[ 
https://issues.apache.org/jira/browse/LIVY-985?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17768086#comment-17768086
 ] 

Damon Cortesi commented on LIVY-985:
------------------------------------

As part of [https://github.com/apache/incubator-livy/pull/421] was able to 
remove some of these, but we still have a few left. 

  GNU Lesser General Public License (LGPL), Version 2.1:

    * JAX-RS provider for JSON content type 
(org.codehaus.jackson:jackson-jaxrs:1.8.3 - http://jackson.codehaus.org)
    * Xml Compatibility extensions for Jackson 
(org.codehaus.jackson:jackson-xc:1.8.3 - http://jackson.codehaus.org)

  GPL2 w/ CPE:

    * JAXB RI (com.sun.xml.bind:jaxb-impl:2.2.3-1 - http://jaxb.java.net/)
    * javax.ws.rs-api (javax.ws.rs:javax.ws.rs-api:2.0.1 - 
http://jax-rs-spec.java.net)
    * jersey-core (com.sun.jersey:jersey-core:1.9 - 
https://jersey.java.net/jersey-core/)
    * jersey-guice (com.sun.jersey.contribs:jersey-guice:1.9 - 
https://jersey.java.net/jersey-contribs/jersey-guice/)
    * jersey-json (com.sun.jersey:jersey-json:1.9 - 
https://jersey.java.net/jersey-json/)
    * jersey-server (com.sun.jersey:jersey-server:1.9 - 
https://jersey.java.net/jersey-server/)

That said, these are all dual-licensed so I will add appropriate 
document/process to the release process to indicate as such. In the future, we 
could potentially upgrade to the latest version (2.2.0) of license-maven-plugin 
as it supports an `overrideFile` feature that allows us to specify the desired 
license. Unfortunately it also requires an update to maven.

For the time being, documenting here the preferred license for the above.

- Jersey dependences (jersey-core, jersey-guice, jersey-json, jersey-server): 
Eclipse Public License - v 2.0
- javax.ws.rs-api: CDDL 1.1
- JAXB RI: CDDL 1.1
- Jackson dependencies (jackson-jaxrs, jackson-xc): Apache 2.0

> Category X licenses in binary distribution
> ------------------------------------------
>
>                 Key: LIVY-985
>                 URL: https://issues.apache.org/jira/browse/LIVY-985
>             Project: Livy
>          Issue Type: Task
>          Components: Build
>    Affects Versions: 0.8.0
>            Reporter: Damon Cortesi
>            Assignee: Damon Cortesi
>            Priority: Major
>             Fix For: 0.8.0
>
>
> From the [VOTE 
> thread|https://lists.apache.org/thread/k01z56h2fjr8k80c9z0nz6nqx5l97bh8] 
> there are several GPL and LGPL licensed jars in the zip.
> [https://www.apache.org/legal/resolved.html#category-x]
> GNU General Public Library:
>  * Streaming API for XML (javax.xml.stream:stax-api:1.0-2 - no url defined)
> GNU Lesser General Public License (LGPL), Version 2.1:
>  * JAX-RS provider for JSON content type 
> (org.codehaus.jackson:jackson-jaxrs:1.8.3 - 
> [http://jackson.codehaus.org|http://jackson.codehaus.org/])
>  * Xml Compatibility extensions for Jackson 
> (org.codehaus.jackson:jackson-xc:1.8.3 - 
> [http://jackson.codehaus.org|http://jackson.codehaus.org/])
> GPL:
>  * JTransforms (com.github.rwl:jtransforms:2.4.0 - 
> [http://sourceforge.net/projects/jtransforms/])
> GPL2 w/ CPE:
>  * JAXB API bundle for GlassFish V3 (javax.xml.bind:jaxb-api:2.2.2 
> [https://jaxb.dev.java.net/])
>  * JAXB RI (com.sun.xml.bind:jaxb-impl:2.2.3-1 - [http://jaxb.java.net/])
>  * javax.ws.rs-api (javax.ws.rs:javax.ws.rs-api:2.0.1 
> -[http://jax-rs-spec.java.net|http://jax-rs-spec.java.net/])
>  * jersey-client (com.sun.jersey:jersey-client:1.9 
> -[https://jersey.java.net/jersey-client/])
>  * jersey-core (com.sun.jersey:jersey-core:1.9 
> -[https://jersey.java.net/jersey-core/])
>  * jersey-guice (com.sun.jersey.contribs:jersey-guice:1.9 - 
> [https://jersey.java.net/jersey-contribs/jersey-guice/])
>  * jersey-json (com.sun.jersey:jersey-json:1.9 - 
> [https://jersey.java.net/jersey-json/])
>  * jersey-server (com.sun.jersey:jersey-server:1.9 - 
> [https://jersey.java.net/jersey-server/])
> LGPL:
>  * JTransforms (com.github.rwl:jtransforms:2.4.0 - 
> [http://sourceforge.net/projects/jtransforms/])
> LGPL 2.1:
>  * Javassist (org.javassist:javassist:3.18.1-GA - [http://www.javassist.org/])
>  
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to