[CONTROLLER-1899] GPL licensed distribution Created: 30/May/19 Updated: 30/May/19 Resolved: 30/May/19 |
|
| Status: | Resolved |
| Project: | controller |
| Component/s: | None |
| Affects Version/s: | Nitrogen SR3, Fluorine SR2 |
| Fix Version/s: | None |
| Type: | Bug | Priority: | Medium |
| Reporter: | Daniel Gheorghita | Assignee: | Robert Varga |
| Resolution: | Won't Do | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Environment: |
vanilla fluorine SR2 |
||
| Description |
|
The vanilla Fluorine SR2[but also Nitrogen SR3] distribution has a dependency on **https://mvnrepository.com/artifact/javax.websocket/javax.websocket-api/1.1 . This particular artifact has a CDDL 1.1 + GPL 2.0 license, whose description is just a broken link https://glassfish.java.net/public/CDDL+GPL_1_1.html Can the distribution be used in a commercial product? How can someone know without any available licence information?
Details:
javax.websocket-api/1.1 required by ./system/org/ops4j/pax/web/pax-web-features/6.0.11/pax-web-features-6.0.11-features.xml required by ./system/org/apache/karaf/features/standard/4.1.7/standard-4.1.7-features.xml which is installed when the distribution starts up. |
| Comments |
| Comment by Robert Varga [ 30/May/19 ] |
|
Following the mvnrepository to https://javaee.github.io/glassfish/ and then to https://javaee.github.io/glassfish/LICENSE, as well as looking at https://search.maven.org/artifact/javax.websocket/javax.websocket-api/1.1/bundle reveals it has the GPL Classpath Exception. |
| Comment by Robert Varga [ 30/May/19 ] |
|
Which means I do not see a problem, but I Am Not A Lawyer and you should check with your legal counsel. |
| Comment by Daniel Gheorghita [ 30/May/19 ] |
|
thank you, Robert! |