Reported on the dev list:
The license file mentions two licenses CC-BY 4.0 and the SIL Open Font License, both of these licenses are Category B and in general shouldn't be included in a source release.
https://www.apache.org/legal/resolved.html#category-b
https://www.apache.org/legal/resolved.html#cc-sa
Font Awesome:
We include CSS which is MIT licensed, and font files which are SIL OFL 1.1 licensed. MIT is ok. https://www.apache.org/legal/resolved.html#weak-copyleft-licenses says:
The font files we have are a
.otf
which is unused and can be deleted..eot
and.ttf
and.woff
and.woff2
are binary, so ok to include per the above. There is also a.svg
which I don't know if its considered binary or not, but we could remove it since SVG font support is very limited anyway https://caniuse.com/svg-fontsTwemoji
The JS code is MIT licensed and that is the only file we include. The graphics licensed under CC-BY 4.0 are not included in the Allura project, but are loaded dynamically at runtime via
https://twemoji.maxcdn.com/
image URLs in the browser. Additionally those CC-BY graphics are binary, which is allowed according to https://www.apache.org/legal/resolved.html#cc-sadb/8389 for improvements to what we include & credit from font awesome