[ https://issues.apache.org/jira/browse/MJAVADOC-669?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17261386#comment-17261386 ]
Michael Osipov edited comment on MJAVADOC-669 at 1/8/21, 3:59 PM: ------------------------------------------------------------------ This applies to Java 11+. Ugly, but very likely true: {noformat} osipovmi@deblndw011x:~/var/Projekte/maven/maven-model/target/site/apidocs (master=) $ tree -s . ├── [ 8508] allclasses-frame.html ├── [ 22863] allclasses-index.html ├── [ 7408] allclasses-noframe.html ├── [ 7841] allclasses.html ├── [ 5606] allpackages-index.html ├── [ 6809] constant-values.html ├── [ 9553] deprecated-list.html ├── [ 83] element-list ├── [ 10303] help-doc.html ├── [ 392738] index-all.html ├── [ 5540] index.html ├── [ 207] javadoc.sh ├── [ 512] jquery │ ├── [ 512] external │ │ └── [ 512] jquery │ │ └── [ 287630] jquery.js │ ├── [ 512] images │ │ ├── [ 335] ui-bg_glass_55_fbf9ee_1x400.png │ │ ├── [ 262] ui-bg_glass_65_dadada_1x400.png │ │ ├── [ 262] ui-bg_glass_75_dadada_1x400.png │ │ ├── [ 262] ui-bg_glass_75_e6e6e6_1x400.png │ │ ├── [ 332] ui-bg_glass_95_fef1ec_1x400.png │ │ ├── [ 280] ui-bg_highlight-soft_75_cccccc_1x100.png │ │ ├── [ 6922] ui-icons_222222_256x240.png │ │ ├── [ 4549] ui-icons_2e83ff_256x240.png │ │ ├── [ 6992] ui-icons_454545_256x240.png │ │ ├── [ 6999] ui-icons_888888_256x240.png │ │ └── [ 4549] ui-icons_cd0a0a_256x240.png │ ├── [ 287630] jquery-3.5.1.js │ ├── [ 20275] jquery-ui.css │ ├── [ 71563] jquery-ui.js │ ├── [ 17416] jquery-ui.min.css │ ├── [ 32162] jquery-ui.min.js │ ├── [ 2555] jquery-ui.structure.css │ ├── [ 1787] jquery-ui.structure.min.css │ ├── [ 512] jszip │ │ └── [ 512] dist │ │ ├── [ 366226] jszip.js │ │ └── [ 95827] jszip.min.js │ └── [ 512] jszip-utils │ └── [ 512] dist │ ├── [ 2444] jszip-utils-ie.js │ ├── [ 1610] jszip-utils-ie.min.js │ ├── [ 4483] jszip-utils.js │ └── [ 1777] jszip-utils.min.js ├── [ 125654] member-search-index.js ├── [ 9252] member-search-index.zip ├── [ 848] options ├── [ 1066] overview-frame.html ├── [ 690] overview-summary.html ├── [ 22910] overview-tree.html ├── [ 83] package-list ├── [ 181] package-search-index.js ├── [ 254] package-search-index.zip ├── [ 82] packages ├── [ 512] resources │ ├── [ 499] glass.png │ └── [ 394] x.png ├── [ 6040] script.js ├── [ 13299] search.js ├── [ 117933] serialized-form.html ├── [ 22271] stylesheet.css ├── [ 2948] type-search-index.js └── [ 634] type-search-index.zip 9 directories, 55 files {noformat} All of those are provided by Oracle, even worse two times: min and standard size. JQeury isn't even minimized. I'd like to escalate this to Rory O'Donnell rather that us because we would only fix the symptom, not the cause. Generated with: {noformat} Apache Maven 3.5.4 (1edded0938998edf8bf061f1ceb3cfdeccf443fe; 2018-06-17T20:33:14+02:00) Maven home: /usr/local/apache-maven-3.5.4 Java version: 11.0.9, vendor: OpenJDK BSD Porting Team, runtime: /usr/local/openjdk11 Default locale: de_DE, platform encoding: UTF-8 OS name: "freebsd", version: "12.2-stable", arch: "amd64", family: "unix" {noformat} was (Author: michael-o): This applies to Java 11+. Ugly, but very likely true: {noformat} osipovmi@deblndw011x:~/var/Projekte/maven/maven-model/target/site/apidocs (master=) $ tree -s . ├── [ 8508] allclasses-frame.html ├── [ 22863] allclasses-index.html ├── [ 7408] allclasses-noframe.html ├── [ 7841] allclasses.html ├── [ 5606] allpackages-index.html ├── [ 6809] constant-values.html ├── [ 9553] deprecated-list.html ├── [ 83] element-list ├── [ 10303] help-doc.html ├── [ 392738] index-all.html ├── [ 5540] index.html ├── [ 207] javadoc.sh ├── [ 512] jquery │ ├── [ 512] external │ │ └── [ 512] jquery │ │ └── [ 287630] jquery.js │ ├── [ 512] images │ │ ├── [ 335] ui-bg_glass_55_fbf9ee_1x400.png │ │ ├── [ 262] ui-bg_glass_65_dadada_1x400.png │ │ ├── [ 262] ui-bg_glass_75_dadada_1x400.png │ │ ├── [ 262] ui-bg_glass_75_e6e6e6_1x400.png │ │ ├── [ 332] ui-bg_glass_95_fef1ec_1x400.png │ │ ├── [ 280] ui-bg_highlight-soft_75_cccccc_1x100.png │ │ ├── [ 6922] ui-icons_222222_256x240.png │ │ ├── [ 4549] ui-icons_2e83ff_256x240.png │ │ ├── [ 6992] ui-icons_454545_256x240.png │ │ ├── [ 6999] ui-icons_888888_256x240.png │ │ └── [ 4549] ui-icons_cd0a0a_256x240.png │ ├── [ 287630] jquery-3.5.1.js │ ├── [ 20275] jquery-ui.css │ ├── [ 71563] jquery-ui.js │ ├── [ 17416] jquery-ui.min.css │ ├── [ 32162] jquery-ui.min.js │ ├── [ 2555] jquery-ui.structure.css │ ├── [ 1787] jquery-ui.structure.min.css │ ├── [ 512] jszip │ │ └── [ 512] dist │ │ ├── [ 366226] jszip.js │ │ └── [ 95827] jszip.min.js │ └── [ 512] jszip-utils │ └── [ 512] dist │ ├── [ 2444] jszip-utils-ie.js │ ├── [ 1610] jszip-utils-ie.min.js │ ├── [ 4483] jszip-utils.js │ └── [ 1777] jszip-utils.min.js ├── [ 125654] member-search-index.js ├── [ 9252] member-search-index.zip ├── [ 848] options ├── [ 1066] overview-frame.html ├── [ 690] overview-summary.html ├── [ 22910] overview-tree.html ├── [ 83] package-list ├── [ 181] package-search-index.js ├── [ 254] package-search-index.zip ├── [ 82] packages ├── [ 512] resources │ ├── [ 499] glass.png │ └── [ 394] x.png ├── [ 6040] script.js ├── [ 13299] search.js ├── [ 117933] serialized-form.html ├── [ 22271] stylesheet.css ├── [ 2948] type-search-index.js └── [ 634] type-search-index.zip 9 directories, 55 files {noformat} All of those are provided by Oracle, even worse two times: min and standard size. JQeury isn't even minimized. I'd like to escalate this to Rory O'Donnell rather that us because we would only fix the symptom, not the cause. > Generated javadoc JARs contain jQuery and other MIT-licenced works without > reproducing a copy of the MIT licence, same for GPL-licenced works > --------------------------------------------------------------------------------------------------------------------------------------------- > > Key: MJAVADOC-669 > URL: https://issues.apache.org/jira/browse/MJAVADOC-669 > Project: Maven Javadoc Plugin > Issue Type: Bug > Components: javadoc > Affects Versions: 3.2.0 > Reporter: Thorsten Glaser > Priority: Blocker > Labels: legal, licensing > > A javadoc JAR generated by the Maven Javadoc Plugin 3.2.0 contains multiple > components under the MIT licence: > * jQuery 3.5.1 > ** {{jquery/external/jquery/jquery.js}} > ** {{jquery/jquery-3.5.1.js}} (duplicate of the above, blowing up the PKZIP > archive size of the JAR, why is it included like this?) > * JSZip 3.2.1 > ** {{jquery/jszip/dist/jszip.js}} > ** {{jquery/jszip-utils/dist/jszip-utils-ie.js}} > ** {{jquery/jszip-utils/dist/jszip-utils.js}}{{}} > * jQuery UI 1.12.1 > ** {{jquery/jquery-ui.css}} > ** {{jquery/jquery-ui.js}} > ** {{jquery/jquery-ui.structure.css}} > * and their respective minified versions > It also contains {{script.js}} and {{search.js}} which are > GPLv2-with-Classpath-exception-licenced and refer to “as provided by Oracle > in the LICENSE file that accompanied this code” but no such file accompanies > said code. > There are also multiple static {{resources}} and {{jquery/images}} whose > licence is not documented. > The MIT licence specifically *requires* that “The […] copyright notice and > this permission notice [the licence body] shall be included in all copies or > substantial portions of the Software.” The distribution PKZIP archives (JAR > files) created by the Maven Javadoc Plugin violate this licence, making them > not redistributable. > Similarily, the GPLv2 used by the Oracle-provided files *requires* that > redistributors “give any other recipients of the Program a copy of this > License along with the Program.” The “if not, write to the Free Software > Foundation” comment is specifically *not sufficient* for this and only > provided as fallback should distributors violate this clause, as Maven > Javadoc Plugin-generated PKZIP archives do. To be effective, the Classpath > exception must also be provided. > h2. Suggested fix > Include the following new files: > * {{jquery/LICENCE}} containing the MIT licence and all respective copyright > notices for the various jQuery-related projects (including those _they_ > include, i.e. Sizzle, widget.js, position.js, keycode.js, unique-id.js, > widgets/autocomplete.js, widgets/menu.js, pako, and possibly others) > * {{js/LICENSE}} (creating a new subdirectory) containing the Classpath > exception as provided by Oracle > * {{COPYING}} or {{js/COPYING}} (this being the customary name for this > file) containing the verbatim text of the GNU GPL version 2 > * Ideally, add a top-level {{LICENCE}} file pointing out those three and > briefly documenting the licence of all other nōn-generated files and state > all other files are generated from the original project and share its licence -- This message was sent by Atlassian Jira (v8.3.4#803005)