#4647 Check licensing compatibility with AL2

v1.0.0
closed
asf (30)
General
2015-08-20
2012-08-02
No

See http://incubator.apache.org/projects/allura.html section "Verify distribution rights"

See also http://www.apache.org/legal/resolved.html

We should go through all our deps in requirements*.txt and check their licensing. Also check for any differently-licensed code files checked into our main codebase.

Related

Tickets: #4655

Discussion

  • Dave Brondsema

    Dave Brondsema - 2012-08-06

    Created [#4655] for ForgeHg's Mercurial dependency, since that is a known big task.

     

    Related

    Tickets: #4655

  • Dave Brondsema

    Dave Brondsema - 2012-08-06

    html2text is GPL. It's used to convert html to markdown, and used by the wiki importer and blog rss importer. The former is already optional, we'll have to make the blog rss importer optional.

     
  • Dave Brondsema

    Dave Brondsema - 2012-08-10
    • size: --> 2
     
  • Dave Brondsema

    Dave Brondsema - 2012-11-02
    • Milestone: forge-nov-16 --> forge-nov-30
     
  • Dave Brondsema

    Dave Brondsema - 2012-11-16
    • Milestone: forge-nov-30 --> forge-dec-14
     
  • Dave Brondsema

    Dave Brondsema - 2012-11-30
    • milestone: forge-dec-14 --> forge-dec-28
     
  • Peter Hartmann - 2012-12-18
    • status: open --> in-progress
    • assigned_to: Peter Hartmann
     
  • Dave Brondsema

    Dave Brondsema - 2012-12-19

    FYI, http://www.apache.org/legal/resolved.html#optional explains how an optional dependency on e.g. GPL'd package is ok

     
  • Peter Hartmann - 2012-12-27

    I've pushed a branch with html2text made optional. I've also double-checked licensing of all requirements not so long ago, and checked any new coming since then. There is a potential issue with ActivityStream, which may block this ticket. I've reported it under [#5529].

    I see no other issues with dependency licensing, however, I spotted some issues regarding how certain parts of our codebase are licensed:
    - Allura/allura/public/nf/js/jquery.maxlength-min.js: file states it's licensed under GNU GPL
    - NoWarnings: setup.py passes GPL as a license parameter to setuptools' setup() function, but LICENSE file claims it's licensed under Apache License 2.0

     

    Related

    Tickets: #5529

  • Dave Brondsema

    Dave Brondsema - 2013-01-02
    • http://keith-wood.name/maxlength.html says jquery maxlength v1.1.0 is available under GPL and MIT, so we should be good (maybe need to upgrade to that version?)
    • NoWarnings' setup.py can be changed I think. I see only 3 commits to NoWarnings and no external source of code is there, so it's all part of Allura which is Apache licensed now
     
  • Dave Brondsema

    Dave Brondsema - 2013-01-03
     
  • Dave Brondsema

    Dave Brondsema - 2013-01-03
    • size: 2 --> 0
     
  • Peter Hartmann - 2013-01-03
    • status: in-progress --> blocked
     
  • Peter Hartmann - 2013-01-07
    • status: blocked --> code-review
     
  • Dave Brondsema

    Dave Brondsema - 2013-01-08
    • qa: Dave Brondsema
     
  • Dave Brondsema

    Dave Brondsema - 2013-01-09

    Nice work. I also moved html2text from requirements.txt to requirements-optional.txt

     
  • Dave Brondsema

    Dave Brondsema - 2013-01-09
    • status: code-review --> closed
     

Log in to post a comment.