dashorst opened a new issue, #1846:
URL: https://github.com/apache/wicket/issues/1846

   The source releases of Wicket contain fonts under the SIL Open Font License 
1.1. The ASF puts the OFL in [Category 
B](https://www.apache.org/legal/resolved.html#category-b) 
([LEGAL-112](https://issues.apache.org/jira/browse/LEGAL-112)): such works may 
ship in binary form in convenience binaries, but not in source releases. 
`release.sh` builds the source release with `git archive`, so every font file 
in the tree goes into it. This has been the case since the wicket-examples 
fonts were added, so it affects all maintained lines (10.x, 11.x, master). 
#1845 would add four more OFL families for the reference guide.
   
   This issue lists every font the Wicket repositories use, so we can decide 
for each one whether to keep it out of the source release, replace it, or drop 
it, before the next release.
   
   ## apache/wicket
   
   Present on master, wicket-11.x and wicket-10.x unless noted.
   
   | Font | Licence | Where | Used by | In source release |
   |---|---|---|---|---|
   | Source Sans Pro | OFL 1.1 | 
`wicket-examples/src/main/resources/org/apache/wicket/examples/fonts/source-sans-pro/`
 (36 files) | `WicketExamplePage`, body text of all examples | yes |
   | Source Code Pro | OFL 1.1 | 
`wicket-examples/…/examples/fonts/source-code-pro/` (18 files) | 
`WicketExamplePage`, code in the examples | yes |
   | League Gothic | OFL 1.1, Reserved Font Name | 
`wicket-examples/…/examples/fonts/league-gothic/` (12 files). It is also 
base64-embedded in `apachewicket7.svg`, `logo-apachewicket-examples-white.svg`, 
`logo-apachewicket-tungsten.svg` and `logo-apachewicket-white.svg`. | The logo 
SVGs in the example headers. No page loads its `stylesheet.css`. | yes, both as 
files and inside the SVGs |
   | Alegreya, Alegreya Sans, Alegreya SC, JetBrains Mono | OFL 1.1 | 
`wicket-user-guide/src/main/asciidoc/fonts/` (8 woff2), only in PR #1845 | 
Reference guide HTML | would be |
   | Noto Serif, M+ 1mn, Font Awesome 5 Free | OFL 1.1 (Noto, Font Awesome), M+ 
licence | Not in the tree. asciidoctor-pdf embeds them in `single.pdf` at build 
time. | Reference guide PDF | no, only in the built PDF |
   | Font Awesome 4.3 | OFL 1.1 (font), MIT (CSS) | Not in the tree. Linked 
from maxcdn.bootstrapcdn.com in `WicketExamplePage.html`, 
`CustomLoadedTemplate.html`, `WicketExampleApplication` and 
`MyAuthenticatedWebApplication`. | Icons in the examples | no |
   | Yanone Kaffeesatz | OFL 1.1 | Not in the tree. Linked from 
fonts.googleapis.com in the quickstart archetype's `HomePage.html` and in 14 
test pages in wicket-core-tests. | Archetype headings | no |
   
   Everything else in the tree uses system fonts only (Lucida Sans, Verdana, 
Helvetica, Arial and the like): the error and debug pages in wicket-core, the 
debug bar in wicket-devutils, and the qunit and threadtest pages.
   
   The CDN-linked fonts raise no release issue, because nothing is distributed. 
They do make the examples and every quickstart-generated project call a 
third-party CDN, and Font Awesome 4.3 has been end-of-life for years.
   
   ## apache/wicket-site
   
   The website is not a release, so the Category B rule does not apply. The 
fonts are listed for completeness and because the guide (#1845) shares its 
typeface with the site.
   
   | Font | Licence | Where | Still used |
   |---|---|---|---|
   | Alegreya, Alegreya Sans, Alegreya SC | OFL 1.1 | `fonts/alegreya/` | yes, 
`_layouts/base.html`, `css/style.scss` |
   | JetBrains Mono | OFL 1.1 | `fonts/jetbrains-mono/` | yes, `css/style.scss` 
|
   | slick (carousel icon font) | MIT, part of slick 1.5.5 | `fonts/slick.*` | 
yes, "Built with Wicket" carousel |
   | Font Awesome 4.7 | OFL 1.1 (font), MIT (CSS) | 
`fonts/fontawesome-webfont.*`, `css/font-awesome*.css` | no references found 
outside its own CSS |
   | Wicket font (Glyphter icon font) | unknown, generated in 2024 | 
`fonts/wicket-font/` | no references found |
   | League Gothic, Source Sans Pro, Source Code Pro | OFL 1.1 | 
`fonts/league-gothic/`, `fonts/source-*/` | no references found (the 
pre-redesign theme) |
   
   `content/fonts/` holds the generated copies of the same files.
   
   ## Options for the release problem
   
   1. **Keep the fonts in git and exclude them from the source release** with 
`export-ignore` in `.gitattributes`. This is what Calcite/Avatica did 
([CALCITE-3822](https://issues.apache.org/jira/browse/CALCITE-3822)). 
[LEGAL-163](https://issues.apache.org/jira/browse/LEGAL-163) concluded more 
strictly (not in the repository at all), so this needs a confirmation on 
legal-discuss first. The examples' source in the release would then reference 
font files that are missing, so the examples would need a fallback stack.
   2. **Download the fonts at build time** (a download step in the `guide` 
profile, and in the wicket-examples build), so they are only in the built 
artifacts. Binary distribution of Category B is allowed. This needs no legal 
question.
   3. **Replace them with Category A fonts.**
   4. **Drop them.** For League Gothic this is straightforward: convert the 
text in the four logo SVGs to outlines and delete the font directory. Outlines 
are artwork, not font software. The examples could also fall back to system 
font stacks.
   
   ## Category A replacement candidates
   
   Only a few well-known faces are under a Category A licence. Google moved 
most of its Apache-licensed fonts (Roboto, Roboto Mono, Open Sans, 
Arimo/Tinos/Cousine) to the OFL in newer releases. They can only be used by 
pinning the last Apache-2.0 release. Of the families still on Google Fonts, 
only Roboto Slab is Apache-2.0.
   
   | Role (current font) | Candidate | Licence | Notes |
   |---|---|---|---|
   | Serif text (Alegreya) | Roboto Slab | Apache 2.0 (current) | Slab serif, 
quite different in tone from Alegreya |
   | | Droid Serif | Apache 2.0 | Unmaintained, but stable |
   | | Tinos | Apache 2.0 (Croscore 1.x only) | Metric-compatible with Times |
   | | DejaVu Serif | Bitstream Vera licence, Category A | Wide coverage, heavy 
files |
   | Sans text (Alegreya Sans, Source Sans Pro) | Open Sans | Apache 2.0 
(releases before 2021) | |
   | | Roboto | Apache 2.0 (v2.x) | |
   | | Arimo | Apache 2.0 (Croscore 1.x only) | Metric-compatible with Arial |
   | | DejaVu Sans | Bitstream Vera licence | |
   | Code (JetBrains Mono, Source Code Pro) | Hack | MIT and Bitstream Vera 
licence | Designed for code, based on DejaVu Sans Mono |
   | | Roboto Mono | Apache 2.0 (releases before the OFL switch) | |
   | | Cousine | Apache 2.0 (Croscore 1.x only) | |
   | | DejaVu Sans Mono | Bitstream Vera licence | |
   | Small caps (Alegreya SC) | none | | Use `font-variant: small-caps` or 
letter-spaced uppercase |
   | Display (League Gothic) | none needed | | Outline the logo text |
   
   Bitstream Charter / XCharter (a permissive licence close to MIT) would be a 
good match for Alegreya. It is not on the Category A list, so it would need its 
own LEGAL question.
   
   ## To decide
   
   - Which option applies per font: wicket-examples, the guide (#1845), the 
guide PDF.
   - Whether the guide and the site should keep sharing a typeface. Replacing 
Alegreya in the guide only makes sense if the site switches too.
   - Which release lines get the fix. The examples fonts are in 10.x and 11.x 
as well.
   - Whether to clean up the unused fonts on the site (Font Awesome 4.7, Wicket 
font, League Gothic, Source Sans/Code Pro).
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to