[ 
https://issues.apache.org/jira/browse/MADLIB-1076?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15973765#comment-15973765
 ] 

Frank McQuillan edited comment on MADLIB-1076 at 4/19/17 12:28 AM:
-------------------------------------------------------------------

Here is a summary of the 3rd party components used at the current time:

1) Bundled with source code:

||cpt||version||licence||license link||notes|| 
| libstemmer-porter | porter2 | BSD | http://snowballstem.org/license.html |  |
| m_widen_init | none | MIT | 
https://github.com/apache/incubator-madlib/blob/master/licenses/third_party/_M_widen_init.txt
 |  |
| python-argparse | 1.2.1 | Python | 
https://wiki.python.org/moin/PythonSoftwareFoundationLicenseFaq |  |
| pyyaml | 3.10 | MIT | http://pyyaml.org/wiki/PyYAML |  |
| UseLATEX.cmake | 2.1.1 | BSD | See header of 
https://github.com/kmorel/UseLATEX/blob/master/UseLATEX.cmake |  |

2) Downloaded at build time:

||cpt||version||licence||license link||notes|| 
| boost | 1.61.0 | MIT | http://www.boost.org/users/license.html |  |
| pyxb | 1.2.4 | Apache 2.0 | http://pyxb.sourceforge.net/legal.html | See Note 
1 below |
| eigen | 3.2 | MPL 2.0 | 
http://eigen.tuxfamily.org/index.php?title=Main_Page#License | See Note 2 below 
|

*Note 1*
PyXB: Python XML Schema Bindings
http://pyxb.sourceforge.net/

http://pyxb.sourceforge.net/legal.html
says
“PyXB as a whole is made available under the Apache License v 2.0.”
See also
https://github.com/pabigot/pyxb/blob/next/LICENSE
which has the standard Apache License Version 2.0 verbage.

However, we noticed that it has a GPL 3.0 sub-component:
https://github.com/pabigot/pyxb/blob/next/doc/extapi.py
(This seems strange, but anyways…)

Remedy in Sept 2015 when MADlib entered as a Apache incubating project:  
* At build time, we remove this GPL sub-component since it is not needed,
just to be 100% sure we are only including Apache License Version 2.0 software. 
 
* This is the reason there is a message during build that says “PyXB: Removing 
GPL component from code base”

*Note 2*
Eigen
http://eigen.tuxfamily.org/

http://eigen.tuxfamily.org/index.php?title=Main_Page#License
says
“Eigen is Free Software. Starting from the 3.1.1 version, it is licensed under 
the MPL2…Note that currently, a few features rely on third-party code licensed 
under the LGPL: SimplicialCholesky, AMD ordering, and constrained_cg.”  

MADlib uses a later version than 3.1.1.

Remedy in Sept 2015 when MADlib entered as a Apache incubating project, as per 
Roman's guidance at that time and as per 
http://www.apache.org/legal/resolved.html#category-b :
* Cloned Eigen header files and made needed changes, then maintained on a 
separate GitHub repo https://github.com/madlib/eigen
* This modified Eigen GitHub project carries forward the MPL license.  The 
commits showing changes made are here 
https://github.com/madlib/eigen/tree/branches/3.2
* At build time, MADlib project will then include the Eigen header files from 
this repo
* Also we use the EIGEN_MPL2_ONLY preprocessor symbol to explicitly exclude the 
LGPL components

The current license file 
https://github.com/apache/incubator-madlib/blob/master/LICENSE
lists:
* src/libstemmer is taken from Snowball stem project
* src/madpack/yaml is taken from PyYAML project
* cmake/UseLATEX.cmake is taken from LaTeX project
which seems to be incomplete.

Roman can you please advise on what should be in 
https://github.com/apache/incubator-madlib/blob/master/LICENSE
give the list of 3rd party components that MADlib uses as listed above.

Thanks.








was (Author: fmcquillan):
Here is a summary of the 3rd party components used at the current time:

1) Bundled with source code:

||cpt||version||licence||license link||notes|| 
| libstemmer-porter | porter2 | BSD | http://snowballstem.org/license.html |  |
| m_widen_init | none | MIT | 
https://github.com/apache/incubator-madlib/blob/master/licenses/third_party/_M_widen_init.txt
 |  |
| python-argparse | 1.2.1 | Python | 
https://wiki.python.org/moin/PythonSoftwareFoundationLicenseFaq |  |
| pyyaml | 3.10 | MIT | http://pyyaml.org/wiki/PyYAML |  |
| UseLATEX.cmake | 2.1.1 | BSD | See header of 
https://github.com/kmorel/UseLATEX/blob/master/UseLATEX.cmake |  |

2) Downloaded at build time:

||cpt||version||licence||license link||notes|| 
| boost | 1.61.0 | MIT | http://www.boost.org/users/license.html |  |
| pyxb | 1.2.4 | Apache 2.0 | http://pyxb.sourceforge.net/legal.html | See Note 
1 below |
| eigen | 3.2 | MPL 2.0 | 
http://eigen.tuxfamily.org/index.php?title=Main_Page#License | See Note 2 below 
|

*Note 1*
PyXB: Python XML Schema Bindings
http://pyxb.sourceforge.net/

http://pyxb.sourceforge.net/legal.html
says
“PyXB as a whole is made available under the Apache License v 2.0.”
See also
https://github.com/pabigot/pyxb/blob/next/LICENSE
which has the standard Apache License Version 2.0 verbage.

However, we noticed that it has a GPL 3.0 sub-component:
https://github.com/pabigot/pyxb/blob/next/doc/extapi.py
(This seems strange, but anyways…)

Remedy from Sept 2015:  
* At build time, we remove this GPL sub-component since it is not needed,
just to be 100% sure we are only including Apache License Version 2.0 software. 
 
* This is the reason there is a message during build that says “PyXB: Removing 
GPL component from code base”

*Note 2*
Eigen
http://eigen.tuxfamily.org/

http://eigen.tuxfamily.org/index.php?title=Main_Page#License
says
“Eigen is Free Software. Starting from the 3.1.1 version, it is licensed under 
the MPL2…Note that currently, a few features rely on third-party code licensed 
under the LGPL: SimplicialCholesky, AMD ordering, and constrained_cg.”  

MADlib uses a later version than 3.1.1.

Remedy from Sept 2015, as per Roman's guidance at that time and as per 
http://www.apache.org/legal/resolved.html#category-b :
* Cloned Eigen header files and made needed changes, then maintained on a 
separate GitHub repo https://github.com/madlib/eigen
* This modified Eigen GitHub project carries forward the MPL license.  The 
commits showing changes made are here 
https://github.com/madlib/eigen/tree/branches/3.2
* At build time, MADlib project will then include the Eigen header files from 
this repo
* Also we use the EIGEN_MPL2_ONLY preprocessor symbol to explicitly exclude the 
LGPL components

The current license file 
https://github.com/apache/incubator-madlib/blob/master/LICENSE
lists:
* src/libstemmer is taken from Snowball stem project
* src/madpack/yaml is taken from PyYAML project
* cmake/UseLATEX.cmake is taken from LaTeX project
which seems to be incomplete.

Roman can you please advise on what should be in 
https://github.com/apache/incubator-madlib/blob/master/LICENSE

Thanks.







> Review LICENSE file and README.md
> ---------------------------------
>
>                 Key: MADLIB-1076
>                 URL: https://issues.apache.org/jira/browse/MADLIB-1076
>             Project: Apache MADlib
>          Issue Type: Task
>          Components: Documentation
>            Reporter: Frank McQuillan
>            Assignee: Frank McQuillan
>            Priority: Minor
>             Fix For: v1.11
>
>
> Comments from Ed Espino on 1.10 RC-2 review on thread
> https://mail-archives.apache.org/mod_mbox/incubator-madlib-user/201703.mbox/%3CCAHAuQDzarS7K4u-rOsLLhbwSHCyFn5cKSyjLinE%2BZ%3DjSpU59qw%40mail.gmail.com%3E
> {code}
> LICENSE
>   Shouldn't the components with files in licenses/third_party be
>   referenced in LICENSE file?
>     Boost_Software_License_v1.txt
>     Eigen_v3.1.2.txt
>     PyXB_v1.2.3.txt
>     PyYAML_v3.10.txt
>     Python_License_v2.7.1.txt
>     UseLATEX_v1.9.4.txt
>     _M_widen_init.txt
>     argparse_v1.2.1.txt
> From README.md, I only saw an incomplete reference to the third party 
> components.
>   Third Party Components
>   MADlib incorporates material from the following third-party components
>   
>   argparse 1.2.1 "provides an easy, declarative interface for creating 
> command line tools"
>   Boost 1.47.0 (or newer) "provides peer-reviewed portable C++ source 
> libraries"
>   Eigen 3.2.2 "is a C++ template library for linear algebra"
>   PyYAML 3.10 "is a YAML parser and emitter for Python"
>   PyXB 1.2.4 "is a Python library for XML Schema Bindings"
> {code}
> To dos:
> 1) Confirm that LICENSE file is up to date
> 2) Update README.md with any required 3rd aprty/licensing clarifications



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Reply via email to