ASF GitHub Bot commented on RYA-177:

Github user DLotts closed the pull request at:


> Review License on Rya Dependencies
> ----------------------------------
>                 Key: RYA-177
>                 URL: https://issues.apache.org/jira/browse/RYA-177
>             Project: Rya
>          Issue Type: Task
>    Affects Versions: 3.2.10
>            Reporter: Aaron Mihalik
>            Assignee: David W. Lotts
>            Priority: Blocker
> * jgridshift:jgridshift appears to be LGPL licensed
> (https://github.com/floscher/jGridShift/blob/master/LICENSE). You may
> not use this software. It looks like it was not appropriately marked in
> its pom which is why the configuration from Rya's parent apache.pom did
> not catch it. This is brought in via org.geotools.xsd:gt-xsd-gml3.
> * colt (http://dst.lbl.gov/ACSSoftware/colt/) appears to be another
> brought in by com.tinkerpop.blueprints:blueprints-core
> * com.google.code.findbugs:jsr305 is another example of GPL licensing.
> While the artifact appears to have the ASL tagged on the pom, all
> Findbugs documentation states that the project is GPL.
> I would recommend to make a pass over your dependencies to verify that
> you aren't depending on any projects which are licensed with a license
> on this list: http://www.apache.org/legal/resolved.html#category-x. See
> http://www.apache.org/licenses/GPL-compatibility.html for more details.
> The above three examples were found via a brief glance.

This message was sent by Atlassian JIRA

Reply via email to