[jira] Commented: (PDFBOX-366) License review

["Jukka Zitting (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/PDFBOX-366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12633073#action_12633073 ] 

Jukka Zitting commented on PDFBOX-366:
--------------------------------------

As an update, I've already cleared the external libraries (see below for JAI) and I'm currently working on embedded resources and test files.

Java Advanced Imaging (JAI) components are included in PDFBox as the Java implementation in externals/jai_*.jar and as the ICC profiles in src/main/resources/Resources/colorspace-profiles. The licensing of these components (the Sun Binary Code License) conflicts with Apache policies, and thus we can't distribute them in Apache releases. I'll start a discussion on the mailing list about what to do with this issue.

For the resources, see the following issues I raised with the Apache legal team about the licensing of specific items we include. My understanding is that all of these should be OK for us to distribute, but it's better to have an official approval.

   * LEGAL-35 PDF core font metrics from Adobe
   * LEGAL-36 CMaps for PDF CJK Fonts
   * LEGAL-38 Bitstream Vera Fonts

The test files under pdfbox/trunk/test are an interesting issue. There we have a wide variety of different real-world PDF documents. This is a great test suite, but a bit problematic from a licensing point of view. At least the files in test/encryption, test/input, and test/pdfparser don't seem to come with licensing or copyright information. I'll raise also this issue on the mailing list.



> License review
> --------------
>
>                 Key: PDFBOX-366
>                 URL: https://issues.apache.org/jira/browse/PDFBOX-366
>             Project: PDFBox
>          Issue Type: Task
>            Reporter: Jukka Zitting
>            Priority: Blocker
>             Fix For: 0.8.0-incubator
>
>
> Before doing the first Apache release, we need to review the licensing of all dependencies and components included in PDFBox for compliance with Apache policies. Also, any required copyright attributions should be included in the NOTICE file.
> See:
>     http://www.apache.org/legal/resolved.html
>     http://www.apache.org/legal/3party.html
>     http://www.apache.org/legal/src-headers.html

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.