You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "Jan Lahoda (Jira)" <ji...@apache.org> on 2024/02/06 12:32:00 UTC
[jira] [Comment Edited] (MNG-8042) The license for 'apache-maven-3.9.6/lib/httpclient-4.5.14.jar' is not correct
[ https://issues.apache.org/jira/browse/MNG-8042?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17814774#comment-17814774 ]
Jan Lahoda edited comment on MNG-8042 at 2/6/24 12:31 PM:
----------------------------------------------------------
The situation is the same for:
[https://repo1.maven.org/maven2/org/apache/httpcomponents/httpclient/4.5.14/httpclient-4.5.14.jar|https://repo1.maven.org/maven2/org/apache/httpcomponents/httpclient/4.5.14/httpclient-4.5.14.jar.]
which is the one used by Maven. I just didn't list all the version affected by this (many more may be affected as well, but checking all versions seems a bit unnecessary to me).
(I've updated the linked bug to also include 4.5.14.)
was (Author: jlahoda):
The situation is the same for:
[https://repo1.maven.org/maven2/org/apache/httpcomponents/httpclient/4.5.14/httpclient-4.5.14.jar|https://repo1.maven.org/maven2/org/apache/httpcomponents/httpclient/4.5.14/httpclient-4.5.14.jar.]
which is the one used by Maven. I just didn't list all the version affected by this (many more may be affected as well, but checking all versions seems a bit unnecessary to me).
> The license for 'apache-maven-3.9.6/lib/httpclient-4.5.14.jar' is not correct
> -----------------------------------------------------------------------------
>
> Key: MNG-8042
> URL: https://issues.apache.org/jira/browse/MNG-8042
> Project: Maven
> Issue Type: Bug
> Components: Bootstrap & Build
> Affects Versions: 3.9.6
> Reporter: Jan Lahoda
> Priority: Major
>
> Inside the Maven distribution 3.9.6:
> https://dlcdn.apache.org/maven/maven-3/3.9.6/binaries/apache-maven-3.9.6-bin.tar.gz
> There is file: 'apache-maven-3.9.6/lib/httpclient-4.5.14.jar', and the adjacent license is only Apache 2.0. That is not quite correct, the file contains 'mozilla/public-suffix-list.txt', which is under MPL 2.0.
> It would be nice if the license could be fixed in the distribution.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)