[jira] [Commented] (LEGAL-572) Is an ASF project allowed to depend on Python chardet (LGPL 2.1)

["Tomaz Muraus (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/LEGAL-572?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17442452#comment-17442452 ] 

Tomaz Muraus commented on LEGAL-572:
------------------------------------

Just a quick note from apache-libcloud perspective.

 

We wanted to release that change (require requests >= 2.26.0 under Python >= 3.6), but it's turning out it will likely break many user installations (aka they won't be able to upgrade to the latest version of Libcloud in case they require older / conflicting version of requests in their app - and sadly that's quite common) and we will need to revert that change.

 

Strict pinning like that would work fine and be a good idea for applications, but Libcloud is a library which is used by various applications and other projects which depend on many other dependencies in addition to Libcloud inside the same (virtual) environment where there is a high chance for conflicting dependency version requirement.

 

https://github.com/apache/libcloud/issues/1594#issuecomment-966627964
 
 
 

> Is an ASF project allowed to depend on Python chardet (LGPL 2.1)
> ----------------------------------------------------------------
>
>                 Key: LEGAL-572
>                 URL: https://issues.apache.org/jira/browse/LEGAL-572
>             Project: Legal Discuss
>          Issue Type: Question
>            Reporter: Sebb
>            Priority: Major
>
> The Python module chardet is licensed under LGPL 2.1 [1].
> A project is licensed under AL 2.0 can have an optional dependency on it [2], but
> can it depend unconditionally on the module?
> I have been told that this is covered by the section [3], but this appears to contradict [2].
> [1] https://github.com/chardet/chardet
> [2] https://www.apache.org/legal/resolved.html#optional
> [3] https://www.apache.org/legal/resolved.html#prohibited



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org