On 19-Jan-2018, Russ Allbery wrote: > Ben Finney <bign...@debian.org> writes: > > > Why the entire contents? The only thing that clause requires is “the > > attribution notices contained within such NOTICE file”. > > Let's make this more concrete, because I'm not sure you understand > the nature of the problem.
We may be describing different problems. I am responding to a bug report that claims: Apache 2.0 requires distributing any NOTICE file along with derivative works […] and I'm asking how that assertion squares with the text of the license. > Here's an example of a NOTICE file from a real Debian package: > > […] > > What parts of this do you think are attribution notices? > What parts of this do you think a Debian developer would naturally > include in debian/copyright? I can't claim to know what an unspecified Debian developer would naturally do. You appear to be asking that to make the point that it's difficult to maintain transcribed information when that information is subject to change; I agree with that point. That point is not special to the Apache License 2.0 requirements. That point also doesn't support making a Lintian error for failing to duplicate information that, when the Debian Policy requirements are satisfied by transcribing that information into the ‘copyright’ file installed with every binary package, entirely satisfies the Apache License 2.0 §4(d) requirements. > Important additional piece of information: other than in this file, > the string "The Danish CLARIN Consortium" appears nowhere in the > upstream source distribution, and the string "The National Research > Council of Canada" appears only here and in a CREDITS file. I don't see how that's relevant to the justification of what the Apache License 2.0 requires. Either that information is required in the ‘copyright’ file (because it is attribution notices needed for copyright information), or they're not attribution notices and so the Apache License 2.0 doesn't require us to distribute that information. If there isn't a special requirement on us to copy the ‘NOTICE’ file in addition to the existing Debian policy requirements – and my reading of this bug report leads me to conclude there is no such special requirement – I don't see why we'd impose a Lintian error tag for that. -- \ “[I]t is impossible for anyone to begin to learn that which he | `\ thinks he already knows.” —Epictetus, _Discourses_ | _o__) | Ben Finney <bign...@debian.org>
signature.asc
Description: PGP signature