Henri Yandell created FLINK-22555:
-------------------------------------
Summary: LGPL-2.1 files in flink-python jars
Key: FLINK-22555
URL: https://issues.apache.org/jira/browse/FLINK-22555
Project: Flink
Issue Type: Bug
Components: API / Python
Reporter: Henri Yandell
Looking at, for example,
[https://repo1.maven.org/maven2/org/apache/flink/flink-python_2.11/1.13.0/] the
jar file contains three LGPL-2.1 source files:
*
flink-python_2.11-1.13.0/META-INF/maven/org.jboss.modules/jboss-modules/pom.xml
* flink-python_2.11-1.13.0/schema/module-1_1.xsd
* flink-python_2.11-1.13.0/schema/module-1_0.xsd
There's nothing in the DEPENDENCIES or licenses directory on the topic. It
looks like Netty brings in the LGPL-2.1 JBoss dependency (depending on the
Apache-2.0 JBoss Marshalling, which depends on the LGPL-2.1 JBoss Modules).
The xsd files are also appear to be coming from JBoss Modules. Given Apache's
position on LGPL-2.1 dependency inclusion in ASF projects, this seems like an
issue.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
