[
https://issues.apache.org/jira/browse/CALCITE-1562?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15799405#comment-15799405
]
Julian Hyde commented on CALCITE-1562:
--------------------------------------
The most likely explanation seems to be this: The findbugs project did not
author this library. They just posted it to maven central under their group-id
(because maven central will only allow you to upload artifacts under a group-id
that you own). As a BSD library, they have a right to do that. They botched the
license, accidentally labeling it ASL when it should be BSD. I don't think
anyone ever *intended* to release this under GPL or LGPL, and I don't think
anyone *believes* that anyone released it under GPL or LGPL.
To me, the pom accompanying the jar in maven central is much clearer evidence
of intent than the text on the findbugs web site.
There is a cost to transitioning to Stephen Colebourne's version: we stop using
the {{javax.annotation}} package name, so we are no longer compliant with
JSR-305.
And also, if we run when someone shouts "Fire!" in the movie theatre, even
though we know that there is no fire, we are nevertheless adding to the panic.
> Switch com.google.code.findbugs:jsr305 to
> com.github.stephenc.findbugs:findbugs-annotations
> -------------------------------------------------------------------------------------------
>
> Key: CALCITE-1562
> URL: https://issues.apache.org/jira/browse/CALCITE-1562
> Project: Calcite
> Issue Type: Task
> Components: core
> Reporter: Josh Elser
> Assignee: Josh Elser
> Fix For: 1.12.0
>
>
> The licensing on com.google.code.findbugs:jsr305 is rather murky. It would be
> trivial to switch over to using
> com.github.stephenc.findbugs:findbugs-annotations which is clearly licensed
> and provides the same functionality.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
