under ALv2 or that have explicit NOTICE requirements?

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to