Sean Busbey created SPARK-18262:
-----------------------------------

             Summary: JSON.org license is now CatX
                 Key: SPARK-18262
                 URL: https://issues.apache.org/jira/browse/SPARK-18262
             Project: Spark
          Issue Type: Bug
            Reporter: Sean Busbey
            Priority: Blocker


per [update resolved legal|http://www.apache.org/legal/resolved.html#json]:

{quote}
CAN APACHE PRODUCTS INCLUDE WORKS LICENSED UNDER THE JSON LICENSE?

No. As of 2016-11-03 this has been moved to the 'Category X' license list. 
Prior to this, use of the JSON Java library was allowed. See Debian's page for 
a list of alternatives.
{quote}

I'm not actually clear if Spark is using one of the JSON.org licensed 
libraries. As of current master (dc4c6009) the java library gets called out in 
the [NOTICE file for our source 
repo|https://github.com/apache/spark/blob/dc4c60098641cf64007e2f0e36378f000ad5f6b1/NOTICE#L424]
 but:

1) It doesn't say where in the source
2) the given url is 404 (http://www.json.org/java/index.html)
3) It doesn't actually say in the NOTICE what license the inclusion is under
4) the JSON.org license for the java {{org.json:json}} artifact (what the blurb 
in #2 is usually referring to) doesn't show up in our LICENSE file, nor in the 
{{licenses/}} directory
5) I don't see a direct reference to the {{org.json:json}} artifact in our poms.

So maybe it's just coming in transitively and we can exclude it / ping whoever 
is bringing it in?



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to