Hey,

I just downloaded the latest official 1.4.4 code from the upstream
website, and found the following:

of all .c and .h files, only
    ./jsm/modules/mod_groups.c (JOSL only)
    ./jabberd/lib/snprintf.c   (apache license)
    ./jabberd/lib/sha.c        (MPL)
and
    ./jabberd/lib/jabberdlib.h (no license statement)
are not also under GPLv2+

snprintf can probably be replaced easily, only mod_groups.c might be a
problem. jabberdlib.h contains headers for various other files that are
under JOSL/GPLv2+, e.g. jutil.c.

All other files are not source files but can probably also be assumed to
fall under the COPYING file which states JOSL/GPLv2+.

As for snprintf, upstream would probably be willing to replace it seeing
that they don't even comply with the license as far as I can tell (or do
they advertise  
*    "This product includes software developed by the Apache Group
 *    for use in the Apache HTTP server project (http://www.apache.org/)."
?)

Then, the only remaining problem is mod_groups.c as far as I can tell.
I'm not sure if the MPL is GPL compatible but a GPL SHA implementation
can easily be found.

Does upstream even care about their licensing?

johannes

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to