[jira] [Created] (HBASE-22286) License handling incorrectly lists CDDL/GPLv2+CE as safe to not aggregate

["Sean Busbey (JIRA)" <ji...@apache.org>]

Sean Busbey created HBASE-22286:
-----------------------------------

             Summary: License handling incorrectly lists CDDL/GPLv2+CE as safe to not aggregate
                 Key: HBASE-22286
                 URL: https://issues.apache.org/jira/browse/HBASE-22286
             Project: HBase
          Issue Type: Bug
          Components: build, community
    Affects Versions: 3.0.0, 2.3.0, 2.1.5, 2.2.1
            Reporter: Sean Busbey
            Assignee: Sean Busbey


The template LICENSE/NOTICE stuff currently has cddl/gplv2+ce listed as an acceptable license for dependencies for individual listing.

LICENSE.vm
{code}
## Whitelist of lower-case licenses that it's safe to not aggregate as above.
## Note that this doesn't include ALv2 or the aforementioned aggregate
## license mentions.
##
## See this FAQ link for justifications: https://www.apache.org/legal/resolved.html
##
## NB: This list is later compared as lower-case. New entries must also be all lower-case
#set($non_aggregate_fine = [ 'public domain', 'new bsd license', 'bsd license', 'bsd', 'bsd 2-clause license', 'mozilla public license version 1.1', 'mozilla public license version 2.0', 'creative commons attribution license, version 2.5', 'cddl/gplv2+ce' ])
{code}

This is not correct. We have to expressly say we're using the CDDL license for those works because we can't provide downstream with the option of GPLv2+CE. Also we have aggregate licensing handling for CDDL licensed works and this is making us miss times when dependencies are supposed to show up under one of them.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)