[ 
https://issues.apache.org/jira/browse/MJAVADOC-669?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17261386#comment-17261386
 ] 

Michael Osipov commented on MJAVADOC-669:
-----------------------------------------

This applies to Java 11+. Ugly, but very likely true:
{noformat}
osipovmi@deblndw011x:~/var/Projekte/maven/maven-model/target/site/apidocs 
(master=)
$ tree -s
.
├── [       8508]  allclasses-frame.html
├── [      22863]  allclasses-index.html
├── [       7408]  allclasses-noframe.html
├── [       7841]  allclasses.html
├── [       5606]  allpackages-index.html
├── [       6809]  constant-values.html
├── [       9553]  deprecated-list.html
├── [         83]  element-list
├── [      10303]  help-doc.html
├── [     392738]  index-all.html
├── [       5540]  index.html
├── [        207]  javadoc.sh
├── [        512]  jquery
│   ├── [        512]  external
│   │   └── [        512]  jquery
│   │       └── [     287630]  jquery.js
│   ├── [        512]  images
│   │   ├── [        335]  ui-bg_glass_55_fbf9ee_1x400.png
│   │   ├── [        262]  ui-bg_glass_65_dadada_1x400.png
│   │   ├── [        262]  ui-bg_glass_75_dadada_1x400.png
│   │   ├── [        262]  ui-bg_glass_75_e6e6e6_1x400.png
│   │   ├── [        332]  ui-bg_glass_95_fef1ec_1x400.png
│   │   ├── [        280]  ui-bg_highlight-soft_75_cccccc_1x100.png
│   │   ├── [       6922]  ui-icons_222222_256x240.png
│   │   ├── [       4549]  ui-icons_2e83ff_256x240.png
│   │   ├── [       6992]  ui-icons_454545_256x240.png
│   │   ├── [       6999]  ui-icons_888888_256x240.png
│   │   └── [       4549]  ui-icons_cd0a0a_256x240.png
│   ├── [     287630]  jquery-3.5.1.js
│   ├── [      20275]  jquery-ui.css
│   ├── [      71563]  jquery-ui.js
│   ├── [      17416]  jquery-ui.min.css
│   ├── [      32162]  jquery-ui.min.js
│   ├── [       2555]  jquery-ui.structure.css
│   ├── [       1787]  jquery-ui.structure.min.css
│   ├── [        512]  jszip
│   │   └── [        512]  dist
│   │       ├── [     366226]  jszip.js
│   │       └── [      95827]  jszip.min.js
│   └── [        512]  jszip-utils
│       └── [        512]  dist
│           ├── [       2444]  jszip-utils-ie.js
│           ├── [       1610]  jszip-utils-ie.min.js
│           ├── [       4483]  jszip-utils.js
│           └── [       1777]  jszip-utils.min.js
├── [     125654]  member-search-index.js
├── [       9252]  member-search-index.zip
├── [        848]  options
├── [       1066]  overview-frame.html
├── [        690]  overview-summary.html
├── [      22910]  overview-tree.html
├── [         83]  package-list
├── [        181]  package-search-index.js
├── [        254]  package-search-index.zip
├── [         82]  packages
├── [        512]  resources
│   ├── [        499]  glass.png
│   └── [        394]  x.png
├── [       6040]  script.js
├── [      13299]  search.js
├── [     117933]  serialized-form.html
├── [      22271]  stylesheet.css
├── [       2948]  type-search-index.js
└── [        634]  type-search-index.zip

9 directories, 55 files
{noformat}

All of those are provided by Oracle, even worse two times: min and standard 
size. JQeury isn't even minimized. I'd like to escalate this to Rory O'Donnell 
rather that us because we would only fix the symptom, not the cause.

> Generated javadoc JARs contain jQuery and other MIT-licenced works without 
> reproducing a copy of the MIT licence, same for GPL-licenced works
> ---------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: MJAVADOC-669
>                 URL: https://issues.apache.org/jira/browse/MJAVADOC-669
>             Project: Maven Javadoc Plugin
>          Issue Type: Bug
>          Components: javadoc
>    Affects Versions: 3.2.0
>            Reporter: Thorsten Glaser
>            Priority: Blocker
>              Labels: legal, licensing
>
> A javadoc JAR generated by the Maven Javadoc Plugin 3.2.0 contains multiple 
> components under the MIT licence:
>  * jQuery 3.5.1
>  ** {{jquery/external/jquery/jquery.js}}
>  ** {{jquery/jquery-3.5.1.js}} (duplicate of the above, blowing up the PKZIP 
> archive size of the JAR, why is it included like this?)
>  * JSZip 3.2.1
>  ** {{jquery/jszip/dist/jszip.js}}
>  ** {{jquery/jszip-utils/dist/jszip-utils-ie.js}}
>  ** {{jquery/jszip-utils/dist/jszip-utils.js}}{{}}
>  * jQuery UI 1.12.1
>  ** {{jquery/jquery-ui.css}}
>  ** {{jquery/jquery-ui.js}}
>  ** {{jquery/jquery-ui.structure.css}}
>  * and their respective minified versions
> It also contains {{script.js}} and {{search.js}} which are 
> GPLv2-with-Classpath-exception-licenced and refer to “as provided by Oracle 
> in the LICENSE file that accompanied this code” but no such file accompanies 
> said code.
> There are also multiple static {{resources}} and {{jquery/images}} whose 
> licence is not documented.
> The MIT licence specifically *requires* that “The […] copyright notice and 
> this permission notice [the licence body] shall be included in all copies or 
> substantial portions of the Software.” The distribution PKZIP archives (JAR 
> files) created by the Maven Javadoc Plugin violate this licence, making them 
> not redistributable.
> Similarily, the GPLv2 used by the Oracle-provided files *requires* that 
> redistributors “give any other recipients of the Program a copy of this 
> License along with the Program.” The “if not, write to the Free Software 
> Foundation” comment is specifically *not sufficient* for this and only 
> provided as fallback should distributors violate this clause, as Maven 
> Javadoc Plugin-generated PKZIP archives do. To be effective, the Classpath 
> exception must also be provided.
> h2. Suggested fix
> Include the following new files:
>  * {{jquery/LICENCE}} containing the MIT licence and all respective copyright 
> notices for the various jQuery-related projects (including those _they_ 
> include, i.e. Sizzle, widget.js, position.js, keycode.js, unique-id.js, 
> widgets/autocomplete.js, widgets/menu.js, pako, and possibly others)
>  * {{js/LICENSE}} (creating a new subdirectory) containing the Classpath 
> exception as provided by Oracle
>  * {{COPYING}} or {{js/COPYING}} (this being the customary name for this 
> file) containing the verbatim text of the GNU GPL version 2
>  * Ideally, add a top-level {{LICENCE}} file pointing out those three and 
> briefly documenting the licence of all other nōn-generated files and state 
> all other files are generated from the original project and share its licence



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to