1yuv commented on PR #43343:
URL: https://github.com/apache/superset/pull/43343#issuecomment-5442979346

   Thanks for the careful review. You're right about the policy. CC-BY is 
Category B for ASF, and I checked the CC BY 3.0 IGO text too: it has the same 
"effective technological measures" clause in section 4(a) that the policy is 
worried about.
   
   I spent some time looking for a source with a cleaner license. Short 
version: there isn't one. Everything traces back to the same Survey Department 
of Nepal data, and the Survey Department itself does not allow redistribution.
   
   What I checked:
   
   - HDX (`cod-ab-npl`, the OCHA COD dataset): CC BY-IGO. Same as 
geoBoundaries, since that is where geoBoundaries got it.
   - geoBoundaries gbOpen, gbHumanitarian, gbAuthoritative: CC BY 3.0 IGO, CC 
BY 3.0 IGO, and "humanitarian use only".
   - `mesaugat/geoJSON-Nepal` on GitHub is MIT, which looked promising. But the 
file is the OCHA dataset with an MIT label on it. Same schema (`ADM1_PCODE`, 
`validOn` dates), 99.8% identical geometry. The author can't relicense OCHA's 
data, so I don't think we can lean on that.
   - Open Data Nepal (opendatanepal.com) has two boundary datasets, both tagged 
CC BY-SA by whoever uploaded them, not by the Survey Department. And CC BY-SA 
is only allowed by ASF for unmodified media anyway.
   - The Survey Department's own position: boundary data is free to download 
but comes "with restriction to redistribute or resale the data to the third 
party" (UN-GGIM Nepal country report). Their Director General's 2017 UN-GGIM 
talk says "principally, no data is free".
   - Nepal's Copyright Act, section 40, gives the Government of Nepal copyright 
over its own works, so there is no public domain argument like there is for US 
government data. Wikimedia Commons refuses Nepali government maps for this 
reason.
   - Natural Earth still has the 14 zones. I filed 
nvkelso/natural-earth-vector#852 asking for an update in May 2023. No response 
so far.
   
   So OCHA's CC BY 3.0 IGO release is, as far as I can tell, the most open 
version of Nepal's provinces that legitimately exists. Kenya worked out because 
geoBoundaries' Kenya data happened to be public domain (RCMRD). Nepal doesn't 
have that option.
   
   One small correction for the record: the other overrides in the notebook are 
not all public domain. Morocco, Philippines and the India patch come from 
MIT-licensed GitHub repos (fine, Category A), and the Latvia source repo has no 
license at all. Might be worth a separate look.
   
   I've emailed legal-discuss@ asking whether a small CC BY 3.0 IGO data file 
that the chart reads at runtime can be included in source with proper labeling 
in LICENSE/NOTICE (the IGO variant isn't listed in resolved.html at all). If 
the answer is no, the fallback would be to handle it the way the OFL fonts are 
handled: keep the file out of the repo, pull it in at build time as a small npm 
package, and label it in LICENSE.txt, so it only ends up in the convenience 
binaries. Happy to hear if there's a better way.
   
   In the meantime I've added an UPDATING.md entry for the key change, same as 
the Kenya one. Leaving this open until legal answers.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to