You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@rya.apache.org by David Lotts <dl...@gmail.com> on 2016/09/13 21:46:16 UTC

RYA-179 Review License / Copyright notices on Rya Artifacts

This issue is a release blocker:
<https://issues.apache.org/jira/browse/RYA-179>

RYA-179 <https://issues.apache.org/jira/browse/RYA-179> Review License /
Copyright notices on Rya Artifacts

I was able to create a 3rd party dependency license report for Rya
from the license
maven plugin.
<http://www.mojohaus.org/license-maven-plugin/>

Good: I can send the full list if you like.  Mostly ASL and clearly
permitted.

Okay: A number of CDDL and CPL licenses -- permitted if no source code is
included.

Needs Improvement: The following are not clearly permitted licenses:

     (cern.colt MIT license see
https://dst.lbl.gov/ACSSoftware/colt/license.html) colt (colt:colt:1.2.0 -
no url defined)
         -- this is a mistake, should be  java.util.Arrays, not
cern.colt.Arrays  -- creating an issue to eliminate dependency.
     (GNU LESSER GENERAL PUBLIC LICENSE) JCalendar
(com.toedter:jcalendar:1.1.4 - http://www.toedter.com/en/jcalendar/)
     (Lesser General Public License (LGPL)) JTS Topology Suite
(com.vividsolutions:jts:1.13 -
http://sourceforge.net/projects/jts-topo-suite)
     (Lesser General Public License (LGPL)) Image I/O-Extensions - GeoCore
(it.geosolutions.imageio-ext:imageio-ext-geocore:1.1.13 - no url defined)
     (Lesser General Public License (LGPL)) Image I/O-Extensions - Custom
Streams (it.geosolutions.imageio-ext:imageio-ext-streams:1.1.13 - no url
defined)
     (Lesser General Public License (LGPL)) Improved TIFF Plugin
(it.geosolutions.imageio-ext:imageio-ext-tiff:1.1.13 - no url defined)
     (Lesser General Public License (LGPL)) Image I/O-Extensions -
utilities classes and methods
(it.geosolutions.imageio-ext:imageio-ext-utilities:1.1.13 - no url defined)
     (Unknown license) jai_codec (javax.media:jai_codec:1.1.3 - no url
defined)
     (Unknown license) jai_core (javax.media:jai_core:1.1.3 - no url
defined)
     (Unknown license) jai_imageio (javax.media:jai_imageio:1.1 - no url
defined)
     (Unknown license) jgridshift (jgridshift:jgridshift:1.0 - no url
defined)
     (GNU Lesser General Public License) Remote Tea Runtime
(org.acplt:oncrpc:1.0.7 - http://remotetea.sourceforge.net/)
     (Unknown license) Antlr 3.4 Runtime (org.antlr:antlr-runtime:3.4 -
http://www.antlr.org)
     (Unknown license) Jettison (org.codehaus.jettison:jettison:1.1 - no
url defined)
     (Lesser General Public License (LGPL)) API interfaces
(org.geotools:gt-api:14.3 - no url defined)
     (Lesser General Public License (LGPL)) Grid Coverage module
(org.geotools:gt-coverage:14.3 - no url defined)
     (Lesser General Public License (LGPL)) OGC CQL to Filter parser
(org.geotools:gt-cql:14.1 - no url defined)
     (Lesser General Public License (LGPL)) DataStore Support
(org.geotools:gt-data:14.1 - no url defined)
     (Lesser General Public License (LGPL)) Feature Based Graphs and
Networks (org.geotools:gt-graph:14.3 - no url defined)
     (Lesser General Public License (LGPL)) Vector grids
(org.geotools:gt-grid:14.1 - no url defined)
     (Lesser General Public License (LGPL)) Main module
(org.geotools:gt-main:14.1 - no url defined)
     (Lesser General Public License (LGPL)) Metadata
(org.geotools:gt-metadata:14.1 - no url defined)
     (Lesser General Public License (LGPL)) (OGC copyright) Open GIS
Interfaces (org.geotools:gt-opengis:14.1 - no url defined)
     (Lesser General Public License (LGPL)) Process
(org.geotools:gt-process:14.1 - no url defined)
     (Lesser General Public License (LGPL)) Process Feature
(org.geotools:gt-process-feature:14.1 - no url defined)
     (Lesser General Public License (LGPL)) Referencing services
(org.geotools:gt-referencing:14.3 - no url defined)
     (Lesser General Public License (LGPL)) Render
(org.geotools:gt-render:14.1 - no url defined)
     (Lesser General Public License (LGPL)) Shapefile module
(org.geotools:gt-shapefile:14.1 - no url defined)
     (Lesser General Public License (LGPL)) Feature transforming feature
source wrapper (org.geotools:gt-transform:14.1 - no url defined)
     (Lesser General Public License (LGPL)) XML Parsing
(org.geotools.xsd:gt-xsd-core:14.3 - no url defined)
     (Lesser General Public License (LGPL)) GML2 XML Support
(org.geotools.xsd:gt-xsd-gml2:14.3 - no url defined)
     (Lesser General Public License (LGPL)) GML3 XML Support
(org.geotools.xsd:gt-xsd-gml3:14.3 - no url defined)

david.

Re: RYA-179 Review License / Copyright notices on Rya Artifacts

Posted by Jim Hughes <jn...@ccri.com>.

Hi all,

The two projects are very similar.  I'd note that GeoMesa has an Apache 
2 license as well [1], so that wouldn't be the main issue.

Since this is a licensing issue, I'd point out that GeoMesa has been 
completely vetted through Eclipse's IP / license review process. GeoWave 
hasn't started that process at LocationTech.

In my opinion, it might be useful to wait for them to work through their 
dependency list before sorting out an integration.  The exclusions that 
David mentioned were due to working through Eclipse's process.  The list 
of X licenses for Apache are also verboten in LocationTech land.

Cheers,

Jim

1. https://github.com/locationtech/geomesa/blob/master/LICENSE.txt

On 09/15/2016 09:11 AM, Aaron D. Mihalik wrote:
> Geowave includes geotools [1]
>
> [1] https://github.com/ngageoint/geowave/blob/master/pom.xml#L208
>
> On Thu, Sep 15, 2016 at 8:59 AM Puja Valiyil <pu...@gmail.com> wrote:
>
>> I guess my point is that the average user doesn't want these capabilities.
>> We removed the profile to make build process easier, but the main reason we
>> had it to begin with was because they are optional extensions that can
>> complicate licensing and add a lot of unwanted dependencies.
>> The other option we have would be to swap geomesa with geowave [1].
>> Geowave has an apache 2 license [2] and so all the dependencies that brings
>> in should be ok.  We've talked about adding GeoWave support a lot, so I
>> think that there is value outside of for licensing issues.  I don't think
>> it would be trivial to bring in GeoWave for Geomesa, so that might put
>> cutting a release on hold for a while.
>>
>> [1] https://github.com/ngageoint/geowave
>> [2] https://github.com/ngageoint/geowave/blob/master/LICENSE
>>
>>
>> On Thu, Sep 15, 2016 at 12:46 AM, Meier, Caleb <Ca...@parsons.com>
>> wrote:
>>
>>> While the indexer project extensions are optional in that they are turned
>>> off by default to minimize data plume, I would argue that they are not
>>> optional in the sense that Josh has described.  There is no other way to
>>> index/query for freetext, geospatial, and temporal data without these
>>> extensions.  So if a user wants these capabilities, they need the indexer
>>> project and all of the incompatibly licensed dependencies that come along
>>> with it.
>>> ________________________________________
>>> From: Puja Valiyil [pujav65@gmail.com]
>>> Sent: Wednesday, September 14, 2016 9:49 PM
>>> To: dev@rya.incubator.apache.org
>>> Cc: Billie Rinaldi
>>> Subject: Re: RYA-179 Review License / Copyright notices on Rya Artifacts
>>>
>>> The indexer project has a set of configurable optional extension to Rya.
>>> Things like support for geosparql, support for free text indexing, and
>>> support for precomputed joins (which is where the fluo integration comes
>>> in).  These are extensions that by default are turned off.  They can
>> really
>>> increase the data plume associated with some data, which is the main
>> reason
>>> why.
>>>
>>> In the original port into Apache, this project was only included if you
>>> specified that profile.  This was because we have traditionally
>> considered
>>> those features experimental and they bring in a lot of possibly unwanted
>>> dependencies.  Aaron refactored it to not be optional when he was
>> updating
>>> the pond to reference the Apache parent Pom.
>>> So no alternative, but functionality that a typical user may debatably
>> not
>>> want.
>>>
>>> Sent from my iPhone
>>>
>>>> On Sep 14, 2016, at 8:05 PM, Josh Elser <el...@apache.org> wrote:
>>>>
>>>> I would have said that this is only kosher when you have an alternative
>>> to the incompatibly licensed software. Is the indexer actually optional
>> (I
>>> don't have enough context)? Are there ways for me to to indexing of the
>>> same type of data that don't require use of these incompatible
>> dependencies?
>>>> Billie might be able to provide some more context too.
>>>>
>>>> Aaron D. Mihalik wrote:
>>>>>> Could we revive the indexer profile again?
>>>>> (tl;dr: Yes.  Mentors: Please correct us if we're wrong)
>>>>>
>>>>> This might be a solution.  I found a couple similar cases with Apache
>>>>> projects and discussions related to those cases.
>>>>>
>>>>> Apache Flink integrated with Amazon Kinesis [1] and [2].  Note that
>>> Kinesis
>>>>> is an optional profile, and it's well documented in the POM why it's
>>>>> optional.
>>>>>
>>>>> (Note that NiFi got around this by using Amazon's SDK for Java [3],
>>> which
>>>>> is purely Apache 2.0)
>>>>>
>>>>> Spark uses optional profiles to build artifacts based on LGPL
>>>>> dependencies.  Spark has to built by the user to use netlib [4][5],
>>> Ganglia
>>>>> [6], or Kinesis [6].
>>>>>
>>>>> I think a profile will work, but I'd like to see it well documented
>>> (both
>>>>> in the POM and manual) so that we never accidentally create a release
>>> with
>>>>> these artifacts.
>>>>>
>>>>> I was going to open a separate ticket to implement this, but I think
>>> it's
>>>>> good to track all of this effort under RYA-177.
>>>>>
>>>>> --Aaron
>>>>>
>>>>> [1]
>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
>>> com_apache_flink_blob_release-2D1.1.2_flink-2Dstreaming-
>>> 2Dconnectors_pom.xml-23L69&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>>> wnYDdDdgR8EEFav9sKC7ftd6ZjSJcOXU8FISG6jJMHc&e=
>>>>> [2]
>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
>>> com_apache_flink_blob_release-2D1.1.2_flink-2Dstreaming-
>>> 2Dconnectors_flink-2Dconnector-2Dkinesis_pom.xml-23L73&d=CwIFAg&c=Nwf-
>>> pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHC
>>> geo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>>> ZFTL5gQzyzLvRcWrafGrCobMJ8d1DWSmZlIVz9M7EuQ&e=
>>>>> [3] https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
>>> com_apache_nifi_blob_master_pom.xml-23L1316&d=CwIFAg&c=
>>> Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>>> 6pMGnZxiQccMUFNO18dbUc8luQrhNKa-XVCc1y_YlGg&e=
>>>>> [4] https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
>>> com_apache_spark_blob_v2.0.0_mllib_pom.xml-23L120&d=CwIFAg&
>>> c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=apxAyRJMc-
>>> jDvRpVzA6wFnuOjlNtFUKev9nXgiv79DM&e=
>>>>> [5]
>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
>>> com_apache_spark_blob_v2.0.0_docs_ml-2Dguide.md-
>>> 23dependencies&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=yFa0G6qUiJpaZxKA--
>>> 8iuH8m3hxgmutd-0ZD0B32268&e=
>>>>> [6] https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
>>> com_apache_spark_blob_v2.0.0_pom.xml-23L2414&d=CwIFAg&c=
>>> Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>>> 3xSSyDcql0fPyGpmzCoVV4W8Zgv2yHzm_HhKNhQahko&e=
>>>>> [7] https://urldefense.proofpoint.com/v2/url?u=https-3A__issues.
>>> apache.org_jira_browse_LEGAL-2D198&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>>> lyjGafTKlvfprCiiaEuPxZZql8RfTAqKuPm3VuGB87w&e=
>>>>> [8] https://urldefense.proofpoint.com/v2/url?u=https-3A__www.
>>> gnu.org_licenses_lgpl-2Djava.html&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=GRs3Rw_AG6rsk_
>>> mdzckqKUMoPYAt8c18d8gd5pBmiVI&e=
>>>>>
>>>>>
>>>>>> On Wed, Sep 14, 2016 at 12:09 PM David Lotts<dl...@gmail.com>
>> wrote:
>>>>>> Great find Aaron!
>>>>>> The ESRI library is quite comparable!
>>>>>>
>>>>>> Rya via Geomesa are using *JTS Topology Suite (*JTS): (the javadocs
>> at
>>>>>> vividsolutions seems to be 404 )
>>>>>>
>>>>>>
>>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__
>>> tsusiatsoftware.net_jts_javadoc_com_vividsolutions_
>>> jts_geom_Geometry.html&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=nscsppMk-
>>> bNMwHX82u4sd7VbUal5jIzdeuq34bmTwg0&e=
>>>>>> Far from a drop-in replacement, but a path forward:
>>>>>>      https://urldefense.proofpoint.com/v2/url?u=http-3A__esri.
>>> github.io_geometry-2Dapi-2Djava_javadoc_&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=2GWOgMrIQvSXFXooaOYQ_
>>> y0DQOPcK3xdpCXq0Iev1r0&e=
>>>>>> Interesting, ESRI has Shape file support, but no GML, the opposite of
>>> JTS!
>>>>>> david.
>>>>>>
>>>>>>
>>>>>> On Wed, Sep 14, 2016 at 10:29 AM, Aaron D. Mihalik<
>>>>>> aaron.mihalik@gmail.com>
>>>>>> wrote:
>>>>>>
>>>>>>> Yeah, that sounds possible. I don't like the idea of having to
>>> maintain
>>>>>>> another build/ci/release process, though.
>>>>>>>
>>>>>>> More importantly, we'd also have to modify our GeoIndexer interface
>>> [1]
>>>>>> to
>>>>>>> something Apache Friendly.  It looks like Ersi puts out an Apache
>> 2.0
>>>>>>> library [2].
>>>>>>>
>>>>>>> [1]
>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
>>> com_apache_incubator-2Drya_blob_master_&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>>> 2es83xf9omvbFNTaRU0pjHhcWJOjjVD4puEiCGAHTzo&e=
>>>>>>> extras/indexing/src/main/java/mvm/rya/indexing/GeoIndexer.java
>>>>>>> [2] https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
>>> com_Esri_geometry-2Dapi-2Djava&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>>> OxkKSfjgLWCFVHN9iHWYMWrc8zXsQFSQVeIg_IZln28&e=
>>>>>>>> On Tue, Sep 13, 2016 at 10:36 PM Jim Hughes<jn...@ccri.com>
>> wrote:
>>>>>>>> Hi Aaron,
>>>>>>>>
>>>>>>>> Thanks, wasn't finding that list quickly...
>>>>>>>>
>>>>>>>> It sounds like the GeoMesa/GeoTools usage might fall under this
>> Q/A:
>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.
>>> apache.org_legal_resolved.html-23optional&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>>> oonzG34DfvESxMKhzH3zwTAP8382Y074uyDImZlXj3w&e= .
>>>>>>>> Thoughts?
>>>>>>>>
>>>>>>>> Jim
>>>>>>>>
>>>>>>>>> On 9/13/2016 9:25 PM, Aaron D. Mihalik wrote:
>>>>>>>>> Jim,
>>>>>>>>>
>>>>>>>>> We've been working off of these lists:
>>>>>>>>>
>>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.
>>> apache.org_legal_resolved.html-23category-2Da&d=CwIFAg&
>>> c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=GxpBa_
>>> DXc5ciR7ABQlVXaoTyAHKRAcGQTdaeu9PRlMA&e=
>>>>>>>>>> On Tue, Sep 13, 2016 at 6:07 PM Jim Hughes<jn...@ccri.com>
>> wrote:
>>>>>>>>>> Hi David,
>>>>>>>>>>
>>>>>>>>>> A number of the geo-dependencies are likely from the geo-indexing
>>>>>>> (which
>>>>>>>>>> uses GeoMesa (Apache 2.0) which uses GeoTools and JTS).
>>>>>>>>>>
>>>>>>>>>> Are there options to make the geoindexing a profile, provide the
>>>>>>> source,
>>>>>>>>>> and not provide artifacts for that code at Apache?
>>>>>>>>>>
>>>>>>>>>> Also, is there a list of approved licenses for Apache projects
>>>>>>>>>> dependencies?
>>>>>>>>>>
>>>>>>>>>> Cheers,
>>>>>>>>>>
>>>>>>>>>> Jim
>>>>>>>>>>
>>>>>>>>>>> On 09/13/2016 05:46 PM, David Lotts wrote:
>>>>>>>>>>> This issue is a release blocker:
>>>>>>>>>>> <https://urldefense.proofpoint.com/v2/url?u=https-
>>> 3A__issues.apache.org_jira_browse_RYA-2D179&d=CwIFAg&c=
>>> Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>>> tv58xgiqgMT6McWRnFDk4mQv44be_F1AfRhHX4BITFU&e= >
>>>>>>>>>>> RYA-179<https://urldefense.proofpoint.com/v2/url?u=https-
>>> 3A__issues.apache.org_jira_browse_RYA-2D179&d=CwIFAg&c=
>>> Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>>> tv58xgiqgMT6McWRnFDk4mQv44be_F1AfRhHX4BITFU&e= >  Review
>>>>>>>> License /
>>>>>>>>>>> Copyright notices on Rya Artifacts
>>>>>>>>>>>
>>>>>>>>>>> I was able to create a 3rd party dependency license report for
>> Rya
>>>>>>>>>>> from the license
>>>>>>>>>>> maven plugin.
>>>>>>>>>>> <https://urldefense.proofpoint.com/v2/url?u=http-
>>> 3A__www.mojohaus.org_license-2Dmaven-2Dplugin_&d=CwIFAg&c=
>>> Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=uB2GXLB9U4r3d-
>>> 2p-1Knb2TtdALTX5Slxi2NDmVZnzU&e= >
>>>>>>>>>>> Good: I can send the full list if you like.  Mostly ASL and
>>> clearly
>>>>>>>>>>> permitted.
>>>>>>>>>>>
>>>>>>>>>>> Okay: A number of CDDL and CPL licenses -- permitted if no
>> source
>>>>>>> code
>>>>>>>> is
>>>>>>>>>>> included.
>>>>>>>>>>>
>>>>>>>>>>> Needs Improvement: The following are not clearly permitted
>>>>>> licenses:
>>>>>>>>>>>         (cern.colt MIT license see
>>>>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__dst.
>>> lbl.gov_ACSSoftware_colt_license.html&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=nkfTihZpFbwrq1xV6atJsaeFR_
>>> wV8Cs8BIfOM2LlV3c&e= ) colt
>>>>>>>>>> (colt:colt:1.2.0 -
>>>>>>>>>>> no url defined)
>>>>>>>>>>>             -- this is a mistake, should be  java.util.Arrays,
>> not
>>>>>>>>>>> cern.colt.Arrays  -- creating an issue to eliminate dependency.
>>>>>>>>>>>         (GNU LESSER GENERAL PUBLIC LICENSE) JCalendar
>>>>>>>>>>> (com.toedter:jcalendar:1.1.4 -
>>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.
>>> toedter.com_en_jcalendar_&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>>> xpan75i2SwtO0y9BvlBgDSIKOTgF5c1vBeBaydmmpzM&e= )
>>>>>>>>>>>         (Lesser General Public License (LGPL)) JTS Topology Suite
>>>>>>>>>>> (com.vividsolutions:jts:1.13 -
>>>>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__
>>> sourceforge.net_projects_jts-2Dtopo-2Dsuite&d=CwIFAg&c=Nwf-
>>> pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHC
>>> geo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=EE4WpoOm4n_
>>> 6riGjpReA3wZM6Jzt8hJRSVjDtFzFanQ&e= )
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Image
>> I/O-Extensions
>>>>>> -
>>>>>>>>>> GeoCore
>>>>>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-geocore:1.1.13 - no url
>>>>>>>> defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Image
>> I/O-Extensions
>>>>>> -
>>>>>>>>>> Custom
>>>>>>>>>>> Streams (it.geosolutions.imageio-ext:imageio-ext-streams:1.1.13
>> -
>>>>>> no
>>>>>>>> url
>>>>>>>>>>> defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Improved TIFF
>> Plugin
>>>>>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-tiff:1.1.13 - no url
>>>>>>> defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Image
>> I/O-Extensions
>>>>>> -
>>>>>>>>>>> utilities classes and methods
>>>>>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-utilities:1.1.13 - no
>>> url
>>>>>>>>>> defined)
>>>>>>>>>>>         (Unknown license) jai_codec (javax.media:jai_codec:1.1.3
>> -
>>>>>> no
>>>>>>>> url
>>>>>>>>>>> defined)
>>>>>>>>>>>         (Unknown license) jai_core (javax.media:jai_core:1.1.3 -
>> no
>>>>>>> url
>>>>>>>>>>> defined)
>>>>>>>>>>>         (Unknown license) jai_imageio
>> (javax.media:jai_imageio:1.1
>>> -
>>>>>>> no
>>>>>>>> url
>>>>>>>>>>> defined)
>>>>>>>>>>>         (Unknown license) jgridshift (jgridshift:jgridshift:1.0 -
>>> no
>>>>>>> url
>>>>>>>>>>> defined)
>>>>>>>>>>>         (GNU Lesser General Public License) Remote Tea Runtime
>>>>>>>>>>> (org.acplt:oncrpc:1.0.7 - https://urldefense.proofpoint.
>>> com/v2/url?u=http-3A__remotetea.sourceforge.net_&d=
>>> CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>>> EOLDxztEUSjsTNW2QH8XItlqpuIlH5n7_10fdLy8AKY&e= )
>>>>>>>>>>>         (Unknown license) Antlr 3.4 Runtime
>>>>>>>> (org.antlr:antlr-runtime:3.4 -
>>>>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.
>>> antlr.org&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>>> 6JePto8zpoeyNZtl0UNZILGSRA7EgcTN0JCrhpT9jHc&e= )
>>>>>>>>>>>         (Unknown license) Jettison (org.codehaus.jettison:
>>>>>>> jettison:1.1
>>>>>>>> - no
>>>>>>>>>>> url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) API interfaces
>>>>>>>>>>> (org.geotools:gt-api:14.3 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Grid Coverage
>> module
>>>>>>>>>>> (org.geotools:gt-coverage:14.3 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) OGC CQL to Filter
>>>>>>> parser
>>>>>>>>>>> (org.geotools:gt-cql:14.1 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) DataStore Support
>>>>>>>>>>> (org.geotools:gt-data:14.1 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Feature Based
>> Graphs
>>>>>>> and
>>>>>>>>>>> Networks (org.geotools:gt-graph:14.3 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Vector grids
>>>>>>>>>>> (org.geotools:gt-grid:14.1 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Main module
>>>>>>>>>>> (org.geotools:gt-main:14.1 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Metadata
>>>>>>>>>>> (org.geotools:gt-metadata:14.1 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) (OGC copyright)
>> Open
>>>>>>> GIS
>>>>>>>>>>> Interfaces (org.geotools:gt-opengis:14.1 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Process
>>>>>>>>>>> (org.geotools:gt-process:14.1 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Process Feature
>>>>>>>>>>> (org.geotools:gt-process-feature:14.1 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Referencing
>> services
>>>>>>>>>>> (org.geotools:gt-referencing:14.3 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Render
>>>>>>>>>>> (org.geotools:gt-render:14.1 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Shapefile module
>>>>>>>>>>> (org.geotools:gt-shapefile:14.1 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Feature
>> transforming
>>>>>>>> feature
>>>>>>>>>>> source wrapper (org.geotools:gt-transform:14.1 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) XML Parsing
>>>>>>>>>>> (org.geotools.xsd:gt-xsd-core:14.3 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) GML2 XML Support
>>>>>>>>>>> (org.geotools.xsd:gt-xsd-gml2:14.3 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) GML3 XML Support
>>>>>>>>>>> (org.geotools.xsd:gt-xsd-gml3:14.3 - no url defined)
>>>>>>>>>>>
>>>>>>>>>>> david.

Re: RYA-179 Review License / Copyright notices on Rya Artifacts

Posted by "Aaron D. Mihalik" <aa...@gmail.com>.

Geowave includes geotools [1]

[1] https://github.com/ngageoint/geowave/blob/master/pom.xml#L208

On Thu, Sep 15, 2016 at 8:59 AM Puja Valiyil <pu...@gmail.com> wrote:

> I guess my point is that the average user doesn't want these capabilities.
> We removed the profile to make build process easier, but the main reason we
> had it to begin with was because they are optional extensions that can
> complicate licensing and add a lot of unwanted dependencies.
> The other option we have would be to swap geomesa with geowave [1].
> Geowave has an apache 2 license [2] and so all the dependencies that brings
> in should be ok.  We've talked about adding GeoWave support a lot, so I
> think that there is value outside of for licensing issues.  I don't think
> it would be trivial to bring in GeoWave for Geomesa, so that might put
> cutting a release on hold for a while.
>
> [1] https://github.com/ngageoint/geowave
> [2] https://github.com/ngageoint/geowave/blob/master/LICENSE
>
>
> On Thu, Sep 15, 2016 at 12:46 AM, Meier, Caleb <Ca...@parsons.com>
> wrote:
>
> > While the indexer project extensions are optional in that they are turned
> > off by default to minimize data plume, I would argue that they are not
> > optional in the sense that Josh has described.  There is no other way to
> > index/query for freetext, geospatial, and temporal data without these
> > extensions.  So if a user wants these capabilities, they need the indexer
> > project and all of the incompatibly licensed dependencies that come along
> > with it.
> > ________________________________________
> > From: Puja Valiyil [pujav65@gmail.com]
> > Sent: Wednesday, September 14, 2016 9:49 PM
> > To: dev@rya.incubator.apache.org
> > Cc: Billie Rinaldi
> > Subject: Re: RYA-179 Review License / Copyright notices on Rya Artifacts
> >
> > The indexer project has a set of configurable optional extension to Rya.
> > Things like support for geosparql, support for free text indexing, and
> > support for precomputed joins (which is where the fluo integration comes
> > in).  These are extensions that by default are turned off.  They can
> really
> > increase the data plume associated with some data, which is the main
> reason
> > why.
> >
> > In the original port into Apache, this project was only included if you
> > specified that profile.  This was because we have traditionally
> considered
> > those features experimental and they bring in a lot of possibly unwanted
> > dependencies.  Aaron refactored it to not be optional when he was
> updating
> > the pond to reference the Apache parent Pom.
> > So no alternative, but functionality that a typical user may debatably
> not
> > want.
> >
> > Sent from my iPhone
> >
> > > On Sep 14, 2016, at 8:05 PM, Josh Elser <el...@apache.org> wrote:
> > >
> > > I would have said that this is only kosher when you have an alternative
> > to the incompatibly licensed software. Is the indexer actually optional
> (I
> > don't have enough context)? Are there ways for me to to indexing of the
> > same type of data that don't require use of these incompatible
> dependencies?
> > >
> > > Billie might be able to provide some more context too.
> > >
> > > Aaron D. Mihalik wrote:
> > >>> Could we revive the indexer profile again?
> > >>
> > >> (tl;dr: Yes.  Mentors: Please correct us if we're wrong)
> > >>
> > >> This might be a solution.  I found a couple similar cases with Apache
> > >> projects and discussions related to those cases.
> > >>
> > >> Apache Flink integrated with Amazon Kinesis [1] and [2].  Note that
> > Kinesis
> > >> is an optional profile, and it's well documented in the POM why it's
> > >> optional.
> > >>
> > >> (Note that NiFi got around this by using Amazon's SDK for Java [3],
> > which
> > >> is purely Apache 2.0)
> > >>
> > >> Spark uses optional profiles to build artifacts based on LGPL
> > >> dependencies.  Spark has to built by the user to use netlib [4][5],
> > Ganglia
> > >> [6], or Kinesis [6].
> > >>
> > >> I think a profile will work, but I'd like to see it well documented
> > (both
> > >> in the POM and manual) so that we never accidentally create a release
> > with
> > >> these artifacts.
> > >>
> > >> I was going to open a separate ticket to implement this, but I think
> > it's
> > >> good to track all of this effort under RYA-177.
> > >>
> > >> --Aaron
> > >>
> > >> [1]
> > >> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
> > com_apache_flink_blob_release-2D1.1.2_flink-2Dstreaming-
> > 2Dconnectors_pom.xml-23L69&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
> > LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> > USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
> > wnYDdDdgR8EEFav9sKC7ftd6ZjSJcOXU8FISG6jJMHc&e=
> > >> [2]
> > >> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
> > com_apache_flink_blob_release-2D1.1.2_flink-2Dstreaming-
> > 2Dconnectors_flink-2Dconnector-2Dkinesis_pom.xml-23L73&d=CwIFAg&c=Nwf-
> > pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHC
> > geo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
> > ZFTL5gQzyzLvRcWrafGrCobMJ8d1DWSmZlIVz9M7EuQ&e=
> > >>
> > >> [3] https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
> > com_apache_nifi_blob_master_pom.xml-23L1316&d=CwIFAg&c=
> > Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
> > vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> > USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
> > 6pMGnZxiQccMUFNO18dbUc8luQrhNKa-XVCc1y_YlGg&e=
> > >>
> > >> [4] https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
> > com_apache_spark_blob_v2.0.0_mllib_pom.xml-23L120&d=CwIFAg&
> > c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
> > vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> > USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=apxAyRJMc-
> > jDvRpVzA6wFnuOjlNtFUKev9nXgiv79DM&e=
> > >> [5]
> > >> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
> > com_apache_spark_blob_v2.0.0_docs_ml-2Dguide.md-
> > 23dependencies&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
> > vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> > USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=yFa0G6qUiJpaZxKA--
> > 8iuH8m3hxgmutd-0ZD0B32268&e=
> > >>
> > >> [6] https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
> > com_apache_spark_blob_v2.0.0_pom.xml-23L2414&d=CwIFAg&c=
> > Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
> > vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> > USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
> > 3xSSyDcql0fPyGpmzCoVV4W8Zgv2yHzm_HhKNhQahko&e=
> > >>
> > >> [7] https://urldefense.proofpoint.com/v2/url?u=https-3A__issues.
> > apache.org_jira_browse_LEGAL-2D198&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
> > LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> > USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
> > lyjGafTKlvfprCiiaEuPxZZql8RfTAqKuPm3VuGB87w&e=
> > >> [8] https://urldefense.proofpoint.com/v2/url?u=https-3A__www.
> > gnu.org_licenses_lgpl-2Djava.html&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
> > LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> > USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=GRs3Rw_AG6rsk_
> > mdzckqKUMoPYAt8c18d8gd5pBmiVI&e=
> > >>
> > >>
> > >>
> > >>> On Wed, Sep 14, 2016 at 12:09 PM David Lotts<dl...@gmail.com>
> wrote:
> > >>>
> > >>> Great find Aaron!
> > >>> The ESRI library is quite comparable!
> > >>>
> > >>> Rya via Geomesa are using *JTS Topology Suite (*JTS): (the javadocs
> at
> > >>> vividsolutions seems to be 404 )
> > >>>
> > >>>
> > >>> https://urldefense.proofpoint.com/v2/url?u=http-3A__
> > tsusiatsoftware.net_jts_javadoc_com_vividsolutions_
> > jts_geom_Geometry.html&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
> > LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> > USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=nscsppMk-
> > bNMwHX82u4sd7VbUal5jIzdeuq34bmTwg0&e=
> > >>>
> > >>> Far from a drop-in replacement, but a path forward:
> > >>>     https://urldefense.proofpoint.com/v2/url?u=http-3A__esri.
> > github.io_geometry-2Dapi-2Djava_javadoc_&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
> > LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> > USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=2GWOgMrIQvSXFXooaOYQ_
> > y0DQOPcK3xdpCXq0Iev1r0&e=
> > >>>
> > >>> Interesting, ESRI has Shape file support, but no GML, the opposite of
> > JTS!
> > >>> david.
> > >>>
> > >>>
> > >>> On Wed, Sep 14, 2016 at 10:29 AM, Aaron D. Mihalik<
> > >>> aaron.mihalik@gmail.com>
> > >>> wrote:
> > >>>
> > >>>> Yeah, that sounds possible. I don't like the idea of having to
> > maintain
> > >>>> another build/ci/release process, though.
> > >>>>
> > >>>> More importantly, we'd also have to modify our GeoIndexer interface
> > [1]
> > >>> to
> > >>>> something Apache Friendly.  It looks like Ersi puts out an Apache
> 2.0
> > >>>> library [2].
> > >>>>
> > >>>> [1]
> > >>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
> > com_apache_incubator-2Drya_blob_master_&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
> > LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> > USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
> > 2es83xf9omvbFNTaRU0pjHhcWJOjjVD4puEiCGAHTzo&e=
> > >>>> extras/indexing/src/main/java/mvm/rya/indexing/GeoIndexer.java
> > >>>> [2] https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
> > com_Esri_geometry-2Dapi-2Djava&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
> > LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> > USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
> > OxkKSfjgLWCFVHN9iHWYMWrc8zXsQFSQVeIg_IZln28&e=
> > >>>>
> > >>>>> On Tue, Sep 13, 2016 at 10:36 PM Jim Hughes<jn...@ccri.com>
> wrote:
> > >>>>>
> > >>>>> Hi Aaron,
> > >>>>>
> > >>>>> Thanks, wasn't finding that list quickly...
> > >>>>>
> > >>>>> It sounds like the GeoMesa/GeoTools usage might fall under this
> Q/A:
> > >>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.
> > apache.org_legal_resolved.html-23optional&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
> > LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> > USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
> > oonzG34DfvESxMKhzH3zwTAP8382Y074uyDImZlXj3w&e= .
> > >>>>>
> > >>>>> Thoughts?
> > >>>>>
> > >>>>> Jim
> > >>>>>
> > >>>>>> On 9/13/2016 9:25 PM, Aaron D. Mihalik wrote:
> > >>>>>> Jim,
> > >>>>>>
> > >>>>>> We've been working off of these lists:
> > >>>>>>
> > >>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.
> > apache.org_legal_resolved.html-23category-2Da&d=CwIFAg&
> > c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
> > vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> > USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=GxpBa_
> > DXc5ciR7ABQlVXaoTyAHKRAcGQTdaeu9PRlMA&e=
> > >>>>>>
> > >>>>>>> On Tue, Sep 13, 2016 at 6:07 PM Jim Hughes<jn...@ccri.com>
> wrote:
> > >>>>>>>
> > >>>>>>> Hi David,
> > >>>>>>>
> > >>>>>>> A number of the geo-dependencies are likely from the geo-indexing
> > >>>> (which
> > >>>>>>> uses GeoMesa (Apache 2.0) which uses GeoTools and JTS).
> > >>>>>>>
> > >>>>>>> Are there options to make the geoindexing a profile, provide the
> > >>>> source,
> > >>>>>>> and not provide artifacts for that code at Apache?
> > >>>>>>>
> > >>>>>>> Also, is there a list of approved licenses for Apache projects
> > >>>>>>> dependencies?
> > >>>>>>>
> > >>>>>>> Cheers,
> > >>>>>>>
> > >>>>>>> Jim
> > >>>>>>>
> > >>>>>>>> On 09/13/2016 05:46 PM, David Lotts wrote:
> > >>>>>>>> This issue is a release blocker:
> > >>>>>>>> <https://urldefense.proofpoint.com/v2/url?u=https-
> > 3A__issues.apache.org_jira_browse_RYA-2D179&d=CwIFAg&c=
> > Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
> > vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> > USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
> > tv58xgiqgMT6McWRnFDk4mQv44be_F1AfRhHX4BITFU&e= >
> > >>>>>>>>
> > >>>>>>>> RYA-179<https://urldefense.proofpoint.com/v2/url?u=https-
> > 3A__issues.apache.org_jira_browse_RYA-2D179&d=CwIFAg&c=
> > Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
> > vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> > USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
> > tv58xgiqgMT6McWRnFDk4mQv44be_F1AfRhHX4BITFU&e= >  Review
> > >>>>> License /
> > >>>>>>>> Copyright notices on Rya Artifacts
> > >>>>>>>>
> > >>>>>>>> I was able to create a 3rd party dependency license report for
> Rya
> > >>>>>>>> from the license
> > >>>>>>>> maven plugin.
> > >>>>>>>> <https://urldefense.proofpoint.com/v2/url?u=http-
> > 3A__www.mojohaus.org_license-2Dmaven-2Dplugin_&d=CwIFAg&c=
> > Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
> > vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> > USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=uB2GXLB9U4r3d-
> > 2p-1Knb2TtdALTX5Slxi2NDmVZnzU&e= >
> > >>>>>>>>
> > >>>>>>>> Good: I can send the full list if you like.  Mostly ASL and
> > clearly
> > >>>>>>>> permitted.
> > >>>>>>>>
> > >>>>>>>> Okay: A number of CDDL and CPL licenses -- permitted if no
> source
> > >>>> code
> > >>>>> is
> > >>>>>>>> included.
> > >>>>>>>>
> > >>>>>>>> Needs Improvement: The following are not clearly permitted
> > >>> licenses:
> > >>>>>>>>        (cern.colt MIT license see
> > >>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__dst.
> > lbl.gov_ACSSoftware_colt_license.html&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
> > LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> > USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=nkfTihZpFbwrq1xV6atJsaeFR_
> > wV8Cs8BIfOM2LlV3c&e= ) colt
> > >>>>>>> (colt:colt:1.2.0 -
> > >>>>>>>> no url defined)
> > >>>>>>>>            -- this is a mistake, should be  java.util.Arrays,
> not
> > >>>>>>>> cern.colt.Arrays  -- creating an issue to eliminate dependency.
> > >>>>>>>>        (GNU LESSER GENERAL PUBLIC LICENSE) JCalendar
> > >>>>>>>> (com.toedter:jcalendar:1.1.4 -
> > >>> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.
> > toedter.com_en_jcalendar_&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
> > LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> > USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
> > xpan75i2SwtO0y9BvlBgDSIKOTgF5c1vBeBaydmmpzM&e= )
> > >>>>>>>>        (Lesser General Public License (LGPL)) JTS Topology Suite
> > >>>>>>>> (com.vividsolutions:jts:1.13 -
> > >>>>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__
> > sourceforge.net_projects_jts-2Dtopo-2Dsuite&d=CwIFAg&c=Nwf-
> > pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHC
> > geo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=EE4WpoOm4n_
> > 6riGjpReA3wZM6Jzt8hJRSVjDtFzFanQ&e= )
> > >>>>>>>>        (Lesser General Public License (LGPL)) Image
> I/O-Extensions
> > >>> -
> > >>>>>>> GeoCore
> > >>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-geocore:1.1.13 - no url
> > >>>>> defined)
> > >>>>>>>>        (Lesser General Public License (LGPL)) Image
> I/O-Extensions
> > >>> -
> > >>>>>>> Custom
> > >>>>>>>> Streams (it.geosolutions.imageio-ext:imageio-ext-streams:1.1.13
> -
> > >>> no
> > >>>>> url
> > >>>>>>>> defined)
> > >>>>>>>>        (Lesser General Public License (LGPL)) Improved TIFF
> Plugin
> > >>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-tiff:1.1.13 - no url
> > >>>> defined)
> > >>>>>>>>        (Lesser General Public License (LGPL)) Image
> I/O-Extensions
> > >>> -
> > >>>>>>>> utilities classes and methods
> > >>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-utilities:1.1.13 - no
> > url
> > >>>>>>> defined)
> > >>>>>>>>        (Unknown license) jai_codec (javax.media:jai_codec:1.1.3
> -
> > >>> no
> > >>>>> url
> > >>>>>>>> defined)
> > >>>>>>>>        (Unknown license) jai_core (javax.media:jai_core:1.1.3 -
> no
> > >>>> url
> > >>>>>>>> defined)
> > >>>>>>>>        (Unknown license) jai_imageio
> (javax.media:jai_imageio:1.1
> > -
> > >>>> no
> > >>>>> url
> > >>>>>>>> defined)
> > >>>>>>>>        (Unknown license) jgridshift (jgridshift:jgridshift:1.0 -
> > no
> > >>>> url
> > >>>>>>>> defined)
> > >>>>>>>>        (GNU Lesser General Public License) Remote Tea Runtime
> > >>>>>>>> (org.acplt:oncrpc:1.0.7 - https://urldefense.proofpoint.
> > com/v2/url?u=http-3A__remotetea.sourceforge.net_&d=
> > CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
> > vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> > USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
> > EOLDxztEUSjsTNW2QH8XItlqpuIlH5n7_10fdLy8AKY&e= )
> > >>>>>>>>        (Unknown license) Antlr 3.4 Runtime
> > >>>>> (org.antlr:antlr-runtime:3.4 -
> > >>>>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.
> > antlr.org&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
> > vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> > USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
> > 6JePto8zpoeyNZtl0UNZILGSRA7EgcTN0JCrhpT9jHc&e= )
> > >>>>>>>>        (Unknown license) Jettison (org.codehaus.jettison:
> > >>>> jettison:1.1
> > >>>>> - no
> > >>>>>>>> url defined)
> > >>>>>>>>        (Lesser General Public License (LGPL)) API interfaces
> > >>>>>>>> (org.geotools:gt-api:14.3 - no url defined)
> > >>>>>>>>        (Lesser General Public License (LGPL)) Grid Coverage
> module
> > >>>>>>>> (org.geotools:gt-coverage:14.3 - no url defined)
> > >>>>>>>>        (Lesser General Public License (LGPL)) OGC CQL to Filter
> > >>>> parser
> > >>>>>>>> (org.geotools:gt-cql:14.1 - no url defined)
> > >>>>>>>>        (Lesser General Public License (LGPL)) DataStore Support
> > >>>>>>>> (org.geotools:gt-data:14.1 - no url defined)
> > >>>>>>>>        (Lesser General Public License (LGPL)) Feature Based
> Graphs
> > >>>> and
> > >>>>>>>> Networks (org.geotools:gt-graph:14.3 - no url defined)
> > >>>>>>>>        (Lesser General Public License (LGPL)) Vector grids
> > >>>>>>>> (org.geotools:gt-grid:14.1 - no url defined)
> > >>>>>>>>        (Lesser General Public License (LGPL)) Main module
> > >>>>>>>> (org.geotools:gt-main:14.1 - no url defined)
> > >>>>>>>>        (Lesser General Public License (LGPL)) Metadata
> > >>>>>>>> (org.geotools:gt-metadata:14.1 - no url defined)
> > >>>>>>>>        (Lesser General Public License (LGPL)) (OGC copyright)
> Open
> > >>>> GIS
> > >>>>>>>> Interfaces (org.geotools:gt-opengis:14.1 - no url defined)
> > >>>>>>>>        (Lesser General Public License (LGPL)) Process
> > >>>>>>>> (org.geotools:gt-process:14.1 - no url defined)
> > >>>>>>>>        (Lesser General Public License (LGPL)) Process Feature
> > >>>>>>>> (org.geotools:gt-process-feature:14.1 - no url defined)
> > >>>>>>>>        (Lesser General Public License (LGPL)) Referencing
> services
> > >>>>>>>> (org.geotools:gt-referencing:14.3 - no url defined)
> > >>>>>>>>        (Lesser General Public License (LGPL)) Render
> > >>>>>>>> (org.geotools:gt-render:14.1 - no url defined)
> > >>>>>>>>        (Lesser General Public License (LGPL)) Shapefile module
> > >>>>>>>> (org.geotools:gt-shapefile:14.1 - no url defined)
> > >>>>>>>>        (Lesser General Public License (LGPL)) Feature
> transforming
> > >>>>> feature
> > >>>>>>>> source wrapper (org.geotools:gt-transform:14.1 - no url defined)
> > >>>>>>>>        (Lesser General Public License (LGPL)) XML Parsing
> > >>>>>>>> (org.geotools.xsd:gt-xsd-core:14.3 - no url defined)
> > >>>>>>>>        (Lesser General Public License (LGPL)) GML2 XML Support
> > >>>>>>>> (org.geotools.xsd:gt-xsd-gml2:14.3 - no url defined)
> > >>>>>>>>        (Lesser General Public License (LGPL)) GML3 XML Support
> > >>>>>>>> (org.geotools.xsd:gt-xsd-gml3:14.3 - no url defined)
> > >>>>>>>>
> > >>>>>>>> david.
> > >>
> >
>

Re: RYA-179 Review License / Copyright notices on Rya Artifacts

Posted by Sean Busbey <bu...@apache.org>.

Hi folks!

Like many things at the ASF, the interpretation of "optional" is
something PMCs are expected to do in good faith with the mission of
providing as much as we can for the public good under the license
terms the foundation favors. Since Rya is still a podling, the arbiter
for now is the IPMC. Generally, this will be something we'll want to
make note of during our release process since IPMC members will likely
have questions if they find category-x dependencies while evaluating
release candidates.

When I see other projects make a case for an "optional" component,
it's always been in terms of the core feature set. As mentioned in the
legal committee FAQ[1], the question comes down to "will most folks
want to use our product even without the optional component." It's
okay if the only way to use an optional feature is via prohibited
dependencies, so long as most folks will be fine without that feature.

It sounds like y'all have a bit of disagreement about how core to Rya
the ability to query for freetext, geospatial, and temporal data is.
We should seek some consensus on that. For my own 2 cents, when folks
talk about an RDF triple store I don't generally presume any of those
query types are possible.

It would also be okay to hold that these features are optional and
then periodically revisit how common their use is in practice e.g.
through user@ surveys. If it turns out they're getting used often,
then we could seek out compatibly licensed alternative dependencies.

[1]: http://www.apache.org/legal/resolved.html#optional

On Thu, Sep 15, 2016 at 10:11 AM, Josh Elser <el...@apache.org> wrote:
> Yeah, this is where I'm not 100% sure how to interpret this. I'm not sure if
> "optional" is interpreted as "there are other ways to do X" or if it's "X is
> not a core-feature of Rya".
>
> @Sean, do you know how this is supposed to be interpreted?
>
>
> Puja Valiyil wrote:
>>
>> I guess my point is that the average user doesn't want these capabilities.
>> We removed the profile to make build process easier, but the main reason
>> we
>> had it to begin with was because they are optional extensions that can
>> complicate licensing and add a lot of unwanted dependencies.
>> The other option we have would be to swap geomesa with geowave [1].
>> Geowave has an apache 2 license [2] and so all the dependencies that
>> brings
>> in should be ok.  We've talked about adding GeoWave support a lot, so I
>> think that there is value outside of for licensing issues.  I don't think
>> it would be trivial to bring in GeoWave for Geomesa, so that might put
>> cutting a release on hold for a while.
>>
>> [1] https://github.com/ngageoint/geowave
>> [2] https://github.com/ngageoint/geowave/blob/master/LICENSE
>>
>>
>> On Thu, Sep 15, 2016 at 12:46 AM, Meier, Caleb<Ca...@parsons.com>
>> wrote:
>>
>>> While the indexer project extensions are optional in that they are turned
>>> off by default to minimize data plume, I would argue that they are not
>>> optional in the sense that Josh has described.  There is no other way to
>>> index/query for freetext, geospatial, and temporal data without these
>>> extensions.  So if a user wants these capabilities, they need the indexer
>>> project and all of the incompatibly licensed dependencies that come along
>>> with it.
>>> ________________________________________
>>> From: Puja Valiyil [pujav65@gmail.com]
>>> Sent: Wednesday, September 14, 2016 9:49 PM
>>> To: dev@rya.incubator.apache.org
>>> Cc: Billie Rinaldi
>>> Subject: Re: RYA-179 Review License / Copyright notices on Rya Artifacts
>>>
>>> The indexer project has a set of configurable optional extension to Rya.
>>> Things like support for geosparql, support for free text indexing, and
>>> support for precomputed joins (which is where the fluo integration comes
>>> in).  These are extensions that by default are turned off.  They can
>>> really
>>> increase the data plume associated with some data, which is the main
>>> reason
>>> why.
>>>
>>> In the original port into Apache, this project was only included if you
>>> specified that profile.  This was because we have traditionally
>>> considered
>>> those features experimental and they bring in a lot of possibly unwanted
>>> dependencies.  Aaron refactored it to not be optional when he was
>>> updating
>>> the pond to reference the Apache parent Pom.
>>> So no alternative, but functionality that a typical user may debatably
>>> not
>>> want.
>>>
>>> Sent from my iPhone
>>>
>>>> On Sep 14, 2016, at 8:05 PM, Josh Elser<el...@apache.org>  wrote:
>>>>
>>>> I would have said that this is only kosher when you have an alternative
>>>
>>> to the incompatibly licensed software. Is the indexer actually optional
>>> (I
>>> don't have enough context)? Are there ways for me to to indexing of the
>>> same type of data that don't require use of these incompatible
>>> dependencies?
>>>>
>>>> Billie might be able to provide some more context too.
>>>>
>>>> Aaron D. Mihalik wrote:
>>>>>>
>>>>>> Could we revive the indexer profile again?
>>>>>
>>>>> (tl;dr: Yes.  Mentors: Please correct us if we're wrong)
>>>>>
>>>>> This might be a solution.  I found a couple similar cases with Apache
>>>>> projects and discussions related to those cases.
>>>>>
>>>>> Apache Flink integrated with Amazon Kinesis [1] and [2].  Note that
>>>
>>> Kinesis
>>>>>
>>>>> is an optional profile, and it's well documented in the POM why it's
>>>>> optional.
>>>>>
>>>>> (Note that NiFi got around this by using Amazon's SDK for Java [3],
>>>
>>> which
>>>>>
>>>>> is purely Apache 2.0)
>>>>>
>>>>> Spark uses optional profiles to build artifacts based on LGPL
>>>>> dependencies.  Spark has to built by the user to use netlib [4][5],
>>>
>>> Ganglia
>>>>>
>>>>> [6], or Kinesis [6].
>>>>>
>>>>> I think a profile will work, but I'd like to see it well documented
>>>
>>> (both
>>>>>
>>>>> in the POM and manual) so that we never accidentally create a release
>>>
>>> with
>>>>>
>>>>> these artifacts.
>>>>>
>>>>> I was going to open a separate ticket to implement this, but I think
>>>
>>> it's
>>>>>
>>>>> good to track all of this effort under RYA-177.
>>>>>
>>>>> --Aaron
>>>>>
>>>>> [1]
>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
>>>
>>> com_apache_flink_blob_release-2D1.1.2_flink-2Dstreaming-
>>> 2Dconnectors_pom.xml-23L69&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>>> wnYDdDdgR8EEFav9sKC7ftd6ZjSJcOXU8FISG6jJMHc&e=
>>>>>
>>>>> [2]
>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
>>>
>>> com_apache_flink_blob_release-2D1.1.2_flink-2Dstreaming-
>>> 2Dconnectors_flink-2Dconnector-2Dkinesis_pom.xml-23L73&d=CwIFAg&c=Nwf-
>>> pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHC
>>> geo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>>> ZFTL5gQzyzLvRcWrafGrCobMJ8d1DWSmZlIVz9M7EuQ&e=
>>>>>
>>>>> [3] https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
>>>
>>> com_apache_nifi_blob_master_pom.xml-23L1316&d=CwIFAg&c=
>>> Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>>> 6pMGnZxiQccMUFNO18dbUc8luQrhNKa-XVCc1y_YlGg&e=
>>>>>
>>>>> [4] https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
>>>
>>> com_apache_spark_blob_v2.0.0_mllib_pom.xml-23L120&d=CwIFAg&
>>> c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=apxAyRJMc-
>>> jDvRpVzA6wFnuOjlNtFUKev9nXgiv79DM&e=
>>>>>
>>>>> [5]
>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
>>>
>>> com_apache_spark_blob_v2.0.0_docs_ml-2Dguide.md-
>>> 23dependencies&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=yFa0G6qUiJpaZxKA--
>>> 8iuH8m3hxgmutd-0ZD0B32268&e=
>>>>>
>>>>> [6] https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
>>>
>>> com_apache_spark_blob_v2.0.0_pom.xml-23L2414&d=CwIFAg&c=
>>> Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>>> 3xSSyDcql0fPyGpmzCoVV4W8Zgv2yHzm_HhKNhQahko&e=
>>>>>
>>>>> [7] https://urldefense.proofpoint.com/v2/url?u=https-3A__issues.
>>>
>>> apache.org_jira_browse_LEGAL-2D198&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>>> lyjGafTKlvfprCiiaEuPxZZql8RfTAqKuPm3VuGB87w&e=
>>>>>
>>>>> [8] https://urldefense.proofpoint.com/v2/url?u=https-3A__www.
>>>
>>> gnu.org_licenses_lgpl-2Djava.html&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=GRs3Rw_AG6rsk_
>>> mdzckqKUMoPYAt8c18d8gd5pBmiVI&e=
>>>>>
>>>>>
>>>>>
>>>>>> On Wed, Sep 14, 2016 at 12:09 PM David Lotts<dl...@gmail.com>
>>>>>> wrote:
>>>>>>
>>>>>> Great find Aaron!
>>>>>> The ESRI library is quite comparable!
>>>>>>
>>>>>> Rya via Geomesa are using *JTS Topology Suite (*JTS): (the javadocs at
>>>>>> vividsolutions seems to be 404 )
>>>>>>
>>>>>>
>>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__
>>>
>>> tsusiatsoftware.net_jts_javadoc_com_vividsolutions_
>>> jts_geom_Geometry.html&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=nscsppMk-
>>> bNMwHX82u4sd7VbUal5jIzdeuq34bmTwg0&e=
>>>>>>
>>>>>> Far from a drop-in replacement, but a path forward:
>>>>>>      https://urldefense.proofpoint.com/v2/url?u=http-3A__esri.
>>>
>>> github.io_geometry-2Dapi-2Djava_javadoc_&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=2GWOgMrIQvSXFXooaOYQ_
>>> y0DQOPcK3xdpCXq0Iev1r0&e=
>>>>>>
>>>>>> Interesting, ESRI has Shape file support, but no GML, the opposite of
>>>
>>> JTS!
>>>>>>
>>>>>> david.
>>>>>>
>>>>>>
>>>>>> On Wed, Sep 14, 2016 at 10:29 AM, Aaron D. Mihalik<
>>>>>> aaron.mihalik@gmail.com>
>>>>>> wrote:
>>>>>>
>>>>>>> Yeah, that sounds possible. I don't like the idea of having to
>>>
>>> maintain
>>>>>>>
>>>>>>> another build/ci/release process, though.
>>>>>>>
>>>>>>> More importantly, we'd also have to modify our GeoIndexer interface
>>>
>>> [1]
>>>>>>
>>>>>> to
>>>>>>>
>>>>>>> something Apache Friendly.  It looks like Ersi puts out an Apache 2.0
>>>>>>> library [2].
>>>>>>>
>>>>>>> [1]
>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
>>>
>>> com_apache_incubator-2Drya_blob_master_&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>>> 2es83xf9omvbFNTaRU0pjHhcWJOjjVD4puEiCGAHTzo&e=
>>>>>>>
>>>>>>> extras/indexing/src/main/java/mvm/rya/indexing/GeoIndexer.java
>>>>>>> [2] https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
>>>
>>> com_Esri_geometry-2Dapi-2Djava&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>>> OxkKSfjgLWCFVHN9iHWYMWrc8zXsQFSQVeIg_IZln28&e=
>>>>>>>>
>>>>>>>> On Tue, Sep 13, 2016 at 10:36 PM Jim Hughes<jn...@ccri.com>   wrote:
>>>>>>>>
>>>>>>>> Hi Aaron,
>>>>>>>>
>>>>>>>> Thanks, wasn't finding that list quickly...
>>>>>>>>
>>>>>>>> It sounds like the GeoMesa/GeoTools usage might fall under this Q/A:
>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.
>>>
>>> apache.org_legal_resolved.html-23optional&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>>> oonzG34DfvESxMKhzH3zwTAP8382Y074uyDImZlXj3w&e= .
>>>>>>>>
>>>>>>>> Thoughts?
>>>>>>>>
>>>>>>>> Jim
>>>>>>>>
>>>>>>>>> On 9/13/2016 9:25 PM, Aaron D. Mihalik wrote:
>>>>>>>>> Jim,
>>>>>>>>>
>>>>>>>>> We've been working off of these lists:
>>>>>>>>>
>>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.
>>>
>>> apache.org_legal_resolved.html-23category-2Da&d=CwIFAg&
>>> c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=GxpBa_
>>> DXc5ciR7ABQlVXaoTyAHKRAcGQTdaeu9PRlMA&e=
>>>>>>>>>>
>>>>>>>>>> On Tue, Sep 13, 2016 at 6:07 PM Jim Hughes<jn...@ccri.com>
>>>>>>>>>> wrote:
>>>>>>>>>>
>>>>>>>>>> Hi David,
>>>>>>>>>>
>>>>>>>>>> A number of the geo-dependencies are likely from the geo-indexing
>>>>>>>
>>>>>>> (which
>>>>>>>>>>
>>>>>>>>>> uses GeoMesa (Apache 2.0) which uses GeoTools and JTS).
>>>>>>>>>>
>>>>>>>>>> Are there options to make the geoindexing a profile, provide the
>>>>>>>
>>>>>>> source,
>>>>>>>>>>
>>>>>>>>>> and not provide artifacts for that code at Apache?
>>>>>>>>>>
>>>>>>>>>> Also, is there a list of approved licenses for Apache projects
>>>>>>>>>> dependencies?
>>>>>>>>>>
>>>>>>>>>> Cheers,
>>>>>>>>>>
>>>>>>>>>> Jim
>>>>>>>>>>
>>>>>>>>>>> On 09/13/2016 05:46 PM, David Lotts wrote:
>>>>>>>>>>> This issue is a release blocker:
>>>>>>>>>>> <https://urldefense.proofpoint.com/v2/url?u=https-
>>>
>>> 3A__issues.apache.org_jira_browse_RYA-2D179&d=CwIFAg&c=
>>> Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>>> tv58xgiqgMT6McWRnFDk4mQv44be_F1AfRhHX4BITFU&e=>
>>>>>>>>>>>
>>>>>>>>>>> RYA-179<https://urldefense.proofpoint.com/v2/url?u=https-
>>>
>>> 3A__issues.apache.org_jira_browse_RYA-2D179&d=CwIFAg&c=
>>> Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>>> tv58xgiqgMT6McWRnFDk4mQv44be_F1AfRhHX4BITFU&e=>   Review
>>>>>>>>
>>>>>>>> License /
>>>>>>>>>>>
>>>>>>>>>>> Copyright notices on Rya Artifacts
>>>>>>>>>>>
>>>>>>>>>>> I was able to create a 3rd party dependency license report for
>>>>>>>>>>> Rya
>>>>>>>>>>> from the license
>>>>>>>>>>> maven plugin.
>>>>>>>>>>> <https://urldefense.proofpoint.com/v2/url?u=http-
>>>
>>> 3A__www.mojohaus.org_license-2Dmaven-2Dplugin_&d=CwIFAg&c=
>>> Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=uB2GXLB9U4r3d-
>>> 2p-1Knb2TtdALTX5Slxi2NDmVZnzU&e=>
>>>>>>>>>>>
>>>>>>>>>>> Good: I can send the full list if you like.  Mostly ASL and
>>>
>>> clearly
>>>>>>>>>>>
>>>>>>>>>>> permitted.
>>>>>>>>>>>
>>>>>>>>>>> Okay: A number of CDDL and CPL licenses -- permitted if no source
>>>>>>>
>>>>>>> code
>>>>>>>>
>>>>>>>> is
>>>>>>>>>>>
>>>>>>>>>>> included.
>>>>>>>>>>>
>>>>>>>>>>> Needs Improvement: The following are not clearly permitted
>>>>>>
>>>>>> licenses:
>>>>>>>>>>>
>>>>>>>>>>>         (cern.colt MIT license see
>>>>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__dst.
>>>
>>> lbl.gov_ACSSoftware_colt_license.html&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=nkfTihZpFbwrq1xV6atJsaeFR_
>>> wV8Cs8BIfOM2LlV3c&e= ) colt
>>>>>>>>>>
>>>>>>>>>> (colt:colt:1.2.0 -
>>>>>>>>>>>
>>>>>>>>>>> no url defined)
>>>>>>>>>>>             -- this is a mistake, should be  java.util.Arrays,
>>>>>>>>>>> not
>>>>>>>>>>> cern.colt.Arrays  -- creating an issue to eliminate dependency.
>>>>>>>>>>>         (GNU LESSER GENERAL PUBLIC LICENSE) JCalendar
>>>>>>>>>>> (com.toedter:jcalendar:1.1.4 -
>>>>>>
>>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.
>>>
>>> toedter.com_en_jcalendar_&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>>> xpan75i2SwtO0y9BvlBgDSIKOTgF5c1vBeBaydmmpzM&e= )
>>>>>>>>>>>
>>>>>>>>>>>         (Lesser General Public License (LGPL)) JTS Topology Suite
>>>>>>>>>>> (com.vividsolutions:jts:1.13 -
>>>>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__
>>>
>>> sourceforge.net_projects_jts-2Dtopo-2Dsuite&d=CwIFAg&c=Nwf-
>>> pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHC
>>> geo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=EE4WpoOm4n_
>>> 6riGjpReA3wZM6Jzt8hJRSVjDtFzFanQ&e= )
>>>>>>>>>>>
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Image
>>>>>>>>>>> I/O-Extensions
>>>>>>
>>>>>> -
>>>>>>>>>>
>>>>>>>>>> GeoCore
>>>>>>>>>>>
>>>>>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-geocore:1.1.13 - no url
>>>>>>>>
>>>>>>>> defined)
>>>>>>>>>>>
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Image
>>>>>>>>>>> I/O-Extensions
>>>>>>
>>>>>> -
>>>>>>>>>>
>>>>>>>>>> Custom
>>>>>>>>>>>
>>>>>>>>>>> Streams (it.geosolutions.imageio-ext:imageio-ext-streams:1.1.13 -
>>>>>>
>>>>>> no
>>>>>>>>
>>>>>>>> url
>>>>>>>>>>>
>>>>>>>>>>> defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Improved TIFF
>>>>>>>>>>> Plugin
>>>>>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-tiff:1.1.13 - no url
>>>>>>>
>>>>>>> defined)
>>>>>>>>>>>
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Image
>>>>>>>>>>> I/O-Extensions
>>>>>>
>>>>>> -
>>>>>>>>>>>
>>>>>>>>>>> utilities classes and methods
>>>>>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-utilities:1.1.13 - no
>>>
>>> url
>>>>>>>>>>
>>>>>>>>>> defined)
>>>>>>>>>>>
>>>>>>>>>>>         (Unknown license) jai_codec (javax.media:jai_codec:1.1.3
>>>>>>>>>>> -
>>>>>>
>>>>>> no
>>>>>>>>
>>>>>>>> url
>>>>>>>>>>>
>>>>>>>>>>> defined)
>>>>>>>>>>>         (Unknown license) jai_core (javax.media:jai_core:1.1.3 -
>>>>>>>>>>> no
>>>>>>>
>>>>>>> url
>>>>>>>>>>>
>>>>>>>>>>> defined)
>>>>>>>>>>>         (Unknown license) jai_imageio
>>>>>>>>>>> (javax.media:jai_imageio:1.1
>>>
>>> -
>>>>>>>
>>>>>>> no
>>>>>>>>
>>>>>>>> url
>>>>>>>>>>>
>>>>>>>>>>> defined)
>>>>>>>>>>>         (Unknown license) jgridshift (jgridshift:jgridshift:1.0 -
>>>
>>> no
>>>>>>>
>>>>>>> url
>>>>>>>>>>>
>>>>>>>>>>> defined)
>>>>>>>>>>>         (GNU Lesser General Public License) Remote Tea Runtime
>>>>>>>>>>> (org.acplt:oncrpc:1.0.7 - https://urldefense.proofpoint.
>>>
>>> com/v2/url?u=http-3A__remotetea.sourceforge.net_&d=
>>> CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>>> EOLDxztEUSjsTNW2QH8XItlqpuIlH5n7_10fdLy8AKY&e= )
>>>>>>>>>>>
>>>>>>>>>>>         (Unknown license) Antlr 3.4 Runtime
>>>>>>>>
>>>>>>>> (org.antlr:antlr-runtime:3.4 -
>>>>>>>>>>>
>>>>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.
>>>
>>> antlr.org&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>>> 6JePto8zpoeyNZtl0UNZILGSRA7EgcTN0JCrhpT9jHc&e= )
>>>>>>>>>>>
>>>>>>>>>>>         (Unknown license) Jettison (org.codehaus.jettison:
>>>>>>>
>>>>>>> jettison:1.1
>>>>>>>>
>>>>>>>> - no
>>>>>>>>>>>
>>>>>>>>>>> url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) API interfaces
>>>>>>>>>>> (org.geotools:gt-api:14.3 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Grid Coverage
>>>>>>>>>>> module
>>>>>>>>>>> (org.geotools:gt-coverage:14.3 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) OGC CQL to Filter
>>>>>>>
>>>>>>> parser
>>>>>>>>>>>
>>>>>>>>>>> (org.geotools:gt-cql:14.1 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) DataStore Support
>>>>>>>>>>> (org.geotools:gt-data:14.1 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Feature Based
>>>>>>>>>>> Graphs
>>>>>>>
>>>>>>> and
>>>>>>>>>>>
>>>>>>>>>>> Networks (org.geotools:gt-graph:14.3 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Vector grids
>>>>>>>>>>> (org.geotools:gt-grid:14.1 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Main module
>>>>>>>>>>> (org.geotools:gt-main:14.1 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Metadata
>>>>>>>>>>> (org.geotools:gt-metadata:14.1 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) (OGC copyright)
>>>>>>>>>>> Open
>>>>>>>
>>>>>>> GIS
>>>>>>>>>>>
>>>>>>>>>>> Interfaces (org.geotools:gt-opengis:14.1 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Process
>>>>>>>>>>> (org.geotools:gt-process:14.1 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Process Feature
>>>>>>>>>>> (org.geotools:gt-process-feature:14.1 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Referencing
>>>>>>>>>>> services
>>>>>>>>>>> (org.geotools:gt-referencing:14.3 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Render
>>>>>>>>>>> (org.geotools:gt-render:14.1 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Shapefile module
>>>>>>>>>>> (org.geotools:gt-shapefile:14.1 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) Feature
>>>>>>>>>>> transforming
>>>>>>>>
>>>>>>>> feature
>>>>>>>>>>>
>>>>>>>>>>> source wrapper (org.geotools:gt-transform:14.1 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) XML Parsing
>>>>>>>>>>> (org.geotools.xsd:gt-xsd-core:14.3 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) GML2 XML Support
>>>>>>>>>>> (org.geotools.xsd:gt-xsd-gml2:14.3 - no url defined)
>>>>>>>>>>>         (Lesser General Public License (LGPL)) GML3 XML Support
>>>>>>>>>>> (org.geotools.xsd:gt-xsd-gml3:14.3 - no url defined)
>>>>>>>>>>>
>>>>>>>>>>> david.
>>
>>
>

Re: RYA-179 Review License / Copyright notices on Rya Artifacts

Posted by Josh Elser <el...@apache.org>.

Yeah, this is where I'm not 100% sure how to interpret this. I'm not 
sure if "optional" is interpreted as "there are other ways to do X" or 
if it's "X is not a core-feature of Rya".

@Sean, do you know how this is supposed to be interpreted?

Puja Valiyil wrote:
> I guess my point is that the average user doesn't want these capabilities.
> We removed the profile to make build process easier, but the main reason we
> had it to begin with was because they are optional extensions that can
> complicate licensing and add a lot of unwanted dependencies.
> The other option we have would be to swap geomesa with geowave [1].
> Geowave has an apache 2 license [2] and so all the dependencies that brings
> in should be ok.  We've talked about adding GeoWave support a lot, so I
> think that there is value outside of for licensing issues.  I don't think
> it would be trivial to bring in GeoWave for Geomesa, so that might put
> cutting a release on hold for a while.
>
> [1] https://github.com/ngageoint/geowave
> [2] https://github.com/ngageoint/geowave/blob/master/LICENSE
>
>
> On Thu, Sep 15, 2016 at 12:46 AM, Meier, Caleb<Ca...@parsons.com>
> wrote:
>
>> While the indexer project extensions are optional in that they are turned
>> off by default to minimize data plume, I would argue that they are not
>> optional in the sense that Josh has described.  There is no other way to
>> index/query for freetext, geospatial, and temporal data without these
>> extensions.  So if a user wants these capabilities, they need the indexer
>> project and all of the incompatibly licensed dependencies that come along
>> with it.
>> ________________________________________
>> From: Puja Valiyil [pujav65@gmail.com]
>> Sent: Wednesday, September 14, 2016 9:49 PM
>> To: dev@rya.incubator.apache.org
>> Cc: Billie Rinaldi
>> Subject: Re: RYA-179 Review License / Copyright notices on Rya Artifacts
>>
>> The indexer project has a set of configurable optional extension to Rya.
>> Things like support for geosparql, support for free text indexing, and
>> support for precomputed joins (which is where the fluo integration comes
>> in).  These are extensions that by default are turned off.  They can really
>> increase the data plume associated with some data, which is the main reason
>> why.
>>
>> In the original port into Apache, this project was only included if you
>> specified that profile.  This was because we have traditionally considered
>> those features experimental and they bring in a lot of possibly unwanted
>> dependencies.  Aaron refactored it to not be optional when he was updating
>> the pond to reference the Apache parent Pom.
>> So no alternative, but functionality that a typical user may debatably not
>> want.
>>
>> Sent from my iPhone
>>
>>> On Sep 14, 2016, at 8:05 PM, Josh Elser<el...@apache.org>  wrote:
>>>
>>> I would have said that this is only kosher when you have an alternative
>> to the incompatibly licensed software. Is the indexer actually optional (I
>> don't have enough context)? Are there ways for me to to indexing of the
>> same type of data that don't require use of these incompatible dependencies?
>>> Billie might be able to provide some more context too.
>>>
>>> Aaron D. Mihalik wrote:
>>>>> Could we revive the indexer profile again?
>>>> (tl;dr: Yes.  Mentors: Please correct us if we're wrong)
>>>>
>>>> This might be a solution.  I found a couple similar cases with Apache
>>>> projects and discussions related to those cases.
>>>>
>>>> Apache Flink integrated with Amazon Kinesis [1] and [2].  Note that
>> Kinesis
>>>> is an optional profile, and it's well documented in the POM why it's
>>>> optional.
>>>>
>>>> (Note that NiFi got around this by using Amazon's SDK for Java [3],
>> which
>>>> is purely Apache 2.0)
>>>>
>>>> Spark uses optional profiles to build artifacts based on LGPL
>>>> dependencies.  Spark has to built by the user to use netlib [4][5],
>> Ganglia
>>>> [6], or Kinesis [6].
>>>>
>>>> I think a profile will work, but I'd like to see it well documented
>> (both
>>>> in the POM and manual) so that we never accidentally create a release
>> with
>>>> these artifacts.
>>>>
>>>> I was going to open a separate ticket to implement this, but I think
>> it's
>>>> good to track all of this effort under RYA-177.
>>>>
>>>> --Aaron
>>>>
>>>> [1]
>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
>> com_apache_flink_blob_release-2D1.1.2_flink-2Dstreaming-
>> 2Dconnectors_pom.xml-23L69&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>> wnYDdDdgR8EEFav9sKC7ftd6ZjSJcOXU8FISG6jJMHc&e=
>>>> [2]
>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
>> com_apache_flink_blob_release-2D1.1.2_flink-2Dstreaming-
>> 2Dconnectors_flink-2Dconnector-2Dkinesis_pom.xml-23L73&d=CwIFAg&c=Nwf-
>> pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHC
>> geo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>> ZFTL5gQzyzLvRcWrafGrCobMJ8d1DWSmZlIVz9M7EuQ&e=
>>>> [3] https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
>> com_apache_nifi_blob_master_pom.xml-23L1316&d=CwIFAg&c=
>> Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>> 6pMGnZxiQccMUFNO18dbUc8luQrhNKa-XVCc1y_YlGg&e=
>>>> [4] https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
>> com_apache_spark_blob_v2.0.0_mllib_pom.xml-23L120&d=CwIFAg&
>> c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=apxAyRJMc-
>> jDvRpVzA6wFnuOjlNtFUKev9nXgiv79DM&e=
>>>> [5]
>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
>> com_apache_spark_blob_v2.0.0_docs_ml-2Dguide.md-
>> 23dependencies&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=yFa0G6qUiJpaZxKA--
>> 8iuH8m3hxgmutd-0ZD0B32268&e=
>>>> [6] https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
>> com_apache_spark_blob_v2.0.0_pom.xml-23L2414&d=CwIFAg&c=
>> Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>> 3xSSyDcql0fPyGpmzCoVV4W8Zgv2yHzm_HhKNhQahko&e=
>>>> [7] https://urldefense.proofpoint.com/v2/url?u=https-3A__issues.
>> apache.org_jira_browse_LEGAL-2D198&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>> lyjGafTKlvfprCiiaEuPxZZql8RfTAqKuPm3VuGB87w&e=
>>>> [8] https://urldefense.proofpoint.com/v2/url?u=https-3A__www.
>> gnu.org_licenses_lgpl-2Djava.html&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=GRs3Rw_AG6rsk_
>> mdzckqKUMoPYAt8c18d8gd5pBmiVI&e=
>>>>
>>>>
>>>>> On Wed, Sep 14, 2016 at 12:09 PM David Lotts<dl...@gmail.com>   wrote:
>>>>>
>>>>> Great find Aaron!
>>>>> The ESRI library is quite comparable!
>>>>>
>>>>> Rya via Geomesa are using *JTS Topology Suite (*JTS): (the javadocs at
>>>>> vividsolutions seems to be 404 )
>>>>>
>>>>>
>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__
>> tsusiatsoftware.net_jts_javadoc_com_vividsolutions_
>> jts_geom_Geometry.html&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=nscsppMk-
>> bNMwHX82u4sd7VbUal5jIzdeuq34bmTwg0&e=
>>>>> Far from a drop-in replacement, but a path forward:
>>>>>      https://urldefense.proofpoint.com/v2/url?u=http-3A__esri.
>> github.io_geometry-2Dapi-2Djava_javadoc_&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=2GWOgMrIQvSXFXooaOYQ_
>> y0DQOPcK3xdpCXq0Iev1r0&e=
>>>>> Interesting, ESRI has Shape file support, but no GML, the opposite of
>> JTS!
>>>>> david.
>>>>>
>>>>>
>>>>> On Wed, Sep 14, 2016 at 10:29 AM, Aaron D. Mihalik<
>>>>> aaron.mihalik@gmail.com>
>>>>> wrote:
>>>>>
>>>>>> Yeah, that sounds possible. I don't like the idea of having to
>> maintain
>>>>>> another build/ci/release process, though.
>>>>>>
>>>>>> More importantly, we'd also have to modify our GeoIndexer interface
>> [1]
>>>>> to
>>>>>> something Apache Friendly.  It looks like Ersi puts out an Apache 2.0
>>>>>> library [2].
>>>>>>
>>>>>> [1]
>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
>> com_apache_incubator-2Drya_blob_master_&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>> 2es83xf9omvbFNTaRU0pjHhcWJOjjVD4puEiCGAHTzo&e=
>>>>>> extras/indexing/src/main/java/mvm/rya/indexing/GeoIndexer.java
>>>>>> [2] https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
>> com_Esri_geometry-2Dapi-2Djava&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>> OxkKSfjgLWCFVHN9iHWYMWrc8zXsQFSQVeIg_IZln28&e=
>>>>>>> On Tue, Sep 13, 2016 at 10:36 PM Jim Hughes<jn...@ccri.com>   wrote:
>>>>>>>
>>>>>>> Hi Aaron,
>>>>>>>
>>>>>>> Thanks, wasn't finding that list quickly...
>>>>>>>
>>>>>>> It sounds like the GeoMesa/GeoTools usage might fall under this Q/A:
>>>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.
>> apache.org_legal_resolved.html-23optional&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>> oonzG34DfvESxMKhzH3zwTAP8382Y074uyDImZlXj3w&e= .
>>>>>>> Thoughts?
>>>>>>>
>>>>>>> Jim
>>>>>>>
>>>>>>>> On 9/13/2016 9:25 PM, Aaron D. Mihalik wrote:
>>>>>>>> Jim,
>>>>>>>>
>>>>>>>> We've been working off of these lists:
>>>>>>>>
>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.
>> apache.org_legal_resolved.html-23category-2Da&d=CwIFAg&
>> c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=GxpBa_
>> DXc5ciR7ABQlVXaoTyAHKRAcGQTdaeu9PRlMA&e=
>>>>>>>>> On Tue, Sep 13, 2016 at 6:07 PM Jim Hughes<jn...@ccri.com>   wrote:
>>>>>>>>>
>>>>>>>>> Hi David,
>>>>>>>>>
>>>>>>>>> A number of the geo-dependencies are likely from the geo-indexing
>>>>>> (which
>>>>>>>>> uses GeoMesa (Apache 2.0) which uses GeoTools and JTS).
>>>>>>>>>
>>>>>>>>> Are there options to make the geoindexing a profile, provide the
>>>>>> source,
>>>>>>>>> and not provide artifacts for that code at Apache?
>>>>>>>>>
>>>>>>>>> Also, is there a list of approved licenses for Apache projects
>>>>>>>>> dependencies?
>>>>>>>>>
>>>>>>>>> Cheers,
>>>>>>>>>
>>>>>>>>> Jim
>>>>>>>>>
>>>>>>>>>> On 09/13/2016 05:46 PM, David Lotts wrote:
>>>>>>>>>> This issue is a release blocker:
>>>>>>>>>> <https://urldefense.proofpoint.com/v2/url?u=https-
>> 3A__issues.apache.org_jira_browse_RYA-2D179&d=CwIFAg&c=
>> Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>> tv58xgiqgMT6McWRnFDk4mQv44be_F1AfRhHX4BITFU&e=>
>>>>>>>>>> RYA-179<https://urldefense.proofpoint.com/v2/url?u=https-
>> 3A__issues.apache.org_jira_browse_RYA-2D179&d=CwIFAg&c=
>> Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>> tv58xgiqgMT6McWRnFDk4mQv44be_F1AfRhHX4BITFU&e=>   Review
>>>>>>> License /
>>>>>>>>>> Copyright notices on Rya Artifacts
>>>>>>>>>>
>>>>>>>>>> I was able to create a 3rd party dependency license report for Rya
>>>>>>>>>> from the license
>>>>>>>>>> maven plugin.
>>>>>>>>>> <https://urldefense.proofpoint.com/v2/url?u=http-
>> 3A__www.mojohaus.org_license-2Dmaven-2Dplugin_&d=CwIFAg&c=
>> Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=uB2GXLB9U4r3d-
>> 2p-1Knb2TtdALTX5Slxi2NDmVZnzU&e=>
>>>>>>>>>> Good: I can send the full list if you like.  Mostly ASL and
>> clearly
>>>>>>>>>> permitted.
>>>>>>>>>>
>>>>>>>>>> Okay: A number of CDDL and CPL licenses -- permitted if no source
>>>>>> code
>>>>>>> is
>>>>>>>>>> included.
>>>>>>>>>>
>>>>>>>>>> Needs Improvement: The following are not clearly permitted
>>>>> licenses:
>>>>>>>>>>         (cern.colt MIT license see
>>>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__dst.
>> lbl.gov_ACSSoftware_colt_license.html&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=nkfTihZpFbwrq1xV6atJsaeFR_
>> wV8Cs8BIfOM2LlV3c&e= ) colt
>>>>>>>>> (colt:colt:1.2.0 -
>>>>>>>>>> no url defined)
>>>>>>>>>>             -- this is a mistake, should be  java.util.Arrays, not
>>>>>>>>>> cern.colt.Arrays  -- creating an issue to eliminate dependency.
>>>>>>>>>>         (GNU LESSER GENERAL PUBLIC LICENSE) JCalendar
>>>>>>>>>> (com.toedter:jcalendar:1.1.4 -
>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.
>> toedter.com_en_jcalendar_&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
>> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>> xpan75i2SwtO0y9BvlBgDSIKOTgF5c1vBeBaydmmpzM&e= )
>>>>>>>>>>         (Lesser General Public License (LGPL)) JTS Topology Suite
>>>>>>>>>> (com.vividsolutions:jts:1.13 -
>>>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__
>> sourceforge.net_projects_jts-2Dtopo-2Dsuite&d=CwIFAg&c=Nwf-
>> pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHC
>> geo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=EE4WpoOm4n_
>> 6riGjpReA3wZM6Jzt8hJRSVjDtFzFanQ&e= )
>>>>>>>>>>         (Lesser General Public License (LGPL)) Image I/O-Extensions
>>>>> -
>>>>>>>>> GeoCore
>>>>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-geocore:1.1.13 - no url
>>>>>>> defined)
>>>>>>>>>>         (Lesser General Public License (LGPL)) Image I/O-Extensions
>>>>> -
>>>>>>>>> Custom
>>>>>>>>>> Streams (it.geosolutions.imageio-ext:imageio-ext-streams:1.1.13 -
>>>>> no
>>>>>>> url
>>>>>>>>>> defined)
>>>>>>>>>>         (Lesser General Public License (LGPL)) Improved TIFF Plugin
>>>>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-tiff:1.1.13 - no url
>>>>>> defined)
>>>>>>>>>>         (Lesser General Public License (LGPL)) Image I/O-Extensions
>>>>> -
>>>>>>>>>> utilities classes and methods
>>>>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-utilities:1.1.13 - no
>> url
>>>>>>>>> defined)
>>>>>>>>>>         (Unknown license) jai_codec (javax.media:jai_codec:1.1.3 -
>>>>> no
>>>>>>> url
>>>>>>>>>> defined)
>>>>>>>>>>         (Unknown license) jai_core (javax.media:jai_core:1.1.3 - no
>>>>>> url
>>>>>>>>>> defined)
>>>>>>>>>>         (Unknown license) jai_imageio (javax.media:jai_imageio:1.1
>> -
>>>>>> no
>>>>>>> url
>>>>>>>>>> defined)
>>>>>>>>>>         (Unknown license) jgridshift (jgridshift:jgridshift:1.0 -
>> no
>>>>>> url
>>>>>>>>>> defined)
>>>>>>>>>>         (GNU Lesser General Public License) Remote Tea Runtime
>>>>>>>>>> (org.acplt:oncrpc:1.0.7 - https://urldefense.proofpoint.
>> com/v2/url?u=http-3A__remotetea.sourceforge.net_&d=
>> CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>> EOLDxztEUSjsTNW2QH8XItlqpuIlH5n7_10fdLy8AKY&e= )
>>>>>>>>>>         (Unknown license) Antlr 3.4 Runtime
>>>>>>> (org.antlr:antlr-runtime:3.4 -
>>>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.
>> antlr.org&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
>> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
>> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
>> 6JePto8zpoeyNZtl0UNZILGSRA7EgcTN0JCrhpT9jHc&e= )
>>>>>>>>>>         (Unknown license) Jettison (org.codehaus.jettison:
>>>>>> jettison:1.1
>>>>>>> - no
>>>>>>>>>> url defined)
>>>>>>>>>>         (Lesser General Public License (LGPL)) API interfaces
>>>>>>>>>> (org.geotools:gt-api:14.3 - no url defined)
>>>>>>>>>>         (Lesser General Public License (LGPL)) Grid Coverage module
>>>>>>>>>> (org.geotools:gt-coverage:14.3 - no url defined)
>>>>>>>>>>         (Lesser General Public License (LGPL)) OGC CQL to Filter
>>>>>> parser
>>>>>>>>>> (org.geotools:gt-cql:14.1 - no url defined)
>>>>>>>>>>         (Lesser General Public License (LGPL)) DataStore Support
>>>>>>>>>> (org.geotools:gt-data:14.1 - no url defined)
>>>>>>>>>>         (Lesser General Public License (LGPL)) Feature Based Graphs
>>>>>> and
>>>>>>>>>> Networks (org.geotools:gt-graph:14.3 - no url defined)
>>>>>>>>>>         (Lesser General Public License (LGPL)) Vector grids
>>>>>>>>>> (org.geotools:gt-grid:14.1 - no url defined)
>>>>>>>>>>         (Lesser General Public License (LGPL)) Main module
>>>>>>>>>> (org.geotools:gt-main:14.1 - no url defined)
>>>>>>>>>>         (Lesser General Public License (LGPL)) Metadata
>>>>>>>>>> (org.geotools:gt-metadata:14.1 - no url defined)
>>>>>>>>>>         (Lesser General Public License (LGPL)) (OGC copyright) Open
>>>>>> GIS
>>>>>>>>>> Interfaces (org.geotools:gt-opengis:14.1 - no url defined)
>>>>>>>>>>         (Lesser General Public License (LGPL)) Process
>>>>>>>>>> (org.geotools:gt-process:14.1 - no url defined)
>>>>>>>>>>         (Lesser General Public License (LGPL)) Process Feature
>>>>>>>>>> (org.geotools:gt-process-feature:14.1 - no url defined)
>>>>>>>>>>         (Lesser General Public License (LGPL)) Referencing services
>>>>>>>>>> (org.geotools:gt-referencing:14.3 - no url defined)
>>>>>>>>>>         (Lesser General Public License (LGPL)) Render
>>>>>>>>>> (org.geotools:gt-render:14.1 - no url defined)
>>>>>>>>>>         (Lesser General Public License (LGPL)) Shapefile module
>>>>>>>>>> (org.geotools:gt-shapefile:14.1 - no url defined)
>>>>>>>>>>         (Lesser General Public License (LGPL)) Feature transforming
>>>>>>> feature
>>>>>>>>>> source wrapper (org.geotools:gt-transform:14.1 - no url defined)
>>>>>>>>>>         (Lesser General Public License (LGPL)) XML Parsing
>>>>>>>>>> (org.geotools.xsd:gt-xsd-core:14.3 - no url defined)
>>>>>>>>>>         (Lesser General Public License (LGPL)) GML2 XML Support
>>>>>>>>>> (org.geotools.xsd:gt-xsd-gml2:14.3 - no url defined)
>>>>>>>>>>         (Lesser General Public License (LGPL)) GML3 XML Support
>>>>>>>>>> (org.geotools.xsd:gt-xsd-gml3:14.3 - no url defined)
>>>>>>>>>>
>>>>>>>>>> david.
>

Re: RYA-179 Review License / Copyright notices on Rya Artifacts

Posted by Puja Valiyil <pu...@gmail.com>.

I guess my point is that the average user doesn't want these capabilities.
We removed the profile to make build process easier, but the main reason we
had it to begin with was because they are optional extensions that can
complicate licensing and add a lot of unwanted dependencies.
The other option we have would be to swap geomesa with geowave [1].
Geowave has an apache 2 license [2] and so all the dependencies that brings
in should be ok.  We've talked about adding GeoWave support a lot, so I
think that there is value outside of for licensing issues.  I don't think
it would be trivial to bring in GeoWave for Geomesa, so that might put
cutting a release on hold for a while.

[1] https://github.com/ngageoint/geowave
[2] https://github.com/ngageoint/geowave/blob/master/LICENSE


On Thu, Sep 15, 2016 at 12:46 AM, Meier, Caleb <Ca...@parsons.com>
wrote:

> While the indexer project extensions are optional in that they are turned
> off by default to minimize data plume, I would argue that they are not
> optional in the sense that Josh has described.  There is no other way to
> index/query for freetext, geospatial, and temporal data without these
> extensions.  So if a user wants these capabilities, they need the indexer
> project and all of the incompatibly licensed dependencies that come along
> with it.
> ________________________________________
> From: Puja Valiyil [pujav65@gmail.com]
> Sent: Wednesday, September 14, 2016 9:49 PM
> To: dev@rya.incubator.apache.org
> Cc: Billie Rinaldi
> Subject: Re: RYA-179 Review License / Copyright notices on Rya Artifacts
>
> The indexer project has a set of configurable optional extension to Rya.
> Things like support for geosparql, support for free text indexing, and
> support for precomputed joins (which is where the fluo integration comes
> in).  These are extensions that by default are turned off.  They can really
> increase the data plume associated with some data, which is the main reason
> why.
>
> In the original port into Apache, this project was only included if you
> specified that profile.  This was because we have traditionally considered
> those features experimental and they bring in a lot of possibly unwanted
> dependencies.  Aaron refactored it to not be optional when he was updating
> the pond to reference the Apache parent Pom.
> So no alternative, but functionality that a typical user may debatably not
> want.
>
> Sent from my iPhone
>
> > On Sep 14, 2016, at 8:05 PM, Josh Elser <el...@apache.org> wrote:
> >
> > I would have said that this is only kosher when you have an alternative
> to the incompatibly licensed software. Is the indexer actually optional (I
> don't have enough context)? Are there ways for me to to indexing of the
> same type of data that don't require use of these incompatible dependencies?
> >
> > Billie might be able to provide some more context too.
> >
> > Aaron D. Mihalik wrote:
> >>> Could we revive the indexer profile again?
> >>
> >> (tl;dr: Yes.  Mentors: Please correct us if we're wrong)
> >>
> >> This might be a solution.  I found a couple similar cases with Apache
> >> projects and discussions related to those cases.
> >>
> >> Apache Flink integrated with Amazon Kinesis [1] and [2].  Note that
> Kinesis
> >> is an optional profile, and it's well documented in the POM why it's
> >> optional.
> >>
> >> (Note that NiFi got around this by using Amazon's SDK for Java [3],
> which
> >> is purely Apache 2.0)
> >>
> >> Spark uses optional profiles to build artifacts based on LGPL
> >> dependencies.  Spark has to built by the user to use netlib [4][5],
> Ganglia
> >> [6], or Kinesis [6].
> >>
> >> I think a profile will work, but I'd like to see it well documented
> (both
> >> in the POM and manual) so that we never accidentally create a release
> with
> >> these artifacts.
> >>
> >> I was going to open a separate ticket to implement this, but I think
> it's
> >> good to track all of this effort under RYA-177.
> >>
> >> --Aaron
> >>
> >> [1]
> >> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
> com_apache_flink_blob_release-2D1.1.2_flink-2Dstreaming-
> 2Dconnectors_pom.xml-23L69&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
> wnYDdDdgR8EEFav9sKC7ftd6ZjSJcOXU8FISG6jJMHc&e=
> >> [2]
> >> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
> com_apache_flink_blob_release-2D1.1.2_flink-2Dstreaming-
> 2Dconnectors_flink-2Dconnector-2Dkinesis_pom.xml-23L73&d=CwIFAg&c=Nwf-
> pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHC
> geo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
> ZFTL5gQzyzLvRcWrafGrCobMJ8d1DWSmZlIVz9M7EuQ&e=
> >>
> >> [3] https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
> com_apache_nifi_blob_master_pom.xml-23L1316&d=CwIFAg&c=
> Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
> 6pMGnZxiQccMUFNO18dbUc8luQrhNKa-XVCc1y_YlGg&e=
> >>
> >> [4] https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
> com_apache_spark_blob_v2.0.0_mllib_pom.xml-23L120&d=CwIFAg&
> c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=apxAyRJMc-
> jDvRpVzA6wFnuOjlNtFUKev9nXgiv79DM&e=
> >> [5]
> >> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
> com_apache_spark_blob_v2.0.0_docs_ml-2Dguide.md-
> 23dependencies&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=yFa0G6qUiJpaZxKA--
> 8iuH8m3hxgmutd-0ZD0B32268&e=
> >>
> >> [6] https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
> com_apache_spark_blob_v2.0.0_pom.xml-23L2414&d=CwIFAg&c=
> Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
> 3xSSyDcql0fPyGpmzCoVV4W8Zgv2yHzm_HhKNhQahko&e=
> >>
> >> [7] https://urldefense.proofpoint.com/v2/url?u=https-3A__issues.
> apache.org_jira_browse_LEGAL-2D198&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
> lyjGafTKlvfprCiiaEuPxZZql8RfTAqKuPm3VuGB87w&e=
> >> [8] https://urldefense.proofpoint.com/v2/url?u=https-3A__www.
> gnu.org_licenses_lgpl-2Djava.html&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=GRs3Rw_AG6rsk_
> mdzckqKUMoPYAt8c18d8gd5pBmiVI&e=
> >>
> >>
> >>
> >>> On Wed, Sep 14, 2016 at 12:09 PM David Lotts<dl...@gmail.com>  wrote:
> >>>
> >>> Great find Aaron!
> >>> The ESRI library is quite comparable!
> >>>
> >>> Rya via Geomesa are using *JTS Topology Suite (*JTS): (the javadocs at
> >>> vividsolutions seems to be 404 )
> >>>
> >>>
> >>> https://urldefense.proofpoint.com/v2/url?u=http-3A__
> tsusiatsoftware.net_jts_javadoc_com_vividsolutions_
> jts_geom_Geometry.html&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=nscsppMk-
> bNMwHX82u4sd7VbUal5jIzdeuq34bmTwg0&e=
> >>>
> >>> Far from a drop-in replacement, but a path forward:
> >>>     https://urldefense.proofpoint.com/v2/url?u=http-3A__esri.
> github.io_geometry-2Dapi-2Djava_javadoc_&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=2GWOgMrIQvSXFXooaOYQ_
> y0DQOPcK3xdpCXq0Iev1r0&e=
> >>>
> >>> Interesting, ESRI has Shape file support, but no GML, the opposite of
> JTS!
> >>> david.
> >>>
> >>>
> >>> On Wed, Sep 14, 2016 at 10:29 AM, Aaron D. Mihalik<
> >>> aaron.mihalik@gmail.com>
> >>> wrote:
> >>>
> >>>> Yeah, that sounds possible. I don't like the idea of having to
> maintain
> >>>> another build/ci/release process, though.
> >>>>
> >>>> More importantly, we'd also have to modify our GeoIndexer interface
> [1]
> >>> to
> >>>> something Apache Friendly.  It looks like Ersi puts out an Apache 2.0
> >>>> library [2].
> >>>>
> >>>> [1]
> >>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
> com_apache_incubator-2Drya_blob_master_&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
> 2es83xf9omvbFNTaRU0pjHhcWJOjjVD4puEiCGAHTzo&e=
> >>>> extras/indexing/src/main/java/mvm/rya/indexing/GeoIndexer.java
> >>>> [2] https://urldefense.proofpoint.com/v2/url?u=https-3A__github.
> com_Esri_geometry-2Dapi-2Djava&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
> OxkKSfjgLWCFVHN9iHWYMWrc8zXsQFSQVeIg_IZln28&e=
> >>>>
> >>>>> On Tue, Sep 13, 2016 at 10:36 PM Jim Hughes<jn...@ccri.com>  wrote:
> >>>>>
> >>>>> Hi Aaron,
> >>>>>
> >>>>> Thanks, wasn't finding that list quickly...
> >>>>>
> >>>>> It sounds like the GeoMesa/GeoTools usage might fall under this Q/A:
> >>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.
> apache.org_legal_resolved.html-23optional&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
> oonzG34DfvESxMKhzH3zwTAP8382Y074uyDImZlXj3w&e= .
> >>>>>
> >>>>> Thoughts?
> >>>>>
> >>>>> Jim
> >>>>>
> >>>>>> On 9/13/2016 9:25 PM, Aaron D. Mihalik wrote:
> >>>>>> Jim,
> >>>>>>
> >>>>>> We've been working off of these lists:
> >>>>>>
> >>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.
> apache.org_legal_resolved.html-23category-2Da&d=CwIFAg&
> c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=GxpBa_
> DXc5ciR7ABQlVXaoTyAHKRAcGQTdaeu9PRlMA&e=
> >>>>>>
> >>>>>>> On Tue, Sep 13, 2016 at 6:07 PM Jim Hughes<jn...@ccri.com>  wrote:
> >>>>>>>
> >>>>>>> Hi David,
> >>>>>>>
> >>>>>>> A number of the geo-dependencies are likely from the geo-indexing
> >>>> (which
> >>>>>>> uses GeoMesa (Apache 2.0) which uses GeoTools and JTS).
> >>>>>>>
> >>>>>>> Are there options to make the geoindexing a profile, provide the
> >>>> source,
> >>>>>>> and not provide artifacts for that code at Apache?
> >>>>>>>
> >>>>>>> Also, is there a list of approved licenses for Apache projects
> >>>>>>> dependencies?
> >>>>>>>
> >>>>>>> Cheers,
> >>>>>>>
> >>>>>>> Jim
> >>>>>>>
> >>>>>>>> On 09/13/2016 05:46 PM, David Lotts wrote:
> >>>>>>>> This issue is a release blocker:
> >>>>>>>> <https://urldefense.proofpoint.com/v2/url?u=https-
> 3A__issues.apache.org_jira_browse_RYA-2D179&d=CwIFAg&c=
> Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
> tv58xgiqgMT6McWRnFDk4mQv44be_F1AfRhHX4BITFU&e= >
> >>>>>>>>
> >>>>>>>> RYA-179<https://urldefense.proofpoint.com/v2/url?u=https-
> 3A__issues.apache.org_jira_browse_RYA-2D179&d=CwIFAg&c=
> Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
> tv58xgiqgMT6McWRnFDk4mQv44be_F1AfRhHX4BITFU&e= >  Review
> >>>>> License /
> >>>>>>>> Copyright notices on Rya Artifacts
> >>>>>>>>
> >>>>>>>> I was able to create a 3rd party dependency license report for Rya
> >>>>>>>> from the license
> >>>>>>>> maven plugin.
> >>>>>>>> <https://urldefense.proofpoint.com/v2/url?u=http-
> 3A__www.mojohaus.org_license-2Dmaven-2Dplugin_&d=CwIFAg&c=
> Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=uB2GXLB9U4r3d-
> 2p-1Knb2TtdALTX5Slxi2NDmVZnzU&e= >
> >>>>>>>>
> >>>>>>>> Good: I can send the full list if you like.  Mostly ASL and
> clearly
> >>>>>>>> permitted.
> >>>>>>>>
> >>>>>>>> Okay: A number of CDDL and CPL licenses -- permitted if no source
> >>>> code
> >>>>> is
> >>>>>>>> included.
> >>>>>>>>
> >>>>>>>> Needs Improvement: The following are not clearly permitted
> >>> licenses:
> >>>>>>>>        (cern.colt MIT license see
> >>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__dst.
> lbl.gov_ACSSoftware_colt_license.html&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=nkfTihZpFbwrq1xV6atJsaeFR_
> wV8Cs8BIfOM2LlV3c&e= ) colt
> >>>>>>> (colt:colt:1.2.0 -
> >>>>>>>> no url defined)
> >>>>>>>>            -- this is a mistake, should be  java.util.Arrays, not
> >>>>>>>> cern.colt.Arrays  -- creating an issue to eliminate dependency.
> >>>>>>>>        (GNU LESSER GENERAL PUBLIC LICENSE) JCalendar
> >>>>>>>> (com.toedter:jcalendar:1.1.4 -
> >>> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.
> toedter.com_en_jcalendar_&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_
> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
> xpan75i2SwtO0y9BvlBgDSIKOTgF5c1vBeBaydmmpzM&e= )
> >>>>>>>>        (Lesser General Public License (LGPL)) JTS Topology Suite
> >>>>>>>> (com.vividsolutions:jts:1.13 -
> >>>>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__
> sourceforge.net_projects_jts-2Dtopo-2Dsuite&d=CwIFAg&c=Nwf-
> pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHC
> geo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=EE4WpoOm4n_
> 6riGjpReA3wZM6Jzt8hJRSVjDtFzFanQ&e= )
> >>>>>>>>        (Lesser General Public License (LGPL)) Image I/O-Extensions
> >>> -
> >>>>>>> GeoCore
> >>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-geocore:1.1.13 - no url
> >>>>> defined)
> >>>>>>>>        (Lesser General Public License (LGPL)) Image I/O-Extensions
> >>> -
> >>>>>>> Custom
> >>>>>>>> Streams (it.geosolutions.imageio-ext:imageio-ext-streams:1.1.13 -
> >>> no
> >>>>> url
> >>>>>>>> defined)
> >>>>>>>>        (Lesser General Public License (LGPL)) Improved TIFF Plugin
> >>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-tiff:1.1.13 - no url
> >>>> defined)
> >>>>>>>>        (Lesser General Public License (LGPL)) Image I/O-Extensions
> >>> -
> >>>>>>>> utilities classes and methods
> >>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-utilities:1.1.13 - no
> url
> >>>>>>> defined)
> >>>>>>>>        (Unknown license) jai_codec (javax.media:jai_codec:1.1.3 -
> >>> no
> >>>>> url
> >>>>>>>> defined)
> >>>>>>>>        (Unknown license) jai_core (javax.media:jai_core:1.1.3 - no
> >>>> url
> >>>>>>>> defined)
> >>>>>>>>        (Unknown license) jai_imageio (javax.media:jai_imageio:1.1
> -
> >>>> no
> >>>>> url
> >>>>>>>> defined)
> >>>>>>>>        (Unknown license) jgridshift (jgridshift:jgridshift:1.0 -
> no
> >>>> url
> >>>>>>>> defined)
> >>>>>>>>        (GNU Lesser General Public License) Remote Tea Runtime
> >>>>>>>> (org.acplt:oncrpc:1.0.7 - https://urldefense.proofpoint.
> com/v2/url?u=http-3A__remotetea.sourceforge.net_&d=
> CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
> EOLDxztEUSjsTNW2QH8XItlqpuIlH5n7_10fdLy8AKY&e= )
> >>>>>>>>        (Unknown license) Antlr 3.4 Runtime
> >>>>> (org.antlr:antlr-runtime:3.4 -
> >>>>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.
> antlr.org&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=
> vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=
> 6JePto8zpoeyNZtl0UNZILGSRA7EgcTN0JCrhpT9jHc&e= )
> >>>>>>>>        (Unknown license) Jettison (org.codehaus.jettison:
> >>>> jettison:1.1
> >>>>> - no
> >>>>>>>> url defined)
> >>>>>>>>        (Lesser General Public License (LGPL)) API interfaces
> >>>>>>>> (org.geotools:gt-api:14.3 - no url defined)
> >>>>>>>>        (Lesser General Public License (LGPL)) Grid Coverage module
> >>>>>>>> (org.geotools:gt-coverage:14.3 - no url defined)
> >>>>>>>>        (Lesser General Public License (LGPL)) OGC CQL to Filter
> >>>> parser
> >>>>>>>> (org.geotools:gt-cql:14.1 - no url defined)
> >>>>>>>>        (Lesser General Public License (LGPL)) DataStore Support
> >>>>>>>> (org.geotools:gt-data:14.1 - no url defined)
> >>>>>>>>        (Lesser General Public License (LGPL)) Feature Based Graphs
> >>>> and
> >>>>>>>> Networks (org.geotools:gt-graph:14.3 - no url defined)
> >>>>>>>>        (Lesser General Public License (LGPL)) Vector grids
> >>>>>>>> (org.geotools:gt-grid:14.1 - no url defined)
> >>>>>>>>        (Lesser General Public License (LGPL)) Main module
> >>>>>>>> (org.geotools:gt-main:14.1 - no url defined)
> >>>>>>>>        (Lesser General Public License (LGPL)) Metadata
> >>>>>>>> (org.geotools:gt-metadata:14.1 - no url defined)
> >>>>>>>>        (Lesser General Public License (LGPL)) (OGC copyright) Open
> >>>> GIS
> >>>>>>>> Interfaces (org.geotools:gt-opengis:14.1 - no url defined)
> >>>>>>>>        (Lesser General Public License (LGPL)) Process
> >>>>>>>> (org.geotools:gt-process:14.1 - no url defined)
> >>>>>>>>        (Lesser General Public License (LGPL)) Process Feature
> >>>>>>>> (org.geotools:gt-process-feature:14.1 - no url defined)
> >>>>>>>>        (Lesser General Public License (LGPL)) Referencing services
> >>>>>>>> (org.geotools:gt-referencing:14.3 - no url defined)
> >>>>>>>>        (Lesser General Public License (LGPL)) Render
> >>>>>>>> (org.geotools:gt-render:14.1 - no url defined)
> >>>>>>>>        (Lesser General Public License (LGPL)) Shapefile module
> >>>>>>>> (org.geotools:gt-shapefile:14.1 - no url defined)
> >>>>>>>>        (Lesser General Public License (LGPL)) Feature transforming
> >>>>> feature
> >>>>>>>> source wrapper (org.geotools:gt-transform:14.1 - no url defined)
> >>>>>>>>        (Lesser General Public License (LGPL)) XML Parsing
> >>>>>>>> (org.geotools.xsd:gt-xsd-core:14.3 - no url defined)
> >>>>>>>>        (Lesser General Public License (LGPL)) GML2 XML Support
> >>>>>>>> (org.geotools.xsd:gt-xsd-gml2:14.3 - no url defined)
> >>>>>>>>        (Lesser General Public License (LGPL)) GML3 XML Support
> >>>>>>>> (org.geotools.xsd:gt-xsd-gml3:14.3 - no url defined)
> >>>>>>>>
> >>>>>>>> david.
> >>
>

RE: RYA-179 Review License / Copyright notices on Rya Artifacts

Posted by "Meier, Caleb" <Ca...@parsons.com>.

While the indexer project extensions are optional in that they are turned off by default to minimize data plume, I would argue that they are not optional in the sense that Josh has described.  There is no other way to index/query for freetext, geospatial, and temporal data without these extensions.  So if a user wants these capabilities, they need the indexer project and all of the incompatibly licensed dependencies that come along with it.
________________________________________
From: Puja Valiyil [pujav65@gmail.com]
Sent: Wednesday, September 14, 2016 9:49 PM
To: dev@rya.incubator.apache.org
Cc: Billie Rinaldi
Subject: Re: RYA-179 Review License / Copyright notices on Rya Artifacts

The indexer project has a set of configurable optional extension to Rya.  Things like support for geosparql, support for free text indexing, and support for precomputed joins (which is where the fluo integration comes in).  These are extensions that by default are turned off.  They can really increase the data plume associated with some data, which is the main reason why.

In the original port into Apache, this project was only included if you specified that profile.  This was because we have traditionally considered those features experimental and they bring in a lot of possibly unwanted dependencies.  Aaron refactored it to not be optional when he was updating the pond to reference the Apache parent Pom.
So no alternative, but functionality that a typical user may debatably not want.

Sent from my iPhone

> On Sep 14, 2016, at 8:05 PM, Josh Elser <el...@apache.org> wrote:
>
> I would have said that this is only kosher when you have an alternative to the incompatibly licensed software. Is the indexer actually optional (I don't have enough context)? Are there ways for me to to indexing of the same type of data that don't require use of these incompatible dependencies?
>
> Billie might be able to provide some more context too.
>
> Aaron D. Mihalik wrote:
>>> Could we revive the indexer profile again?
>>
>> (tl;dr: Yes.  Mentors: Please correct us if we're wrong)
>>
>> This might be a solution.  I found a couple similar cases with Apache
>> projects and discussions related to those cases.
>>
>> Apache Flink integrated with Amazon Kinesis [1] and [2].  Note that Kinesis
>> is an optional profile, and it's well documented in the POM why it's
>> optional.
>>
>> (Note that NiFi got around this by using Amazon's SDK for Java [3], which
>> is purely Apache 2.0)
>>
>> Spark uses optional profiles to build artifacts based on LGPL
>> dependencies.  Spark has to built by the user to use netlib [4][5], Ganglia
>> [6], or Kinesis [6].
>>
>> I think a profile will work, but I'd like to see it well documented (both
>> in the POM and manual) so that we never accidentally create a release with
>> these artifacts.
>>
>> I was going to open a separate ticket to implement this, but I think it's
>> good to track all of this effort under RYA-177.
>>
>> --Aaron
>>
>> [1]
>> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_apache_flink_blob_release-2D1.1.2_flink-2Dstreaming-2Dconnectors_pom.xml-23L69&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=wnYDdDdgR8EEFav9sKC7ftd6ZjSJcOXU8FISG6jJMHc&e=
>> [2]
>> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_apache_flink_blob_release-2D1.1.2_flink-2Dstreaming-2Dconnectors_flink-2Dconnector-2Dkinesis_pom.xml-23L73&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=ZFTL5gQzyzLvRcWrafGrCobMJ8d1DWSmZlIVz9M7EuQ&e=
>>
>> [3] https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_apache_nifi_blob_master_pom.xml-23L1316&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=6pMGnZxiQccMUFNO18dbUc8luQrhNKa-XVCc1y_YlGg&e=
>>
>> [4] https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_apache_spark_blob_v2.0.0_mllib_pom.xml-23L120&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=apxAyRJMc-jDvRpVzA6wFnuOjlNtFUKev9nXgiv79DM&e=
>> [5]
>> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_apache_spark_blob_v2.0.0_docs_ml-2Dguide.md-23dependencies&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=yFa0G6qUiJpaZxKA--8iuH8m3hxgmutd-0ZD0B32268&e=
>>
>> [6] https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_apache_spark_blob_v2.0.0_pom.xml-23L2414&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=3xSSyDcql0fPyGpmzCoVV4W8Zgv2yHzm_HhKNhQahko&e=
>>
>> [7] https://urldefense.proofpoint.com/v2/url?u=https-3A__issues.apache.org_jira_browse_LEGAL-2D198&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=lyjGafTKlvfprCiiaEuPxZZql8RfTAqKuPm3VuGB87w&e=
>> [8] https://urldefense.proofpoint.com/v2/url?u=https-3A__www.gnu.org_licenses_lgpl-2Djava.html&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=GRs3Rw_AG6rsk_mdzckqKUMoPYAt8c18d8gd5pBmiVI&e=
>>
>>
>>
>>> On Wed, Sep 14, 2016 at 12:09 PM David Lotts<dl...@gmail.com>  wrote:
>>>
>>> Great find Aaron!
>>> The ESRI library is quite comparable!
>>>
>>> Rya via Geomesa are using *JTS Topology Suite (*JTS): (the javadocs at
>>> vividsolutions seems to be 404 )
>>>
>>>
>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__tsusiatsoftware.net_jts_javadoc_com_vividsolutions_jts_geom_Geometry.html&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=nscsppMk-bNMwHX82u4sd7VbUal5jIzdeuq34bmTwg0&e=
>>>
>>> Far from a drop-in replacement, but a path forward:
>>>     https://urldefense.proofpoint.com/v2/url?u=http-3A__esri.github.io_geometry-2Dapi-2Djava_javadoc_&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=2GWOgMrIQvSXFXooaOYQ_y0DQOPcK3xdpCXq0Iev1r0&e=
>>>
>>> Interesting, ESRI has Shape file support, but no GML, the opposite of JTS!
>>> david.
>>>
>>>
>>> On Wed, Sep 14, 2016 at 10:29 AM, Aaron D. Mihalik<
>>> aaron.mihalik@gmail.com>
>>> wrote:
>>>
>>>> Yeah, that sounds possible. I don't like the idea of having to maintain
>>>> another build/ci/release process, though.
>>>>
>>>> More importantly, we'd also have to modify our GeoIndexer interface [1]
>>> to
>>>> something Apache Friendly.  It looks like Ersi puts out an Apache 2.0
>>>> library [2].
>>>>
>>>> [1]
>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_apache_incubator-2Drya_blob_master_&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=2es83xf9omvbFNTaRU0pjHhcWJOjjVD4puEiCGAHTzo&e=
>>>> extras/indexing/src/main/java/mvm/rya/indexing/GeoIndexer.java
>>>> [2] https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_Esri_geometry-2Dapi-2Djava&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=OxkKSfjgLWCFVHN9iHWYMWrc8zXsQFSQVeIg_IZln28&e=
>>>>
>>>>> On Tue, Sep 13, 2016 at 10:36 PM Jim Hughes<jn...@ccri.com>  wrote:
>>>>>
>>>>> Hi Aaron,
>>>>>
>>>>> Thanks, wasn't finding that list quickly...
>>>>>
>>>>> It sounds like the GeoMesa/GeoTools usage might fall under this Q/A:
>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.apache.org_legal_resolved.html-23optional&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=oonzG34DfvESxMKhzH3zwTAP8382Y074uyDImZlXj3w&e= .
>>>>>
>>>>> Thoughts?
>>>>>
>>>>> Jim
>>>>>
>>>>>> On 9/13/2016 9:25 PM, Aaron D. Mihalik wrote:
>>>>>> Jim,
>>>>>>
>>>>>> We've been working off of these lists:
>>>>>>
>>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.apache.org_legal_resolved.html-23category-2Da&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=GxpBa_DXc5ciR7ABQlVXaoTyAHKRAcGQTdaeu9PRlMA&e=
>>>>>>
>>>>>>> On Tue, Sep 13, 2016 at 6:07 PM Jim Hughes<jn...@ccri.com>  wrote:
>>>>>>>
>>>>>>> Hi David,
>>>>>>>
>>>>>>> A number of the geo-dependencies are likely from the geo-indexing
>>>> (which
>>>>>>> uses GeoMesa (Apache 2.0) which uses GeoTools and JTS).
>>>>>>>
>>>>>>> Are there options to make the geoindexing a profile, provide the
>>>> source,
>>>>>>> and not provide artifacts for that code at Apache?
>>>>>>>
>>>>>>> Also, is there a list of approved licenses for Apache projects
>>>>>>> dependencies?
>>>>>>>
>>>>>>> Cheers,
>>>>>>>
>>>>>>> Jim
>>>>>>>
>>>>>>>> On 09/13/2016 05:46 PM, David Lotts wrote:
>>>>>>>> This issue is a release blocker:
>>>>>>>> <https://urldefense.proofpoint.com/v2/url?u=https-3A__issues.apache.org_jira_browse_RYA-2D179&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=tv58xgiqgMT6McWRnFDk4mQv44be_F1AfRhHX4BITFU&e= >
>>>>>>>>
>>>>>>>> RYA-179<https://urldefense.proofpoint.com/v2/url?u=https-3A__issues.apache.org_jira_browse_RYA-2D179&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=tv58xgiqgMT6McWRnFDk4mQv44be_F1AfRhHX4BITFU&e= >  Review
>>>>> License /
>>>>>>>> Copyright notices on Rya Artifacts
>>>>>>>>
>>>>>>>> I was able to create a 3rd party dependency license report for Rya
>>>>>>>> from the license
>>>>>>>> maven plugin.
>>>>>>>> <https://urldefense.proofpoint.com/v2/url?u=http-3A__www.mojohaus.org_license-2Dmaven-2Dplugin_&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=uB2GXLB9U4r3d-2p-1Knb2TtdALTX5Slxi2NDmVZnzU&e= >
>>>>>>>>
>>>>>>>> Good: I can send the full list if you like.  Mostly ASL and clearly
>>>>>>>> permitted.
>>>>>>>>
>>>>>>>> Okay: A number of CDDL and CPL licenses -- permitted if no source
>>>> code
>>>>> is
>>>>>>>> included.
>>>>>>>>
>>>>>>>> Needs Improvement: The following are not clearly permitted
>>> licenses:
>>>>>>>>        (cern.colt MIT license see
>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__dst.lbl.gov_ACSSoftware_colt_license.html&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=nkfTihZpFbwrq1xV6atJsaeFR_wV8Cs8BIfOM2LlV3c&e= ) colt
>>>>>>> (colt:colt:1.2.0 -
>>>>>>>> no url defined)
>>>>>>>>            -- this is a mistake, should be  java.util.Arrays, not
>>>>>>>> cern.colt.Arrays  -- creating an issue to eliminate dependency.
>>>>>>>>        (GNU LESSER GENERAL PUBLIC LICENSE) JCalendar
>>>>>>>> (com.toedter:jcalendar:1.1.4 -
>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.toedter.com_en_jcalendar_&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=xpan75i2SwtO0y9BvlBgDSIKOTgF5c1vBeBaydmmpzM&e= )
>>>>>>>>        (Lesser General Public License (LGPL)) JTS Topology Suite
>>>>>>>> (com.vividsolutions:jts:1.13 -
>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__sourceforge.net_projects_jts-2Dtopo-2Dsuite&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=EE4WpoOm4n_6riGjpReA3wZM6Jzt8hJRSVjDtFzFanQ&e= )
>>>>>>>>        (Lesser General Public License (LGPL)) Image I/O-Extensions
>>> -
>>>>>>> GeoCore
>>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-geocore:1.1.13 - no url
>>>>> defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Image I/O-Extensions
>>> -
>>>>>>> Custom
>>>>>>>> Streams (it.geosolutions.imageio-ext:imageio-ext-streams:1.1.13 -
>>> no
>>>>> url
>>>>>>>> defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Improved TIFF Plugin
>>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-tiff:1.1.13 - no url
>>>> defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Image I/O-Extensions
>>> -
>>>>>>>> utilities classes and methods
>>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-utilities:1.1.13 - no url
>>>>>>> defined)
>>>>>>>>        (Unknown license) jai_codec (javax.media:jai_codec:1.1.3 -
>>> no
>>>>> url
>>>>>>>> defined)
>>>>>>>>        (Unknown license) jai_core (javax.media:jai_core:1.1.3 - no
>>>> url
>>>>>>>> defined)
>>>>>>>>        (Unknown license) jai_imageio (javax.media:jai_imageio:1.1 -
>>>> no
>>>>> url
>>>>>>>> defined)
>>>>>>>>        (Unknown license) jgridshift (jgridshift:jgridshift:1.0 - no
>>>> url
>>>>>>>> defined)
>>>>>>>>        (GNU Lesser General Public License) Remote Tea Runtime
>>>>>>>> (org.acplt:oncrpc:1.0.7 - https://urldefense.proofpoint.com/v2/url?u=http-3A__remotetea.sourceforge.net_&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=EOLDxztEUSjsTNW2QH8XItlqpuIlH5n7_10fdLy8AKY&e= )
>>>>>>>>        (Unknown license) Antlr 3.4 Runtime
>>>>> (org.antlr:antlr-runtime:3.4 -
>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.antlr.org&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=USEC4e6JdxuZZwMB0AkZPzHtdsKWf8ep6g5BSRLQ2XY&s=6JePto8zpoeyNZtl0UNZILGSRA7EgcTN0JCrhpT9jHc&e= )
>>>>>>>>        (Unknown license) Jettison (org.codehaus.jettison:
>>>> jettison:1.1
>>>>> - no
>>>>>>>> url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) API interfaces
>>>>>>>> (org.geotools:gt-api:14.3 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Grid Coverage module
>>>>>>>> (org.geotools:gt-coverage:14.3 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) OGC CQL to Filter
>>>> parser
>>>>>>>> (org.geotools:gt-cql:14.1 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) DataStore Support
>>>>>>>> (org.geotools:gt-data:14.1 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Feature Based Graphs
>>>> and
>>>>>>>> Networks (org.geotools:gt-graph:14.3 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Vector grids
>>>>>>>> (org.geotools:gt-grid:14.1 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Main module
>>>>>>>> (org.geotools:gt-main:14.1 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Metadata
>>>>>>>> (org.geotools:gt-metadata:14.1 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) (OGC copyright) Open
>>>> GIS
>>>>>>>> Interfaces (org.geotools:gt-opengis:14.1 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Process
>>>>>>>> (org.geotools:gt-process:14.1 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Process Feature
>>>>>>>> (org.geotools:gt-process-feature:14.1 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Referencing services
>>>>>>>> (org.geotools:gt-referencing:14.3 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Render
>>>>>>>> (org.geotools:gt-render:14.1 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Shapefile module
>>>>>>>> (org.geotools:gt-shapefile:14.1 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Feature transforming
>>>>> feature
>>>>>>>> source wrapper (org.geotools:gt-transform:14.1 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) XML Parsing
>>>>>>>> (org.geotools.xsd:gt-xsd-core:14.3 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) GML2 XML Support
>>>>>>>> (org.geotools.xsd:gt-xsd-gml2:14.3 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) GML3 XML Support
>>>>>>>> (org.geotools.xsd:gt-xsd-gml3:14.3 - no url defined)
>>>>>>>>
>>>>>>>> david.
>>

Re: RYA-179 Review License / Copyright notices on Rya Artifacts

Posted by Puja Valiyil <pu...@gmail.com>.

The indexer project has a set of configurable optional extension to Rya.  Things like support for geosparql, support for free text indexing, and support for precomputed joins (which is where the fluo integration comes in).  These are extensions that by default are turned off.  They can really increase the data plume associated with some data, which is the main reason why.

In the original port into Apache, this project was only included if you specified that profile.  This was because we have traditionally considered those features experimental and they bring in a lot of possibly unwanted dependencies.  Aaron refactored it to not be optional when he was updating the pond to reference the Apache parent Pom.  
So no alternative, but functionality that a typical user may debatably not want.

Sent from my iPhone

> On Sep 14, 2016, at 8:05 PM, Josh Elser <el...@apache.org> wrote:
> 
> I would have said that this is only kosher when you have an alternative to the incompatibly licensed software. Is the indexer actually optional (I don't have enough context)? Are there ways for me to to indexing of the same type of data that don't require use of these incompatible dependencies?
> 
> Billie might be able to provide some more context too.
> 
> Aaron D. Mihalik wrote:
>>> Could we revive the indexer profile again?
>> 
>> (tl;dr: Yes.  Mentors: Please correct us if we're wrong)
>> 
>> This might be a solution.  I found a couple similar cases with Apache
>> projects and discussions related to those cases.
>> 
>> Apache Flink integrated with Amazon Kinesis [1] and [2].  Note that Kinesis
>> is an optional profile, and it's well documented in the POM why it's
>> optional.
>> 
>> (Note that NiFi got around this by using Amazon's SDK for Java [3], which
>> is purely Apache 2.0)
>> 
>> Spark uses optional profiles to build artifacts based on LGPL
>> dependencies.  Spark has to built by the user to use netlib [4][5], Ganglia
>> [6], or Kinesis [6].
>> 
>> I think a profile will work, but I'd like to see it well documented (both
>> in the POM and manual) so that we never accidentally create a release with
>> these artifacts.
>> 
>> I was going to open a separate ticket to implement this, but I think it's
>> good to track all of this effort under RYA-177.
>> 
>> --Aaron
>> 
>> [1]
>> https://github.com/apache/flink/blob/release-1.1.2/flink-streaming-connectors/pom.xml#L69
>> [2]
>> https://github.com/apache/flink/blob/release-1.1.2/flink-streaming-connectors/flink-connector-kinesis/pom.xml#L73
>> 
>> [3] https://github.com/apache/nifi/blob/master/pom.xml#L1316
>> 
>> [4] https://github.com/apache/spark/blob/v2.0.0/mllib/pom.xml#L120
>> [5]
>> https://github.com/apache/spark/blob/v2.0.0/docs/ml-guide.md#dependencies
>> 
>> [6] https://github.com/apache/spark/blob/v2.0.0/pom.xml#L2414
>> 
>> [7] https://issues.apache.org/jira/browse/LEGAL-198
>> [8] https://www.gnu.org/licenses/lgpl-java.html
>> 
>> 
>> 
>>> On Wed, Sep 14, 2016 at 12:09 PM David Lotts<dl...@gmail.com>  wrote:
>>> 
>>> Great find Aaron!
>>> The ESRI library is quite comparable!
>>> 
>>> Rya via Geomesa are using *JTS Topology Suite (*JTS): (the javadocs at
>>> vividsolutions seems to be 404 )
>>> 
>>> 
>>> http://tsusiatsoftware.net/jts/javadoc/com/vividsolutions/jts/geom/Geometry.html
>>> 
>>> Far from a drop-in replacement, but a path forward:
>>>     http://esri.github.io/geometry-api-java/javadoc/
>>> 
>>> Interesting, ESRI has Shape file support, but no GML, the opposite of JTS!
>>> david.
>>> 
>>> 
>>> On Wed, Sep 14, 2016 at 10:29 AM, Aaron D. Mihalik<
>>> aaron.mihalik@gmail.com>
>>> wrote:
>>> 
>>>> Yeah, that sounds possible. I don't like the idea of having to maintain
>>>> another build/ci/release process, though.
>>>> 
>>>> More importantly, we'd also have to modify our GeoIndexer interface [1]
>>> to
>>>> something Apache Friendly.  It looks like Ersi puts out an Apache 2.0
>>>> library [2].
>>>> 
>>>> [1]
>>>> https://github.com/apache/incubator-rya/blob/master/
>>>> extras/indexing/src/main/java/mvm/rya/indexing/GeoIndexer.java
>>>> [2] https://github.com/Esri/geometry-api-java
>>>> 
>>>>> On Tue, Sep 13, 2016 at 10:36 PM Jim Hughes<jn...@ccri.com>  wrote:
>>>>> 
>>>>> Hi Aaron,
>>>>> 
>>>>> Thanks, wasn't finding that list quickly...
>>>>> 
>>>>> It sounds like the GeoMesa/GeoTools usage might fall under this Q/A:
>>>>> http://www.apache.org/legal/resolved.html#optional.
>>>>> 
>>>>> Thoughts?
>>>>> 
>>>>> Jim
>>>>> 
>>>>>> On 9/13/2016 9:25 PM, Aaron D. Mihalik wrote:
>>>>>> Jim,
>>>>>> 
>>>>>> We've been working off of these lists:
>>>>>> 
>>>>>> http://www.apache.org/legal/resolved.html#category-a
>>>>>> 
>>>>>>> On Tue, Sep 13, 2016 at 6:07 PM Jim Hughes<jn...@ccri.com>  wrote:
>>>>>>> 
>>>>>>> Hi David,
>>>>>>> 
>>>>>>> A number of the geo-dependencies are likely from the geo-indexing
>>>> (which
>>>>>>> uses GeoMesa (Apache 2.0) which uses GeoTools and JTS).
>>>>>>> 
>>>>>>> Are there options to make the geoindexing a profile, provide the
>>>> source,
>>>>>>> and not provide artifacts for that code at Apache?
>>>>>>> 
>>>>>>> Also, is there a list of approved licenses for Apache projects
>>>>>>> dependencies?
>>>>>>> 
>>>>>>> Cheers,
>>>>>>> 
>>>>>>> Jim
>>>>>>> 
>>>>>>>> On 09/13/2016 05:46 PM, David Lotts wrote:
>>>>>>>> This issue is a release blocker:
>>>>>>>> <https://issues.apache.org/jira/browse/RYA-179>
>>>>>>>> 
>>>>>>>> RYA-179<https://issues.apache.org/jira/browse/RYA-179>  Review
>>>>> License /
>>>>>>>> Copyright notices on Rya Artifacts
>>>>>>>> 
>>>>>>>> I was able to create a 3rd party dependency license report for Rya
>>>>>>>> from the license
>>>>>>>> maven plugin.
>>>>>>>> <http://www.mojohaus.org/license-maven-plugin/>
>>>>>>>> 
>>>>>>>> Good: I can send the full list if you like.  Mostly ASL and clearly
>>>>>>>> permitted.
>>>>>>>> 
>>>>>>>> Okay: A number of CDDL and CPL licenses -- permitted if no source
>>>> code
>>>>> is
>>>>>>>> included.
>>>>>>>> 
>>>>>>>> Needs Improvement: The following are not clearly permitted
>>> licenses:
>>>>>>>>        (cern.colt MIT license see
>>>>>>>> https://dst.lbl.gov/ACSSoftware/colt/license.html) colt
>>>>>>> (colt:colt:1.2.0 -
>>>>>>>> no url defined)
>>>>>>>>            -- this is a mistake, should be  java.util.Arrays, not
>>>>>>>> cern.colt.Arrays  -- creating an issue to eliminate dependency.
>>>>>>>>        (GNU LESSER GENERAL PUBLIC LICENSE) JCalendar
>>>>>>>> (com.toedter:jcalendar:1.1.4 -
>>> http://www.toedter.com/en/jcalendar/)
>>>>>>>>        (Lesser General Public License (LGPL)) JTS Topology Suite
>>>>>>>> (com.vividsolutions:jts:1.13 -
>>>>>>>> http://sourceforge.net/projects/jts-topo-suite)
>>>>>>>>        (Lesser General Public License (LGPL)) Image I/O-Extensions
>>> -
>>>>>>> GeoCore
>>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-geocore:1.1.13 - no url
>>>>> defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Image I/O-Extensions
>>> -
>>>>>>> Custom
>>>>>>>> Streams (it.geosolutions.imageio-ext:imageio-ext-streams:1.1.13 -
>>> no
>>>>> url
>>>>>>>> defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Improved TIFF Plugin
>>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-tiff:1.1.13 - no url
>>>> defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Image I/O-Extensions
>>> -
>>>>>>>> utilities classes and methods
>>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-utilities:1.1.13 - no url
>>>>>>> defined)
>>>>>>>>        (Unknown license) jai_codec (javax.media:jai_codec:1.1.3 -
>>> no
>>>>> url
>>>>>>>> defined)
>>>>>>>>        (Unknown license) jai_core (javax.media:jai_core:1.1.3 - no
>>>> url
>>>>>>>> defined)
>>>>>>>>        (Unknown license) jai_imageio (javax.media:jai_imageio:1.1 -
>>>> no
>>>>> url
>>>>>>>> defined)
>>>>>>>>        (Unknown license) jgridshift (jgridshift:jgridshift:1.0 - no
>>>> url
>>>>>>>> defined)
>>>>>>>>        (GNU Lesser General Public License) Remote Tea Runtime
>>>>>>>> (org.acplt:oncrpc:1.0.7 - http://remotetea.sourceforge.net/)
>>>>>>>>        (Unknown license) Antlr 3.4 Runtime
>>>>> (org.antlr:antlr-runtime:3.4 -
>>>>>>>> http://www.antlr.org)
>>>>>>>>        (Unknown license) Jettison (org.codehaus.jettison:
>>>> jettison:1.1
>>>>> - no
>>>>>>>> url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) API interfaces
>>>>>>>> (org.geotools:gt-api:14.3 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Grid Coverage module
>>>>>>>> (org.geotools:gt-coverage:14.3 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) OGC CQL to Filter
>>>> parser
>>>>>>>> (org.geotools:gt-cql:14.1 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) DataStore Support
>>>>>>>> (org.geotools:gt-data:14.1 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Feature Based Graphs
>>>> and
>>>>>>>> Networks (org.geotools:gt-graph:14.3 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Vector grids
>>>>>>>> (org.geotools:gt-grid:14.1 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Main module
>>>>>>>> (org.geotools:gt-main:14.1 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Metadata
>>>>>>>> (org.geotools:gt-metadata:14.1 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) (OGC copyright) Open
>>>> GIS
>>>>>>>> Interfaces (org.geotools:gt-opengis:14.1 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Process
>>>>>>>> (org.geotools:gt-process:14.1 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Process Feature
>>>>>>>> (org.geotools:gt-process-feature:14.1 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Referencing services
>>>>>>>> (org.geotools:gt-referencing:14.3 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Render
>>>>>>>> (org.geotools:gt-render:14.1 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Shapefile module
>>>>>>>> (org.geotools:gt-shapefile:14.1 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) Feature transforming
>>>>> feature
>>>>>>>> source wrapper (org.geotools:gt-transform:14.1 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) XML Parsing
>>>>>>>> (org.geotools.xsd:gt-xsd-core:14.3 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) GML2 XML Support
>>>>>>>> (org.geotools.xsd:gt-xsd-gml2:14.3 - no url defined)
>>>>>>>>        (Lesser General Public License (LGPL)) GML3 XML Support
>>>>>>>> (org.geotools.xsd:gt-xsd-gml3:14.3 - no url defined)
>>>>>>>> 
>>>>>>>> david.
>>

Re: RYA-179 Review License / Copyright notices on Rya Artifacts

Posted by David Lotts <dl...@gmail.com>.

Here the method I used to find the licenses for dependencies, and below is
reprint of the results with better wrapping:

I used the license-maven-plugin[1]
It does not require changes to the pom.xml.  I just ran this command in the
root.

    mvn license:aggregate-add-third-party

It generated a file for each module in the 'target/' folder[2].   The root
target folder contains the aggregated list.  I researched most of the ones
tagged as '(Unknown license)'.

We could possibly add something to the pom.xml to do an automatic file
generation in our build to update the files.  It's described in the plugin
docs[1] .

[1]  http://www.mojohaus.org/license-maven-plugin/usage.html
[2]  ./target/generated-sources/license/THIRD-PARTY.txt

This issue is a release blocker:

RYA-177 Review License on Rya Dependencies

I was able to create a 3rd party dependency license report for Rya from the
license maven plugin.

- Good: I can send the full list if you like.  Mostly ASL and clearly
permitted.

- Okay: A number of CDDL and CPL licenses -- permitted if no source code is
included.

- Needs Improvement: The following are not clearly permitted licenses:

(LGPL) (OGC copyright) Open GIS Interfaces
        (org.geotools:gt-opengis:14.1 - no url defined)
(LGPL) API interfaces

(org.geotools:gt-api:14.3 - no url defined)
(LGPL) DataStore Support
        (org.geotools:gt-data:14.1 - no url defined)
(LGPL) Feature Based Graphs and Networks
        (org.geotools:gt-graph:14.3 - no url defined)
(LGPL) Feature transforming feature source wrapper
        (org.geotools:gt-transform:14.1 - no url defined)
(LGPL) GML2 XML Support
        (org.geotools.xsd:gt-xsd-gml2:14.3 - no url defined)
(LGPL) GML3 XML Support
        (org.geotools.xsd:gt-xsd-gml3:14.3 - no url defined)
(LGPL) Grid Coverage module
        (org.geotools:gt-coverage:14.3 - no url defined)
(LGPL) Image I/O-Extensions - Custom Streams
        (org.geosolutions.imageio-ext:imageio-ext-streams:1.1.13
        - no url defined)
(LGPL) Image I/O-Extensions - GeoCore
        (org.geosolutions.imageio-ext:imageio-ext-geocore:1.1.13
        - no url defined)
(LGPL) Image I/O-Extensions - utilities classes and methods
        (org.geosolutions.imageio-ext:imageio-ext-utilities:1.1.13
        - no url defined)
(LGPL) Improved TIFF Plugin
        (org.geosolutions.imageio-ext:imageio-ext-tiff:1.1.13
        - no url defined)
(LGPL) JCalendar (com.toedter:jcalendar:1.1.4
        - http://www.toedter.com/en/jcalendar/)
(LGPL) JTS Topology Suite (com.vividsolutions:jts:1.13
        - http://sourceforge.net/projects/jts-topo-suite)
(LGPL) Main module
        (org.geotools:gt-main:14.1 - no url defined)
(LGPL) Metadata
        (org.geotools:gt-metadata:14.1 - no url defined)
(LGPL) OGC CQL to Filter parser
        (org.geotools:gt-cql:14.1 - no url defined)
(LGPL) Process
        (org.geotools:gt-process:14.1 - no url defined)
(LGPL) Process Feature
        (org.geotools:gt-process-feature:14.1 - no url defined)
(LGPL) Referencing services
        (org.geotools:gt-referencing:14.3 - no url defined)
(LGPL) Remote Tea Runtime
        (org.acplt:oncrpc:1.0.7 - http://remotetea.sourceforge.net/)
(LGPL) Render
        (org.geotools:gt-render:14.1 - no url defined)
(LGPL) Shapefile module
        (org.geotools:gt-shapefile:14.1 - no url defined)
(LGPL) Vector grids
        (org.geotools:gt-grid:14.1 - no url defined)
(LGPL) XML Parsing
        (org.geotools.xsd:gt-xsd-core:14.3 - no url defined)
(Unknown license) Antlr 3.4 Runtime
        (org.antlr:antlr-runtime:3.4 - http://www.antlr.org)
(Unknown license) Jettison
        (org.codehaus.jettison:jettison:1.1 - no url defined)
(Unknown license) jai_codec (javax.media:jai_codec:1.1.3 - no url defined)
(Unknown license) jai_core (javax.media:jai_core:1.1.3 - no url defined)
(Unknown license) jai_imageio (javax.media:jai_imageio:1.1 - no url defined)
(Unknown license) jgridshift (jgridshift:jgridshift:1.0 - no url defined)
(MIT license for package cern.colt.* only) colt
        (colt:colt:1.2.0 - no url defined)
        -- this is a mistake, should be using:
        --     java.util.Arrays, not  cern.colt.Arrays
        -- creating an issue to eliminate dependency.

david.

On Thu, Sep 15, 2016 at 9:34 AM, Jim Hughes <jn...@ccri.com> wrote:

> Hi David,
>
> Ayup.  As I mentioned in another part of the thread, we had to exclude and
> work around category-X transitive dependencies.  Eclipse and Apache both
> agree on many of the no-go licenses and only-if you must ones.
>
> Since you mentioned JAI, I'd note that there is a project called Raster
> Processing Engine which is getting started to provide a better-licensed
> alternative.  There are a number of ways in which things are improving
> (both license-wise and in terms of technology).
>
> Cheers,
>
> Jim
>
>
> On 09/14/2016 03:35 PM, David Lotts wrote:
>
>> Jim, thanks for the clarity!  So that is settled, we can't just wait for
>> the wind to shift directions. :-)
>>
>> BTW, I see how several of the catagory-X dependencies (of dependancies)*
>> are removed -- thanks to
>> https://github.com/locationtech/geomesa/blob/master/pom.xml :
>> <exclusion>
>> <!-- excluded due to license issues -->
>> <groupId>javax.media</groupId>
>> <artifactId>jai_codec</artifactId>
>> </exclusion>
>> There are a bunch of examples of this in the geomesa pom.
>>
>> david.
>>
>> On Wed, Sep 14, 2016 at 3:12 PM, Jim Hughes <jn...@ccri.com> wrote:
>>
>> Hi Dave,
>>>
>>> Good question.  Currently, there are no plans for GeoMesa to be free of
>>> GeoTools.  At the minute, GeoTools and GeoServer are two of the best
>>> projects for handling geospatial processing and serving up the results
>>> via
>>> OGC access patterns.  It is inconvenient that their licenses aren't more
>>> business friendly.  I'd point out that several of these projects were in
>>> existence before ASF license version 1.1.;)
>>>
>>> In terms of integrations of GeoMesa and Apache projects, in many cases
>>> (such as Storm or Kafka), I think it might make more sense for GeoMesa to
>>> depend on the Apache project or for there to be a third-party project
>>> which
>>> depends on both (for example with NiFi). Overall, I'd love to see better
>>> licensing so that dependencies can go either direction.  I spend more
>>> time
>>> than I care to dealing with legal details like this...
>>>
>>> For other LocationTech projects, I'd point out that only a few use
>>> GeoTools.  For instance, Spatial4J is used by Apache Lucene. Overall, the
>>> Eclipse Foundation (and LocationTech by extension) hosts projects which
>>> have business-friendly licenses.
>>>
>>> Anyhow, I hope that helps clarify things a bit.
>>>
>>> Cheers,
>>>
>>> Jim
>>>
>>>
>>> On 09/14/2016 02:29 PM, David Lotts wrote:
>>>
>>> Oops, this thread was supposed to be subject RYA-177
>>>> RYA-179 is corrections to Rya source file license headers.
>>>>
>>>> Jim, do you know when GeoMesa plans to be completely free of GeoTools ?
>>>> Clearly Geotools is an obstacle for Apache projects to use LocationTech
>>>> projects, or at least GeoMesa.
>>>> Or is there another path forward for GeoMesa?
>>>>
>>>> On Wed, Sep 14, 2016 at 1:48 PM, Aaron D. Mihalik <
>>>> aaron.mihalik@gmail.com>
>>>> wrote:
>>>>
>>>> Could we revive the indexer profile again?
>>>>
>>>>> (tl;dr: Yes.  Mentors: Please correct us if we're wrong)
>>>>>
>>>>> This might be a solution.  I found a couple similar cases with Apache
>>>>> projects and discussions related to those cases.
>>>>>
>>>>> Apache Flink integrated with Amazon Kinesis [1] and [2].  Note that
>>>>> Kinesis
>>>>> is an optional profile, and it's well documented in the POM why it's
>>>>> optional.
>>>>>
>>>>> (Note that NiFi got around this by using Amazon's SDK for Java [3],
>>>>> which
>>>>> is purely Apache 2.0)
>>>>>
>>>>> Spark uses optional profiles to build artifacts based on LGPL
>>>>> dependencies.  Spark has to built by the user to use netlib [4][5],
>>>>> Ganglia
>>>>> [6], or Kinesis [6].
>>>>>
>>>>> I think a profile will work, but I'd like to see it well documented
>>>>> (both
>>>>> in the POM and manual) so that we never accidentally create a release
>>>>> with
>>>>> these artifacts.
>>>>>
>>>>> I was going to open a separate ticket to implement this, but I think
>>>>> it's
>>>>> good to track all of this effort under RYA-177.
>>>>>
>>>>> --Aaron
>>>>>
>>>>> [1]
>>>>> https://github.com/apache/flink/blob/release-1.1.2/
>>>>> flink-streaming-connectors/pom.xml#L69
>>>>> [2]
>>>>> https://github.com/apache/flink/blob/release-1.1.2/
>>>>> flink-streaming-connectors/flink-connector-kinesis/pom.xml#L73
>>>>>
>>>>> [3] https://github.com/apache/nifi/blob/master/pom.xml#L1316
>>>>>
>>>>> [4] https://github.com/apache/spark/blob/v2.0.0/mllib/pom.xml#L120
>>>>> [5]
>>>>> https://github.com/apache/spark/blob/v2.0.0/docs/ml-guide.
>>>>> md#dependencies
>>>>>
>>>>> [6] https://github.com/apache/spark/blob/v2.0.0/pom.xml#L2414
>>>>>
>>>>> [7] https://issues.apache.org/jira/browse/LEGAL-198
>>>>> [8] https://www.gnu.org/licenses/lgpl-java.html
>>>>>
>>>>>
>>>>>
>>>>> On Wed, Sep 14, 2016 at 12:09 PM David Lotts <dl...@gmail.com> wrote:
>>>>>
>>>>> Great find Aaron!
>>>>>
>>>>>> The ESRI library is quite comparable!
>>>>>>
>>>>>> Rya via Geomesa are using *JTS Topology Suite (*JTS): (the javadocs at
>>>>>> vividsolutions seems to be 404 )
>>>>>>
>>>>>>
>>>>>> http://tsusiatsoftware.net/jts/javadoc/com/vividsolutions/jts/geom/
>>>>>>
>>>>>> Geometry.html
>>>>>
>>>>> Far from a drop-in replacement, but a path forward:
>>>>>>       http://esri.github.io/geometry-api-java/javadoc/
>>>>>>
>>>>>> Interesting, ESRI has Shape file support, but no GML, the opposite of
>>>>>>
>>>>>> JTS!
>>>>>
>>>>> david.
>>>>>>
>>>>>>
>>>>>> On Wed, Sep 14, 2016 at 10:29 AM, Aaron D. Mihalik <
>>>>>> aaron.mihalik@gmail.com>
>>>>>> wrote:
>>>>>>
>>>>>> Yeah, that sounds possible. I don't like the idea of having to
>>>>>> maintain
>>>>>>
>>>>>>> another build/ci/release process, though.
>>>>>>>
>>>>>>> More importantly, we'd also have to modify our GeoIndexer interface
>>>>>>> [1]
>>>>>>>
>>>>>>> to
>>>>>>
>>>>>> something Apache Friendly.  It looks like Ersi puts out an Apache 2.0
>>>>>>> library [2].
>>>>>>>
>>>>>>> [1]
>>>>>>> https://github.com/apache/incubator-rya/blob/master/
>>>>>>> extras/indexing/src/main/java/mvm/rya/indexing/GeoIndexer.java
>>>>>>> [2] https://github.com/Esri/geometry-api-java
>>>>>>>
>>>>>>> On Tue, Sep 13, 2016 at 10:36 PM Jim Hughes <jn...@ccri.com> wrote:
>>>>>>>
>>>>>>> Hi Aaron,
>>>>>>>
>>>>>>>> Thanks, wasn't finding that list quickly...
>>>>>>>>
>>>>>>>> It sounds like the GeoMesa/GeoTools usage might fall under this Q/A:
>>>>>>>> http://www.apache.org/legal/resolved.html#optional.
>>>>>>>>
>>>>>>>> Thoughts?
>>>>>>>>
>>>>>>>> Jim
>>>>>>>>
>>>>>>>> On 9/13/2016 9:25 PM, Aaron D. Mihalik wrote:
>>>>>>>>
>>>>>>>> Jim,
>>>>>>>>>
>>>>>>>>> We've been working off of these lists:
>>>>>>>>>
>>>>>>>>> http://www.apache.org/legal/resolved.html#category-a
>>>>>>>>>
>>>>>>>>> On Tue, Sep 13, 2016 at 6:07 PM Jim Hughes <jn...@ccri.com> wrote:
>>>>>>>>>
>>>>>>>>> Hi David,
>>>>>>>>>
>>>>>>>>>> A number of the geo-dependencies are likely from the geo-indexing
>>>>>>>>>>
>>>>>>>>>> (which
>>>>>>>>>
>>>>>>>> uses GeoMesa (Apache 2.0) which uses GeoTools and JTS).
>>>>>>>>
>>>>>>>>> Are there options to make the geoindexing a profile, provide the
>>>>>>>>>>
>>>>>>>>>> source,
>>>>>>>>>
>>>>>>>> and not provide artifacts for that code at Apache?
>>>>>>>>
>>>>>>>>> Also, is there a list of approved licenses for Apache projects
>>>>>>>>>> dependencies?
>>>>>>>>>>
>>>>>>>>>> Cheers,
>>>>>>>>>>
>>>>>>>>>> Jim
>>>>>>>>>>
>>>>>>>>>> On 09/13/2016 05:46 PM, David Lotts wrote:
>>>>>>>>>>
>>>>>>>>>> This issue is a release blocker:
>>>>>>>>>>> <https://issues.apache.org/jira/browse/RYA-179>
>>>>>>>>>>>
>>>>>>>>>>> RYA-179 <https://issues.apache.org/jira/browse/RYA-179> Review
>>>>>>>>>>>
>>>>>>>>>>> License /
>>>>>>>>>>
>>>>>>>>> Copyright notices on Rya Artifacts
>>>>>>>>>
>>>>>>>>>> I was able to create a 3rd party dependency license report for
>>>>>>>>>>>
>>>>>>>>>>> Rya
>>>>>>>>>>
>>>>>>>>> from the license
>>>>>>
>>>>>>> maven plugin.
>>>>>>>>>>> <http://www.mojohaus.org/license-maven-plugin/>
>>>>>>>>>>>
>>>>>>>>>>> Good: I can send the full list if you like.  Mostly ASL and
>>>>>>>>>>>
>>>>>>>>>>> clearly
>>>>>>>>>>
>>>>>>>>> permitted.
>>>>>>
>>>>>>> Okay: A number of CDDL and CPL licenses -- permitted if no source
>>>>>>>>>>>
>>>>>>>>>>> code
>>>>>>>>>>
>>>>>>>>> is
>>>>>>>>
>>>>>>>> included.
>>>>>>>>>
>>>>>>>>>> Needs Improvement: The following are not clearly permitted
>>>>>>>>>>>
>>>>>>>>>>> licenses:
>>>>>>>>>>
>>>>>>>>>          (cern.colt MIT license see
>>>>>>>
>>>>>>>> https://dst.lbl.gov/ACSSoftware/colt/license.html) colt
>>>>>>>>>>>
>>>>>>>>>>> (colt:colt:1.2.0 -
>>>>>>>>>>
>>>>>>>>>> no url defined)
>>>>>>>>>>>              -- this is a mistake, should be  java.util.Arrays,
>>>>>>>>>>> not
>>>>>>>>>>> cern.colt.Arrays  -- creating an issue to eliminate dependency.
>>>>>>>>>>>          (GNU LESSER GENERAL PUBLIC LICENSE) JCalendar
>>>>>>>>>>> (com.toedter:jcalendar:1.1.4 -
>>>>>>>>>>>
>>>>>>>>>>> http://www.toedter.com/en/jcalendar/)
>>>>>>>>>>
>>>>>>>>>          (Lesser General Public License (LGPL)) JTS Topology Suite
>>>>>>>
>>>>>>>> (com.vividsolutions:jts:1.13 -
>>>>>>>>>>> http://sourceforge.net/projects/jts-topo-suite)
>>>>>>>>>>>          (Lesser General Public License (LGPL)) Image
>>>>>>>>>>>
>>>>>>>>>>> I/O-Extensions
>>>>>>>>>>
>>>>>>>>> -
>>>>>>
>>>>>> GeoCore
>>>>>>>
>>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-geocore:1.1.13 - no url
>>>>>>>>>>>
>>>>>>>>>>> defined)
>>>>>>>>>>
>>>>>>>>>          (Lesser General Public License (LGPL)) Image
>>>>>>>>>
>>>>>>>>>> I/O-Extensions
>>>>>>>>>>
>>>>>>>>> -
>>>>>>
>>>>>> Custom
>>>>>>>
>>>>>>>> Streams (it.geosolutions.imageio-ext:imageio-ext-streams:1.1.13
>>>>>>>>>>>
>>>>>>>>>>> -
>>>>>>>>>>
>>>>>>>>> no
>>>>>>
>>>>>> url
>>>>>>>
>>>>>>>> defined)
>>>>>>>>>
>>>>>>>>>>          (Lesser General Public License (LGPL)) Improved TIFF
>>>>>>>>>>>
>>>>>>>>>>> Plugin
>>>>>>>>>>
>>>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-tiff:1.1.13 - no url
>>>>>>
>>>>>>> defined)
>>>>>>>>>>
>>>>>>>>>          (Lesser General Public License (LGPL)) Image
>>>>>>>>
>>>>>>>>> I/O-Extensions
>>>>>>>>>>
>>>>>>>>> -
>>>>>>
>>>>>> utilities classes and methods
>>>>>>>
>>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-utilities:1.1.13 - no
>>>>>>>>>>>
>>>>>>>>>>> url
>>>>>>>>>>
>>>>>>>>> defined)
>>>>>>
>>>>>>>          (Unknown license) jai_codec (javax.media:jai_codec:1.1.3 -
>>>>>>>>>>>
>>>>>>>>>>> no
>>>>>>>>>>
>>>>>>>>> url
>>>>>>>
>>>>>>>> defined)
>>>>>>>>>
>>>>>>>>>>          (Unknown license) jai_core (javax.media:jai_core:1.1.3 -
>>>>>>>>>>>
>>>>>>>>>>> no
>>>>>>>>>>
>>>>>>>>> url
>>>>>>
>>>>>>> defined)
>>>>>>>>
>>>>>>>>>          (Unknown license) jai_imageio
>>>>>>>>>>>
>>>>>>>>>>> (javax.media:jai_imageio:1.1 -
>>>>>>>>>>
>>>>>>>>> no
>>>>>>
>>>>>>> url
>>>>>>>>
>>>>>>>> defined)
>>>>>>>>>
>>>>>>>>>>          (Unknown license) jgridshift (jgridshift:jgridshift:1.0 -
>>>>>>>>>>>
>>>>>>>>>>> no
>>>>>>>>>>
>>>>>>>>> url
>>>>>>
>>>>>>> defined)
>>>>>>>>
>>>>>>>>>          (GNU Lesser General Public License) Remote Tea Runtime
>>>>>>>>>>> (org.acplt:oncrpc:1.0.7 - http://remotetea.sourceforge.net/)
>>>>>>>>>>>          (Unknown license) Antlr 3.4 Runtime
>>>>>>>>>>>
>>>>>>>>>>> (org.antlr:antlr-runtime:3.4 -
>>>>>>>>>>
>>>>>>>>> http://www.antlr.org)
>>>>>>>>>
>>>>>>>>>>          (Unknown license) Jettison (org.codehaus.jettison:
>>>>>>>>>>>
>>>>>>>>>>> jettison:1.1
>>>>>>>>>>
>>>>>>>>> - no
>>>>>>>>
>>>>>>>> url defined)
>>>>>>>>>
>>>>>>>>>>          (Lesser General Public License (LGPL)) API interfaces
>>>>>>>>>>> (org.geotools:gt-api:14.3 - no url defined)
>>>>>>>>>>>          (Lesser General Public License (LGPL)) Grid Coverage
>>>>>>>>>>>
>>>>>>>>>>> module
>>>>>>>>>>
>>>>>>>>> (org.geotools:gt-coverage:14.3 - no url defined)
>>>>>>
>>>>>>>          (Lesser General Public License (LGPL)) OGC CQL to Filter
>>>>>>>>>>>
>>>>>>>>>>> parser
>>>>>>>>>>
>>>>>>>>> (org.geotools:gt-cql:14.1 - no url defined)
>>>>>>>>
>>>>>>>>>          (Lesser General Public License (LGPL)) DataStore Support
>>>>>>>>>>> (org.geotools:gt-data:14.1 - no url defined)
>>>>>>>>>>>          (Lesser General Public License (LGPL)) Feature Based
>>>>>>>>>>>
>>>>>>>>>>> Graphs
>>>>>>>>>>
>>>>>>>>> and
>>>>>>
>>>>>>> Networks (org.geotools:gt-graph:14.3 - no url defined)
>>>>>>>>
>>>>>>>>>          (Lesser General Public License (LGPL)) Vector grids
>>>>>>>>>>> (org.geotools:gt-grid:14.1 - no url defined)
>>>>>>>>>>>          (Lesser General Public License (LGPL)) Main module
>>>>>>>>>>> (org.geotools:gt-main:14.1 - no url defined)
>>>>>>>>>>>          (Lesser General Public License (LGPL)) Metadata
>>>>>>>>>>> (org.geotools:gt-metadata:14.1 - no url defined)
>>>>>>>>>>>          (Lesser General Public License (LGPL)) (OGC copyright)
>>>>>>>>>>>
>>>>>>>>>>> Open
>>>>>>>>>>
>>>>>>>>> GIS
>>>>>>
>>>>>>> Interfaces (org.geotools:gt-opengis:14.1 - no url defined)
>>>>>>>>
>>>>>>>>>          (Lesser General Public License (LGPL)) Process
>>>>>>>>>>> (org.geotools:gt-process:14.1 - no url defined)
>>>>>>>>>>>          (Lesser General Public License (LGPL)) Process Feature
>>>>>>>>>>> (org.geotools:gt-process-feature:14.1 - no url defined)
>>>>>>>>>>>          (Lesser General Public License (LGPL)) Referencing
>>>>>>>>>>>
>>>>>>>>>>> services
>>>>>>>>>>
>>>>>>>>> (org.geotools:gt-referencing:14.3 - no url defined)
>>>>>>
>>>>>>>          (Lesser General Public License (LGPL)) Render
>>>>>>>>>>> (org.geotools:gt-render:14.1 - no url defined)
>>>>>>>>>>>          (Lesser General Public License (LGPL)) Shapefile module
>>>>>>>>>>> (org.geotools:gt-shapefile:14.1 - no url defined)
>>>>>>>>>>>          (Lesser General Public License (LGPL)) Feature
>>>>>>>>>>>
>>>>>>>>>>> transforming
>>>>>>>>>>
>>>>>>>>> feature
>>>>>>
>>>>>>> source wrapper (org.geotools:gt-transform:14.1 - no url defined)
>>>>>>>>>
>>>>>>>>>>          (Lesser General Public License (LGPL)) XML Parsing
>>>>>>>>>>> (org.geotools.xsd:gt-xsd-core:14.3 - no url defined)
>>>>>>>>>>>          (Lesser General Public License (LGPL)) GML2 XML Support
>>>>>>>>>>> (org.geotools.xsd:gt-xsd-gml2:14.3 - no url defined)
>>>>>>>>>>>          (Lesser General Public License (LGPL)) GML3 XML Support
>>>>>>>>>>> (org.geotools.xsd:gt-xsd-gml3:14.3 - no url defined)
>>>>>>>>>>>
>>>>>>>>>>> david.
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>>
>

Re: RYA-179 Review License / Copyright notices on Rya Artifacts

Posted by Jim Hughes <jn...@ccri.com>.

Hi David,

Ayup.  As I mentioned in another part of the thread, we had to exclude 
and work around category-X transitive dependencies.  Eclipse and Apache 
both agree on many of the no-go licenses and only-if you must ones.

Since you mentioned JAI, I'd note that there is a project called Raster 
Processing Engine which is getting started to provide a better-licensed 
alternative.  There are a number of ways in which things are improving 
(both license-wise and in terms of technology).

Cheers,

Jim

On 09/14/2016 03:35 PM, David Lotts wrote:
> Jim, thanks for the clarity!  So that is settled, we can't just wait for
> the wind to shift directions. :-)
>
> BTW, I see how several of the catagory-X dependencies (of dependancies)*
> are removed -- thanks to
> https://github.com/locationtech/geomesa/blob/master/pom.xml :
> <exclusion>
> <!-- excluded due to license issues -->
> <groupId>javax.media</groupId>
> <artifactId>jai_codec</artifactId>
> </exclusion>
> There are a bunch of examples of this in the geomesa pom.
>
> david.
>
> On Wed, Sep 14, 2016 at 3:12 PM, Jim Hughes <jn...@ccri.com> wrote:
>
>> Hi Dave,
>>
>> Good question.  Currently, there are no plans for GeoMesa to be free of
>> GeoTools.  At the minute, GeoTools and GeoServer are two of the best
>> projects for handling geospatial processing and serving up the results via
>> OGC access patterns.  It is inconvenient that their licenses aren't more
>> business friendly.  I'd point out that several of these projects were in
>> existence before ASF license version 1.1.;)
>>
>> In terms of integrations of GeoMesa and Apache projects, in many cases
>> (such as Storm or Kafka), I think it might make more sense for GeoMesa to
>> depend on the Apache project or for there to be a third-party project which
>> depends on both (for example with NiFi). Overall, I'd love to see better
>> licensing so that dependencies can go either direction.  I spend more time
>> than I care to dealing with legal details like this...
>>
>> For other LocationTech projects, I'd point out that only a few use
>> GeoTools.  For instance, Spatial4J is used by Apache Lucene. Overall, the
>> Eclipse Foundation (and LocationTech by extension) hosts projects which
>> have business-friendly licenses.
>>
>> Anyhow, I hope that helps clarify things a bit.
>>
>> Cheers,
>>
>> Jim
>>
>>
>> On 09/14/2016 02:29 PM, David Lotts wrote:
>>
>>> Oops, this thread was supposed to be subject RYA-177
>>> RYA-179 is corrections to Rya source file license headers.
>>>
>>> Jim, do you know when GeoMesa plans to be completely free of GeoTools ?
>>> Clearly Geotools is an obstacle for Apache projects to use LocationTech
>>> projects, or at least GeoMesa.
>>> Or is there another path forward for GeoMesa?
>>>
>>> On Wed, Sep 14, 2016 at 1:48 PM, Aaron D. Mihalik <
>>> aaron.mihalik@gmail.com>
>>> wrote:
>>>
>>> Could we revive the indexer profile again?
>>>> (tl;dr: Yes.  Mentors: Please correct us if we're wrong)
>>>>
>>>> This might be a solution.  I found a couple similar cases with Apache
>>>> projects and discussions related to those cases.
>>>>
>>>> Apache Flink integrated with Amazon Kinesis [1] and [2].  Note that
>>>> Kinesis
>>>> is an optional profile, and it's well documented in the POM why it's
>>>> optional.
>>>>
>>>> (Note that NiFi got around this by using Amazon's SDK for Java [3], which
>>>> is purely Apache 2.0)
>>>>
>>>> Spark uses optional profiles to build artifacts based on LGPL
>>>> dependencies.  Spark has to built by the user to use netlib [4][5],
>>>> Ganglia
>>>> [6], or Kinesis [6].
>>>>
>>>> I think a profile will work, but I'd like to see it well documented (both
>>>> in the POM and manual) so that we never accidentally create a release
>>>> with
>>>> these artifacts.
>>>>
>>>> I was going to open a separate ticket to implement this, but I think it's
>>>> good to track all of this effort under RYA-177.
>>>>
>>>> --Aaron
>>>>
>>>> [1]
>>>> https://github.com/apache/flink/blob/release-1.1.2/
>>>> flink-streaming-connectors/pom.xml#L69
>>>> [2]
>>>> https://github.com/apache/flink/blob/release-1.1.2/
>>>> flink-streaming-connectors/flink-connector-kinesis/pom.xml#L73
>>>>
>>>> [3] https://github.com/apache/nifi/blob/master/pom.xml#L1316
>>>>
>>>> [4] https://github.com/apache/spark/blob/v2.0.0/mllib/pom.xml#L120
>>>> [5]
>>>> https://github.com/apache/spark/blob/v2.0.0/docs/ml-guide.
>>>> md#dependencies
>>>>
>>>> [6] https://github.com/apache/spark/blob/v2.0.0/pom.xml#L2414
>>>>
>>>> [7] https://issues.apache.org/jira/browse/LEGAL-198
>>>> [8] https://www.gnu.org/licenses/lgpl-java.html
>>>>
>>>>
>>>>
>>>> On Wed, Sep 14, 2016 at 12:09 PM David Lotts <dl...@gmail.com> wrote:
>>>>
>>>> Great find Aaron!
>>>>> The ESRI library is quite comparable!
>>>>>
>>>>> Rya via Geomesa are using *JTS Topology Suite (*JTS): (the javadocs at
>>>>> vividsolutions seems to be 404 )
>>>>>
>>>>>
>>>>> http://tsusiatsoftware.net/jts/javadoc/com/vividsolutions/jts/geom/
>>>>>
>>>> Geometry.html
>>>>
>>>>> Far from a drop-in replacement, but a path forward:
>>>>>       http://esri.github.io/geometry-api-java/javadoc/
>>>>>
>>>>> Interesting, ESRI has Shape file support, but no GML, the opposite of
>>>>>
>>>> JTS!
>>>>
>>>>> david.
>>>>>
>>>>>
>>>>> On Wed, Sep 14, 2016 at 10:29 AM, Aaron D. Mihalik <
>>>>> aaron.mihalik@gmail.com>
>>>>> wrote:
>>>>>
>>>>> Yeah, that sounds possible. I don't like the idea of having to maintain
>>>>>> another build/ci/release process, though.
>>>>>>
>>>>>> More importantly, we'd also have to modify our GeoIndexer interface [1]
>>>>>>
>>>>> to
>>>>>
>>>>>> something Apache Friendly.  It looks like Ersi puts out an Apache 2.0
>>>>>> library [2].
>>>>>>
>>>>>> [1]
>>>>>> https://github.com/apache/incubator-rya/blob/master/
>>>>>> extras/indexing/src/main/java/mvm/rya/indexing/GeoIndexer.java
>>>>>> [2] https://github.com/Esri/geometry-api-java
>>>>>>
>>>>>> On Tue, Sep 13, 2016 at 10:36 PM Jim Hughes <jn...@ccri.com> wrote:
>>>>>>
>>>>>> Hi Aaron,
>>>>>>> Thanks, wasn't finding that list quickly...
>>>>>>>
>>>>>>> It sounds like the GeoMesa/GeoTools usage might fall under this Q/A:
>>>>>>> http://www.apache.org/legal/resolved.html#optional.
>>>>>>>
>>>>>>> Thoughts?
>>>>>>>
>>>>>>> Jim
>>>>>>>
>>>>>>> On 9/13/2016 9:25 PM, Aaron D. Mihalik wrote:
>>>>>>>
>>>>>>>> Jim,
>>>>>>>>
>>>>>>>> We've been working off of these lists:
>>>>>>>>
>>>>>>>> http://www.apache.org/legal/resolved.html#category-a
>>>>>>>>
>>>>>>>> On Tue, Sep 13, 2016 at 6:07 PM Jim Hughes <jn...@ccri.com> wrote:
>>>>>>>>
>>>>>>>> Hi David,
>>>>>>>>> A number of the geo-dependencies are likely from the geo-indexing
>>>>>>>>>
>>>>>>>> (which
>>>>>>> uses GeoMesa (Apache 2.0) which uses GeoTools and JTS).
>>>>>>>>> Are there options to make the geoindexing a profile, provide the
>>>>>>>>>
>>>>>>>> source,
>>>>>>> and not provide artifacts for that code at Apache?
>>>>>>>>> Also, is there a list of approved licenses for Apache projects
>>>>>>>>> dependencies?
>>>>>>>>>
>>>>>>>>> Cheers,
>>>>>>>>>
>>>>>>>>> Jim
>>>>>>>>>
>>>>>>>>> On 09/13/2016 05:46 PM, David Lotts wrote:
>>>>>>>>>
>>>>>>>>>> This issue is a release blocker:
>>>>>>>>>> <https://issues.apache.org/jira/browse/RYA-179>
>>>>>>>>>>
>>>>>>>>>> RYA-179 <https://issues.apache.org/jira/browse/RYA-179> Review
>>>>>>>>>>
>>>>>>>>> License /
>>>>>>>> Copyright notices on Rya Artifacts
>>>>>>>>>> I was able to create a 3rd party dependency license report for
>>>>>>>>>>
>>>>>>>>> Rya
>>>>> from the license
>>>>>>>>>> maven plugin.
>>>>>>>>>> <http://www.mojohaus.org/license-maven-plugin/>
>>>>>>>>>>
>>>>>>>>>> Good: I can send the full list if you like.  Mostly ASL and
>>>>>>>>>>
>>>>>>>>> clearly
>>>>> permitted.
>>>>>>>>>> Okay: A number of CDDL and CPL licenses -- permitted if no source
>>>>>>>>>>
>>>>>>>>> code
>>>>>>> is
>>>>>>>
>>>>>>>> included.
>>>>>>>>>> Needs Improvement: The following are not clearly permitted
>>>>>>>>>>
>>>>>>>>> licenses:
>>>>>>          (cern.colt MIT license see
>>>>>>>>>> https://dst.lbl.gov/ACSSoftware/colt/license.html) colt
>>>>>>>>>>
>>>>>>>>> (colt:colt:1.2.0 -
>>>>>>>>>
>>>>>>>>>> no url defined)
>>>>>>>>>>              -- this is a mistake, should be  java.util.Arrays, not
>>>>>>>>>> cern.colt.Arrays  -- creating an issue to eliminate dependency.
>>>>>>>>>>          (GNU LESSER GENERAL PUBLIC LICENSE) JCalendar
>>>>>>>>>> (com.toedter:jcalendar:1.1.4 -
>>>>>>>>>>
>>>>>>>>> http://www.toedter.com/en/jcalendar/)
>>>>>>          (Lesser General Public License (LGPL)) JTS Topology Suite
>>>>>>>>>> (com.vividsolutions:jts:1.13 -
>>>>>>>>>> http://sourceforge.net/projects/jts-topo-suite)
>>>>>>>>>>          (Lesser General Public License (LGPL)) Image
>>>>>>>>>>
>>>>>>>>> I/O-Extensions
>>>>> -
>>>>>
>>>>>> GeoCore
>>>>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-geocore:1.1.13 - no url
>>>>>>>>>>
>>>>>>>>> defined)
>>>>>>>>          (Lesser General Public License (LGPL)) Image
>>>>>>>>> I/O-Extensions
>>>>> -
>>>>>
>>>>>> Custom
>>>>>>>>>> Streams (it.geosolutions.imageio-ext:imageio-ext-streams:1.1.13
>>>>>>>>>>
>>>>>>>>> -
>>>>> no
>>>>>
>>>>>> url
>>>>>>>> defined)
>>>>>>>>>>          (Lesser General Public License (LGPL)) Improved TIFF
>>>>>>>>>>
>>>>>>>>> Plugin
>>>>> (it.geosolutions.imageio-ext:imageio-ext-tiff:1.1.13 - no url
>>>>>>>>> defined)
>>>>>>>          (Lesser General Public License (LGPL)) Image
>>>>>>>>> I/O-Extensions
>>>>> -
>>>>>
>>>>>> utilities classes and methods
>>>>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-utilities:1.1.13 - no
>>>>>>>>>>
>>>>>>>>> url
>>>>> defined)
>>>>>>>>>>          (Unknown license) jai_codec (javax.media:jai_codec:1.1.3 -
>>>>>>>>>>
>>>>>>>>> no
>>>>>> url
>>>>>>>> defined)
>>>>>>>>>>          (Unknown license) jai_core (javax.media:jai_core:1.1.3 -
>>>>>>>>>>
>>>>>>>>> no
>>>>> url
>>>>>>> defined)
>>>>>>>>>>          (Unknown license) jai_imageio
>>>>>>>>>>
>>>>>>>>> (javax.media:jai_imageio:1.1 -
>>>>> no
>>>>>>> url
>>>>>>>
>>>>>>>> defined)
>>>>>>>>>>          (Unknown license) jgridshift (jgridshift:jgridshift:1.0 -
>>>>>>>>>>
>>>>>>>>> no
>>>>> url
>>>>>>> defined)
>>>>>>>>>>          (GNU Lesser General Public License) Remote Tea Runtime
>>>>>>>>>> (org.acplt:oncrpc:1.0.7 - http://remotetea.sourceforge.net/)
>>>>>>>>>>          (Unknown license) Antlr 3.4 Runtime
>>>>>>>>>>
>>>>>>>>> (org.antlr:antlr-runtime:3.4 -
>>>>>>>> http://www.antlr.org)
>>>>>>>>>>          (Unknown license) Jettison (org.codehaus.jettison:
>>>>>>>>>>
>>>>>>>>> jettison:1.1
>>>>>>> - no
>>>>>>>
>>>>>>>> url defined)
>>>>>>>>>>          (Lesser General Public License (LGPL)) API interfaces
>>>>>>>>>> (org.geotools:gt-api:14.3 - no url defined)
>>>>>>>>>>          (Lesser General Public License (LGPL)) Grid Coverage
>>>>>>>>>>
>>>>>>>>> module
>>>>> (org.geotools:gt-coverage:14.3 - no url defined)
>>>>>>>>>>          (Lesser General Public License (LGPL)) OGC CQL to Filter
>>>>>>>>>>
>>>>>>>>> parser
>>>>>>> (org.geotools:gt-cql:14.1 - no url defined)
>>>>>>>>>>          (Lesser General Public License (LGPL)) DataStore Support
>>>>>>>>>> (org.geotools:gt-data:14.1 - no url defined)
>>>>>>>>>>          (Lesser General Public License (LGPL)) Feature Based
>>>>>>>>>>
>>>>>>>>> Graphs
>>>>> and
>>>>>>> Networks (org.geotools:gt-graph:14.3 - no url defined)
>>>>>>>>>>          (Lesser General Public License (LGPL)) Vector grids
>>>>>>>>>> (org.geotools:gt-grid:14.1 - no url defined)
>>>>>>>>>>          (Lesser General Public License (LGPL)) Main module
>>>>>>>>>> (org.geotools:gt-main:14.1 - no url defined)
>>>>>>>>>>          (Lesser General Public License (LGPL)) Metadata
>>>>>>>>>> (org.geotools:gt-metadata:14.1 - no url defined)
>>>>>>>>>>          (Lesser General Public License (LGPL)) (OGC copyright)
>>>>>>>>>>
>>>>>>>>> Open
>>>>> GIS
>>>>>>> Interfaces (org.geotools:gt-opengis:14.1 - no url defined)
>>>>>>>>>>          (Lesser General Public License (LGPL)) Process
>>>>>>>>>> (org.geotools:gt-process:14.1 - no url defined)
>>>>>>>>>>          (Lesser General Public License (LGPL)) Process Feature
>>>>>>>>>> (org.geotools:gt-process-feature:14.1 - no url defined)
>>>>>>>>>>          (Lesser General Public License (LGPL)) Referencing
>>>>>>>>>>
>>>>>>>>> services
>>>>> (org.geotools:gt-referencing:14.3 - no url defined)
>>>>>>>>>>          (Lesser General Public License (LGPL)) Render
>>>>>>>>>> (org.geotools:gt-render:14.1 - no url defined)
>>>>>>>>>>          (Lesser General Public License (LGPL)) Shapefile module
>>>>>>>>>> (org.geotools:gt-shapefile:14.1 - no url defined)
>>>>>>>>>>          (Lesser General Public License (LGPL)) Feature
>>>>>>>>>>
>>>>>>>>> transforming
>>>>> feature
>>>>>>>> source wrapper (org.geotools:gt-transform:14.1 - no url defined)
>>>>>>>>>>          (Lesser General Public License (LGPL)) XML Parsing
>>>>>>>>>> (org.geotools.xsd:gt-xsd-core:14.3 - no url defined)
>>>>>>>>>>          (Lesser General Public License (LGPL)) GML2 XML Support
>>>>>>>>>> (org.geotools.xsd:gt-xsd-gml2:14.3 - no url defined)
>>>>>>>>>>          (Lesser General Public License (LGPL)) GML3 XML Support
>>>>>>>>>> (org.geotools.xsd:gt-xsd-gml3:14.3 - no url defined)
>>>>>>>>>>
>>>>>>>>>> david.
>>>>>>>>>>
>>>>>>>>>>

Re: RYA-179 Review License / Copyright notices on Rya Artifacts

Posted by David Lotts <dl...@gmail.com>.

Jim, thanks for the clarity!  So that is settled, we can't just wait for
the wind to shift directions. :-)

BTW, I see how several of the catagory-X dependencies (of dependancies)*
are removed -- thanks to
https://github.com/locationtech/geomesa/blob/master/pom.xml :
<exclusion>
<!-- excluded due to license issues -->
<groupId>javax.media</groupId>
<artifactId>jai_codec</artifactId>
</exclusion>
There are a bunch of examples of this in the geomesa pom.

david.

On Wed, Sep 14, 2016 at 3:12 PM, Jim Hughes <jn...@ccri.com> wrote:

> Hi Dave,
>
> Good question.  Currently, there are no plans for GeoMesa to be free of
> GeoTools.  At the minute, GeoTools and GeoServer are two of the best
> projects for handling geospatial processing and serving up the results via
> OGC access patterns.  It is inconvenient that their licenses aren't more
> business friendly.  I'd point out that several of these projects were in
> existence before ASF license version 1.1.;)
>
> In terms of integrations of GeoMesa and Apache projects, in many cases
> (such as Storm or Kafka), I think it might make more sense for GeoMesa to
> depend on the Apache project or for there to be a third-party project which
> depends on both (for example with NiFi). Overall, I'd love to see better
> licensing so that dependencies can go either direction.  I spend more time
> than I care to dealing with legal details like this...
>
> For other LocationTech projects, I'd point out that only a few use
> GeoTools.  For instance, Spatial4J is used by Apache Lucene. Overall, the
> Eclipse Foundation (and LocationTech by extension) hosts projects which
> have business-friendly licenses.
>
> Anyhow, I hope that helps clarify things a bit.
>
> Cheers,
>
> Jim
>
>
> On 09/14/2016 02:29 PM, David Lotts wrote:
>
>> Oops, this thread was supposed to be subject RYA-177
>> RYA-179 is corrections to Rya source file license headers.
>>
>> Jim, do you know when GeoMesa plans to be completely free of GeoTools ?
>> Clearly Geotools is an obstacle for Apache projects to use LocationTech
>> projects, or at least GeoMesa.
>> Or is there another path forward for GeoMesa?
>>
>> On Wed, Sep 14, 2016 at 1:48 PM, Aaron D. Mihalik <
>> aaron.mihalik@gmail.com>
>> wrote:
>>
>> Could we revive the indexer profile again?
>>>>
>>> (tl;dr: Yes.  Mentors: Please correct us if we're wrong)
>>>
>>> This might be a solution.  I found a couple similar cases with Apache
>>> projects and discussions related to those cases.
>>>
>>> Apache Flink integrated with Amazon Kinesis [1] and [2].  Note that
>>> Kinesis
>>> is an optional profile, and it's well documented in the POM why it's
>>> optional.
>>>
>>> (Note that NiFi got around this by using Amazon's SDK for Java [3], which
>>> is purely Apache 2.0)
>>>
>>> Spark uses optional profiles to build artifacts based on LGPL
>>> dependencies.  Spark has to built by the user to use netlib [4][5],
>>> Ganglia
>>> [6], or Kinesis [6].
>>>
>>> I think a profile will work, but I'd like to see it well documented (both
>>> in the POM and manual) so that we never accidentally create a release
>>> with
>>> these artifacts.
>>>
>>> I was going to open a separate ticket to implement this, but I think it's
>>> good to track all of this effort under RYA-177.
>>>
>>> --Aaron
>>>
>>> [1]
>>> https://github.com/apache/flink/blob/release-1.1.2/
>>> flink-streaming-connectors/pom.xml#L69
>>> [2]
>>> https://github.com/apache/flink/blob/release-1.1.2/
>>> flink-streaming-connectors/flink-connector-kinesis/pom.xml#L73
>>>
>>> [3] https://github.com/apache/nifi/blob/master/pom.xml#L1316
>>>
>>> [4] https://github.com/apache/spark/blob/v2.0.0/mllib/pom.xml#L120
>>> [5]
>>> https://github.com/apache/spark/blob/v2.0.0/docs/ml-guide.
>>> md#dependencies
>>>
>>> [6] https://github.com/apache/spark/blob/v2.0.0/pom.xml#L2414
>>>
>>> [7] https://issues.apache.org/jira/browse/LEGAL-198
>>> [8] https://www.gnu.org/licenses/lgpl-java.html
>>>
>>>
>>>
>>> On Wed, Sep 14, 2016 at 12:09 PM David Lotts <dl...@gmail.com> wrote:
>>>
>>> Great find Aaron!
>>>> The ESRI library is quite comparable!
>>>>
>>>> Rya via Geomesa are using *JTS Topology Suite (*JTS): (the javadocs at
>>>> vividsolutions seems to be 404 )
>>>>
>>>>
>>>> http://tsusiatsoftware.net/jts/javadoc/com/vividsolutions/jts/geom/
>>>>
>>> Geometry.html
>>>
>>>> Far from a drop-in replacement, but a path forward:
>>>>      http://esri.github.io/geometry-api-java/javadoc/
>>>>
>>>> Interesting, ESRI has Shape file support, but no GML, the opposite of
>>>>
>>> JTS!
>>>
>>>> david.
>>>>
>>>>
>>>> On Wed, Sep 14, 2016 at 10:29 AM, Aaron D. Mihalik <
>>>> aaron.mihalik@gmail.com>
>>>> wrote:
>>>>
>>>> Yeah, that sounds possible. I don't like the idea of having to maintain
>>>>> another build/ci/release process, though.
>>>>>
>>>>> More importantly, we'd also have to modify our GeoIndexer interface [1]
>>>>>
>>>> to
>>>>
>>>>> something Apache Friendly.  It looks like Ersi puts out an Apache 2.0
>>>>> library [2].
>>>>>
>>>>> [1]
>>>>> https://github.com/apache/incubator-rya/blob/master/
>>>>> extras/indexing/src/main/java/mvm/rya/indexing/GeoIndexer.java
>>>>> [2] https://github.com/Esri/geometry-api-java
>>>>>
>>>>> On Tue, Sep 13, 2016 at 10:36 PM Jim Hughes <jn...@ccri.com> wrote:
>>>>>
>>>>> Hi Aaron,
>>>>>>
>>>>>> Thanks, wasn't finding that list quickly...
>>>>>>
>>>>>> It sounds like the GeoMesa/GeoTools usage might fall under this Q/A:
>>>>>> http://www.apache.org/legal/resolved.html#optional.
>>>>>>
>>>>>> Thoughts?
>>>>>>
>>>>>> Jim
>>>>>>
>>>>>> On 9/13/2016 9:25 PM, Aaron D. Mihalik wrote:
>>>>>>
>>>>>>> Jim,
>>>>>>>
>>>>>>> We've been working off of these lists:
>>>>>>>
>>>>>>> http://www.apache.org/legal/resolved.html#category-a
>>>>>>>
>>>>>>> On Tue, Sep 13, 2016 at 6:07 PM Jim Hughes <jn...@ccri.com> wrote:
>>>>>>>
>>>>>>> Hi David,
>>>>>>>>
>>>>>>>> A number of the geo-dependencies are likely from the geo-indexing
>>>>>>>>
>>>>>>> (which
>>>>>
>>>>>> uses GeoMesa (Apache 2.0) which uses GeoTools and JTS).
>>>>>>>>
>>>>>>>> Are there options to make the geoindexing a profile, provide the
>>>>>>>>
>>>>>>> source,
>>>>>
>>>>>> and not provide artifacts for that code at Apache?
>>>>>>>>
>>>>>>>> Also, is there a list of approved licenses for Apache projects
>>>>>>>> dependencies?
>>>>>>>>
>>>>>>>> Cheers,
>>>>>>>>
>>>>>>>> Jim
>>>>>>>>
>>>>>>>> On 09/13/2016 05:46 PM, David Lotts wrote:
>>>>>>>>
>>>>>>>>> This issue is a release blocker:
>>>>>>>>> <https://issues.apache.org/jira/browse/RYA-179>
>>>>>>>>>
>>>>>>>>> RYA-179 <https://issues.apache.org/jira/browse/RYA-179> Review
>>>>>>>>>
>>>>>>>> License /
>>>>>>
>>>>>>> Copyright notices on Rya Artifacts
>>>>>>>>>
>>>>>>>>> I was able to create a 3rd party dependency license report for
>>>>>>>>>
>>>>>>>> Rya
>>>
>>>> from the license
>>>>>>>>> maven plugin.
>>>>>>>>> <http://www.mojohaus.org/license-maven-plugin/>
>>>>>>>>>
>>>>>>>>> Good: I can send the full list if you like.  Mostly ASL and
>>>>>>>>>
>>>>>>>> clearly
>>>
>>>> permitted.
>>>>>>>>>
>>>>>>>>> Okay: A number of CDDL and CPL licenses -- permitted if no source
>>>>>>>>>
>>>>>>>> code
>>>>>
>>>>>> is
>>>>>>
>>>>>>> included.
>>>>>>>>>
>>>>>>>>> Needs Improvement: The following are not clearly permitted
>>>>>>>>>
>>>>>>>> licenses:
>>>>
>>>>>         (cern.colt MIT license see
>>>>>>>>> https://dst.lbl.gov/ACSSoftware/colt/license.html) colt
>>>>>>>>>
>>>>>>>> (colt:colt:1.2.0 -
>>>>>>>>
>>>>>>>>> no url defined)
>>>>>>>>>             -- this is a mistake, should be  java.util.Arrays, not
>>>>>>>>> cern.colt.Arrays  -- creating an issue to eliminate dependency.
>>>>>>>>>         (GNU LESSER GENERAL PUBLIC LICENSE) JCalendar
>>>>>>>>> (com.toedter:jcalendar:1.1.4 -
>>>>>>>>>
>>>>>>>> http://www.toedter.com/en/jcalendar/)
>>>>
>>>>>         (Lesser General Public License (LGPL)) JTS Topology Suite
>>>>>>>>> (com.vividsolutions:jts:1.13 -
>>>>>>>>> http://sourceforge.net/projects/jts-topo-suite)
>>>>>>>>>         (Lesser General Public License (LGPL)) Image
>>>>>>>>>
>>>>>>>> I/O-Extensions
>>>
>>>> -
>>>>
>>>>> GeoCore
>>>>>>>>
>>>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-geocore:1.1.13 - no url
>>>>>>>>>
>>>>>>>> defined)
>>>>>>
>>>>>>>         (Lesser General Public License (LGPL)) Image
>>>>>>>>>
>>>>>>>> I/O-Extensions
>>>
>>>> -
>>>>
>>>>> Custom
>>>>>>>>
>>>>>>>>> Streams (it.geosolutions.imageio-ext:imageio-ext-streams:1.1.13
>>>>>>>>>
>>>>>>>> -
>>>
>>>> no
>>>>
>>>>> url
>>>>>>
>>>>>>> defined)
>>>>>>>>>         (Lesser General Public License (LGPL)) Improved TIFF
>>>>>>>>>
>>>>>>>> Plugin
>>>
>>>> (it.geosolutions.imageio-ext:imageio-ext-tiff:1.1.13 - no url
>>>>>>>>>
>>>>>>>> defined)
>>>>>
>>>>>>         (Lesser General Public License (LGPL)) Image
>>>>>>>>>
>>>>>>>> I/O-Extensions
>>>
>>>> -
>>>>
>>>>> utilities classes and methods
>>>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-utilities:1.1.13 - no
>>>>>>>>>
>>>>>>>> url
>>>
>>>> defined)
>>>>>>>>
>>>>>>>>>         (Unknown license) jai_codec (javax.media:jai_codec:1.1.3 -
>>>>>>>>>
>>>>>>>> no
>>>>
>>>>> url
>>>>>>
>>>>>>> defined)
>>>>>>>>>         (Unknown license) jai_core (javax.media:jai_core:1.1.3 -
>>>>>>>>>
>>>>>>>> no
>>>
>>>> url
>>>>>
>>>>>> defined)
>>>>>>>>>         (Unknown license) jai_imageio
>>>>>>>>>
>>>>>>>> (javax.media:jai_imageio:1.1 -
>>>
>>>> no
>>>>>
>>>>>> url
>>>>>>
>>>>>>> defined)
>>>>>>>>>         (Unknown license) jgridshift (jgridshift:jgridshift:1.0 -
>>>>>>>>>
>>>>>>>> no
>>>
>>>> url
>>>>>
>>>>>> defined)
>>>>>>>>>         (GNU Lesser General Public License) Remote Tea Runtime
>>>>>>>>> (org.acplt:oncrpc:1.0.7 - http://remotetea.sourceforge.net/)
>>>>>>>>>         (Unknown license) Antlr 3.4 Runtime
>>>>>>>>>
>>>>>>>> (org.antlr:antlr-runtime:3.4 -
>>>>>>
>>>>>>> http://www.antlr.org)
>>>>>>>>>         (Unknown license) Jettison (org.codehaus.jettison:
>>>>>>>>>
>>>>>>>> jettison:1.1
>>>>>
>>>>>> - no
>>>>>>
>>>>>>> url defined)
>>>>>>>>>         (Lesser General Public License (LGPL)) API interfaces
>>>>>>>>> (org.geotools:gt-api:14.3 - no url defined)
>>>>>>>>>         (Lesser General Public License (LGPL)) Grid Coverage
>>>>>>>>>
>>>>>>>> module
>>>
>>>> (org.geotools:gt-coverage:14.3 - no url defined)
>>>>>>>>>         (Lesser General Public License (LGPL)) OGC CQL to Filter
>>>>>>>>>
>>>>>>>> parser
>>>>>
>>>>>> (org.geotools:gt-cql:14.1 - no url defined)
>>>>>>>>>         (Lesser General Public License (LGPL)) DataStore Support
>>>>>>>>> (org.geotools:gt-data:14.1 - no url defined)
>>>>>>>>>         (Lesser General Public License (LGPL)) Feature Based
>>>>>>>>>
>>>>>>>> Graphs
>>>
>>>> and
>>>>>
>>>>>> Networks (org.geotools:gt-graph:14.3 - no url defined)
>>>>>>>>>         (Lesser General Public License (LGPL)) Vector grids
>>>>>>>>> (org.geotools:gt-grid:14.1 - no url defined)
>>>>>>>>>         (Lesser General Public License (LGPL)) Main module
>>>>>>>>> (org.geotools:gt-main:14.1 - no url defined)
>>>>>>>>>         (Lesser General Public License (LGPL)) Metadata
>>>>>>>>> (org.geotools:gt-metadata:14.1 - no url defined)
>>>>>>>>>         (Lesser General Public License (LGPL)) (OGC copyright)
>>>>>>>>>
>>>>>>>> Open
>>>
>>>> GIS
>>>>>
>>>>>> Interfaces (org.geotools:gt-opengis:14.1 - no url defined)
>>>>>>>>>         (Lesser General Public License (LGPL)) Process
>>>>>>>>> (org.geotools:gt-process:14.1 - no url defined)
>>>>>>>>>         (Lesser General Public License (LGPL)) Process Feature
>>>>>>>>> (org.geotools:gt-process-feature:14.1 - no url defined)
>>>>>>>>>         (Lesser General Public License (LGPL)) Referencing
>>>>>>>>>
>>>>>>>> services
>>>
>>>> (org.geotools:gt-referencing:14.3 - no url defined)
>>>>>>>>>         (Lesser General Public License (LGPL)) Render
>>>>>>>>> (org.geotools:gt-render:14.1 - no url defined)
>>>>>>>>>         (Lesser General Public License (LGPL)) Shapefile module
>>>>>>>>> (org.geotools:gt-shapefile:14.1 - no url defined)
>>>>>>>>>         (Lesser General Public License (LGPL)) Feature
>>>>>>>>>
>>>>>>>> transforming
>>>
>>>> feature
>>>>>>
>>>>>>> source wrapper (org.geotools:gt-transform:14.1 - no url defined)
>>>>>>>>>         (Lesser General Public License (LGPL)) XML Parsing
>>>>>>>>> (org.geotools.xsd:gt-xsd-core:14.3 - no url defined)
>>>>>>>>>         (Lesser General Public License (LGPL)) GML2 XML Support
>>>>>>>>> (org.geotools.xsd:gt-xsd-gml2:14.3 - no url defined)
>>>>>>>>>         (Lesser General Public License (LGPL)) GML3 XML Support
>>>>>>>>> (org.geotools.xsd:gt-xsd-gml3:14.3 - no url defined)
>>>>>>>>>
>>>>>>>>> david.
>>>>>>>>>
>>>>>>>>>
>>>>>>
>

Re: RYA-179 Review License / Copyright notices on Rya Artifacts

Posted by Jim Hughes <jn...@ccri.com>.

Hi Dave,

Good question.  Currently, there are no plans for GeoMesa to be free of 
GeoTools.  At the minute, GeoTools and GeoServer are two of the best 
projects for handling geospatial processing and serving up the results 
via OGC access patterns.  It is inconvenient that their licenses aren't 
more business friendly.  I'd point out that several of these projects 
were in existence before ASF license version 1.1.;)

In terms of integrations of GeoMesa and Apache projects, in many cases 
(such as Storm or Kafka), I think it might make more sense for GeoMesa 
to depend on the Apache project or for there to be a third-party project 
which depends on both (for example with NiFi). Overall, I'd love to see 
better licensing so that dependencies can go either direction.  I spend 
more time than I care to dealing with legal details like this...

For other LocationTech projects, I'd point out that only a few use 
GeoTools.  For instance, Spatial4J is used by Apache Lucene. Overall, 
the Eclipse Foundation (and LocationTech by extension) hosts projects 
which have business-friendly licenses.

Anyhow, I hope that helps clarify things a bit.

Cheers,

Jim

On 09/14/2016 02:29 PM, David Lotts wrote:
> Oops, this thread was supposed to be subject RYA-177
> RYA-179 is corrections to Rya source file license headers.
>
> Jim, do you know when GeoMesa plans to be completely free of GeoTools ?
> Clearly Geotools is an obstacle for Apache projects to use LocationTech
> projects, or at least GeoMesa.
> Or is there another path forward for GeoMesa?
>
> On Wed, Sep 14, 2016 at 1:48 PM, Aaron D. Mihalik <aa...@gmail.com>
> wrote:
>
>>> Could we revive the indexer profile again?
>> (tl;dr: Yes.  Mentors: Please correct us if we're wrong)
>>
>> This might be a solution.  I found a couple similar cases with Apache
>> projects and discussions related to those cases.
>>
>> Apache Flink integrated with Amazon Kinesis [1] and [2].  Note that Kinesis
>> is an optional profile, and it's well documented in the POM why it's
>> optional.
>>
>> (Note that NiFi got around this by using Amazon's SDK for Java [3], which
>> is purely Apache 2.0)
>>
>> Spark uses optional profiles to build artifacts based on LGPL
>> dependencies.  Spark has to built by the user to use netlib [4][5], Ganglia
>> [6], or Kinesis [6].
>>
>> I think a profile will work, but I'd like to see it well documented (both
>> in the POM and manual) so that we never accidentally create a release with
>> these artifacts.
>>
>> I was going to open a separate ticket to implement this, but I think it's
>> good to track all of this effort under RYA-177.
>>
>> --Aaron
>>
>> [1]
>> https://github.com/apache/flink/blob/release-1.1.2/
>> flink-streaming-connectors/pom.xml#L69
>> [2]
>> https://github.com/apache/flink/blob/release-1.1.2/
>> flink-streaming-connectors/flink-connector-kinesis/pom.xml#L73
>>
>> [3] https://github.com/apache/nifi/blob/master/pom.xml#L1316
>>
>> [4] https://github.com/apache/spark/blob/v2.0.0/mllib/pom.xml#L120
>> [5]
>> https://github.com/apache/spark/blob/v2.0.0/docs/ml-guide.md#dependencies
>>
>> [6] https://github.com/apache/spark/blob/v2.0.0/pom.xml#L2414
>>
>> [7] https://issues.apache.org/jira/browse/LEGAL-198
>> [8] https://www.gnu.org/licenses/lgpl-java.html
>>
>>
>>
>> On Wed, Sep 14, 2016 at 12:09 PM David Lotts <dl...@gmail.com> wrote:
>>
>>> Great find Aaron!
>>> The ESRI library is quite comparable!
>>>
>>> Rya via Geomesa are using *JTS Topology Suite (*JTS): (the javadocs at
>>> vividsolutions seems to be 404 )
>>>
>>>
>>> http://tsusiatsoftware.net/jts/javadoc/com/vividsolutions/jts/geom/
>> Geometry.html
>>> Far from a drop-in replacement, but a path forward:
>>>      http://esri.github.io/geometry-api-java/javadoc/
>>>
>>> Interesting, ESRI has Shape file support, but no GML, the opposite of
>> JTS!
>>> david.
>>>
>>>
>>> On Wed, Sep 14, 2016 at 10:29 AM, Aaron D. Mihalik <
>>> aaron.mihalik@gmail.com>
>>> wrote:
>>>
>>>> Yeah, that sounds possible. I don't like the idea of having to maintain
>>>> another build/ci/release process, though.
>>>>
>>>> More importantly, we'd also have to modify our GeoIndexer interface [1]
>>> to
>>>> something Apache Friendly.  It looks like Ersi puts out an Apache 2.0
>>>> library [2].
>>>>
>>>> [1]
>>>> https://github.com/apache/incubator-rya/blob/master/
>>>> extras/indexing/src/main/java/mvm/rya/indexing/GeoIndexer.java
>>>> [2] https://github.com/Esri/geometry-api-java
>>>>
>>>> On Tue, Sep 13, 2016 at 10:36 PM Jim Hughes <jn...@ccri.com> wrote:
>>>>
>>>>> Hi Aaron,
>>>>>
>>>>> Thanks, wasn't finding that list quickly...
>>>>>
>>>>> It sounds like the GeoMesa/GeoTools usage might fall under this Q/A:
>>>>> http://www.apache.org/legal/resolved.html#optional.
>>>>>
>>>>> Thoughts?
>>>>>
>>>>> Jim
>>>>>
>>>>> On 9/13/2016 9:25 PM, Aaron D. Mihalik wrote:
>>>>>> Jim,
>>>>>>
>>>>>> We've been working off of these lists:
>>>>>>
>>>>>> http://www.apache.org/legal/resolved.html#category-a
>>>>>>
>>>>>> On Tue, Sep 13, 2016 at 6:07 PM Jim Hughes <jn...@ccri.com> wrote:
>>>>>>
>>>>>>> Hi David,
>>>>>>>
>>>>>>> A number of the geo-dependencies are likely from the geo-indexing
>>>> (which
>>>>>>> uses GeoMesa (Apache 2.0) which uses GeoTools and JTS).
>>>>>>>
>>>>>>> Are there options to make the geoindexing a profile, provide the
>>>> source,
>>>>>>> and not provide artifacts for that code at Apache?
>>>>>>>
>>>>>>> Also, is there a list of approved licenses for Apache projects
>>>>>>> dependencies?
>>>>>>>
>>>>>>> Cheers,
>>>>>>>
>>>>>>> Jim
>>>>>>>
>>>>>>> On 09/13/2016 05:46 PM, David Lotts wrote:
>>>>>>>> This issue is a release blocker:
>>>>>>>> <https://issues.apache.org/jira/browse/RYA-179>
>>>>>>>>
>>>>>>>> RYA-179 <https://issues.apache.org/jira/browse/RYA-179> Review
>>>>> License /
>>>>>>>> Copyright notices on Rya Artifacts
>>>>>>>>
>>>>>>>> I was able to create a 3rd party dependency license report for
>> Rya
>>>>>>>> from the license
>>>>>>>> maven plugin.
>>>>>>>> <http://www.mojohaus.org/license-maven-plugin/>
>>>>>>>>
>>>>>>>> Good: I can send the full list if you like.  Mostly ASL and
>> clearly
>>>>>>>> permitted.
>>>>>>>>
>>>>>>>> Okay: A number of CDDL and CPL licenses -- permitted if no source
>>>> code
>>>>> is
>>>>>>>> included.
>>>>>>>>
>>>>>>>> Needs Improvement: The following are not clearly permitted
>>> licenses:
>>>>>>>>         (cern.colt MIT license see
>>>>>>>> https://dst.lbl.gov/ACSSoftware/colt/license.html) colt
>>>>>>> (colt:colt:1.2.0 -
>>>>>>>> no url defined)
>>>>>>>>             -- this is a mistake, should be  java.util.Arrays, not
>>>>>>>> cern.colt.Arrays  -- creating an issue to eliminate dependency.
>>>>>>>>         (GNU LESSER GENERAL PUBLIC LICENSE) JCalendar
>>>>>>>> (com.toedter:jcalendar:1.1.4 -
>>> http://www.toedter.com/en/jcalendar/)
>>>>>>>>         (Lesser General Public License (LGPL)) JTS Topology Suite
>>>>>>>> (com.vividsolutions:jts:1.13 -
>>>>>>>> http://sourceforge.net/projects/jts-topo-suite)
>>>>>>>>         (Lesser General Public License (LGPL)) Image
>> I/O-Extensions
>>> -
>>>>>>> GeoCore
>>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-geocore:1.1.13 - no url
>>>>> defined)
>>>>>>>>         (Lesser General Public License (LGPL)) Image
>> I/O-Extensions
>>> -
>>>>>>> Custom
>>>>>>>> Streams (it.geosolutions.imageio-ext:imageio-ext-streams:1.1.13
>> -
>>> no
>>>>> url
>>>>>>>> defined)
>>>>>>>>         (Lesser General Public License (LGPL)) Improved TIFF
>> Plugin
>>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-tiff:1.1.13 - no url
>>>> defined)
>>>>>>>>         (Lesser General Public License (LGPL)) Image
>> I/O-Extensions
>>> -
>>>>>>>> utilities classes and methods
>>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-utilities:1.1.13 - no
>> url
>>>>>>> defined)
>>>>>>>>         (Unknown license) jai_codec (javax.media:jai_codec:1.1.3 -
>>> no
>>>>> url
>>>>>>>> defined)
>>>>>>>>         (Unknown license) jai_core (javax.media:jai_core:1.1.3 -
>> no
>>>> url
>>>>>>>> defined)
>>>>>>>>         (Unknown license) jai_imageio
>> (javax.media:jai_imageio:1.1 -
>>>> no
>>>>> url
>>>>>>>> defined)
>>>>>>>>         (Unknown license) jgridshift (jgridshift:jgridshift:1.0 -
>> no
>>>> url
>>>>>>>> defined)
>>>>>>>>         (GNU Lesser General Public License) Remote Tea Runtime
>>>>>>>> (org.acplt:oncrpc:1.0.7 - http://remotetea.sourceforge.net/)
>>>>>>>>         (Unknown license) Antlr 3.4 Runtime
>>>>> (org.antlr:antlr-runtime:3.4 -
>>>>>>>> http://www.antlr.org)
>>>>>>>>         (Unknown license) Jettison (org.codehaus.jettison:
>>>> jettison:1.1
>>>>> - no
>>>>>>>> url defined)
>>>>>>>>         (Lesser General Public License (LGPL)) API interfaces
>>>>>>>> (org.geotools:gt-api:14.3 - no url defined)
>>>>>>>>         (Lesser General Public License (LGPL)) Grid Coverage
>> module
>>>>>>>> (org.geotools:gt-coverage:14.3 - no url defined)
>>>>>>>>         (Lesser General Public License (LGPL)) OGC CQL to Filter
>>>> parser
>>>>>>>> (org.geotools:gt-cql:14.1 - no url defined)
>>>>>>>>         (Lesser General Public License (LGPL)) DataStore Support
>>>>>>>> (org.geotools:gt-data:14.1 - no url defined)
>>>>>>>>         (Lesser General Public License (LGPL)) Feature Based
>> Graphs
>>>> and
>>>>>>>> Networks (org.geotools:gt-graph:14.3 - no url defined)
>>>>>>>>         (Lesser General Public License (LGPL)) Vector grids
>>>>>>>> (org.geotools:gt-grid:14.1 - no url defined)
>>>>>>>>         (Lesser General Public License (LGPL)) Main module
>>>>>>>> (org.geotools:gt-main:14.1 - no url defined)
>>>>>>>>         (Lesser General Public License (LGPL)) Metadata
>>>>>>>> (org.geotools:gt-metadata:14.1 - no url defined)
>>>>>>>>         (Lesser General Public License (LGPL)) (OGC copyright)
>> Open
>>>> GIS
>>>>>>>> Interfaces (org.geotools:gt-opengis:14.1 - no url defined)
>>>>>>>>         (Lesser General Public License (LGPL)) Process
>>>>>>>> (org.geotools:gt-process:14.1 - no url defined)
>>>>>>>>         (Lesser General Public License (LGPL)) Process Feature
>>>>>>>> (org.geotools:gt-process-feature:14.1 - no url defined)
>>>>>>>>         (Lesser General Public License (LGPL)) Referencing
>> services
>>>>>>>> (org.geotools:gt-referencing:14.3 - no url defined)
>>>>>>>>         (Lesser General Public License (LGPL)) Render
>>>>>>>> (org.geotools:gt-render:14.1 - no url defined)
>>>>>>>>         (Lesser General Public License (LGPL)) Shapefile module
>>>>>>>> (org.geotools:gt-shapefile:14.1 - no url defined)
>>>>>>>>         (Lesser General Public License (LGPL)) Feature
>> transforming
>>>>> feature
>>>>>>>> source wrapper (org.geotools:gt-transform:14.1 - no url defined)
>>>>>>>>         (Lesser General Public License (LGPL)) XML Parsing
>>>>>>>> (org.geotools.xsd:gt-xsd-core:14.3 - no url defined)
>>>>>>>>         (Lesser General Public License (LGPL)) GML2 XML Support
>>>>>>>> (org.geotools.xsd:gt-xsd-gml2:14.3 - no url defined)
>>>>>>>>         (Lesser General Public License (LGPL)) GML3 XML Support
>>>>>>>> (org.geotools.xsd:gt-xsd-gml3:14.3 - no url defined)
>>>>>>>>
>>>>>>>> david.
>>>>>>>>
>>>>>

Re: RYA-179 Review License / Copyright notices on Rya Artifacts

Posted by David Lotts <dl...@gmail.com>.

Oops, this thread was supposed to be subject RYA-177
RYA-179 is corrections to Rya source file license headers.

Jim, do you know when GeoMesa plans to be completely free of GeoTools ?
Clearly Geotools is an obstacle for Apache projects to use LocationTech
projects, or at least GeoMesa.
Or is there another path forward for GeoMesa?

On Wed, Sep 14, 2016 at 1:48 PM, Aaron D. Mihalik <aa...@gmail.com>
wrote:

> > Could we revive the indexer profile again?
>
> (tl;dr: Yes.  Mentors: Please correct us if we're wrong)
>
> This might be a solution.  I found a couple similar cases with Apache
> projects and discussions related to those cases.
>
> Apache Flink integrated with Amazon Kinesis [1] and [2].  Note that Kinesis
> is an optional profile, and it's well documented in the POM why it's
> optional.
>
> (Note that NiFi got around this by using Amazon's SDK for Java [3], which
> is purely Apache 2.0)
>
> Spark uses optional profiles to build artifacts based on LGPL
> dependencies.  Spark has to built by the user to use netlib [4][5], Ganglia
> [6], or Kinesis [6].
>
> I think a profile will work, but I'd like to see it well documented (both
> in the POM and manual) so that we never accidentally create a release with
> these artifacts.
>
> I was going to open a separate ticket to implement this, but I think it's
> good to track all of this effort under RYA-177.
>
> --Aaron
>
> [1]
> https://github.com/apache/flink/blob/release-1.1.2/
> flink-streaming-connectors/pom.xml#L69
> [2]
> https://github.com/apache/flink/blob/release-1.1.2/
> flink-streaming-connectors/flink-connector-kinesis/pom.xml#L73
>
> [3] https://github.com/apache/nifi/blob/master/pom.xml#L1316
>
> [4] https://github.com/apache/spark/blob/v2.0.0/mllib/pom.xml#L120
> [5]
> https://github.com/apache/spark/blob/v2.0.0/docs/ml-guide.md#dependencies
>
> [6] https://github.com/apache/spark/blob/v2.0.0/pom.xml#L2414
>
> [7] https://issues.apache.org/jira/browse/LEGAL-198
> [8] https://www.gnu.org/licenses/lgpl-java.html
>
>
>
> On Wed, Sep 14, 2016 at 12:09 PM David Lotts <dl...@gmail.com> wrote:
>
> > Great find Aaron!
> > The ESRI library is quite comparable!
> >
> > Rya via Geomesa are using *JTS Topology Suite (*JTS): (the javadocs at
> > vividsolutions seems to be 404 )
> >
> >
> > http://tsusiatsoftware.net/jts/javadoc/com/vividsolutions/jts/geom/
> Geometry.html
> >
> > Far from a drop-in replacement, but a path forward:
> >     http://esri.github.io/geometry-api-java/javadoc/
> >
> > Interesting, ESRI has Shape file support, but no GML, the opposite of
> JTS!
> > david.
> >
> >
> > On Wed, Sep 14, 2016 at 10:29 AM, Aaron D. Mihalik <
> > aaron.mihalik@gmail.com>
> > wrote:
> >
> > > Yeah, that sounds possible. I don't like the idea of having to maintain
> > > another build/ci/release process, though.
> > >
> > > More importantly, we'd also have to modify our GeoIndexer interface [1]
> > to
> > > something Apache Friendly.  It looks like Ersi puts out an Apache 2.0
> > > library [2].
> > >
> > > [1]
> > > https://github.com/apache/incubator-rya/blob/master/
> > > extras/indexing/src/main/java/mvm/rya/indexing/GeoIndexer.java
> > > [2] https://github.com/Esri/geometry-api-java
> > >
> > > On Tue, Sep 13, 2016 at 10:36 PM Jim Hughes <jn...@ccri.com> wrote:
> > >
> > > > Hi Aaron,
> > > >
> > > > Thanks, wasn't finding that list quickly...
> > > >
> > > > It sounds like the GeoMesa/GeoTools usage might fall under this Q/A:
> > > > http://www.apache.org/legal/resolved.html#optional.
> > > >
> > > > Thoughts?
> > > >
> > > > Jim
> > > >
> > > > On 9/13/2016 9:25 PM, Aaron D. Mihalik wrote:
> > > > > Jim,
> > > > >
> > > > > We've been working off of these lists:
> > > > >
> > > > > http://www.apache.org/legal/resolved.html#category-a
> > > > >
> > > > > On Tue, Sep 13, 2016 at 6:07 PM Jim Hughes <jn...@ccri.com> wrote:
> > > > >
> > > > >> Hi David,
> > > > >>
> > > > >> A number of the geo-dependencies are likely from the geo-indexing
> > > (which
> > > > >> uses GeoMesa (Apache 2.0) which uses GeoTools and JTS).
> > > > >>
> > > > >> Are there options to make the geoindexing a profile, provide the
> > > source,
> > > > >> and not provide artifacts for that code at Apache?
> > > > >>
> > > > >> Also, is there a list of approved licenses for Apache projects
> > > > >> dependencies?
> > > > >>
> > > > >> Cheers,
> > > > >>
> > > > >> Jim
> > > > >>
> > > > >> On 09/13/2016 05:46 PM, David Lotts wrote:
> > > > >>> This issue is a release blocker:
> > > > >>> <https://issues.apache.org/jira/browse/RYA-179>
> > > > >>>
> > > > >>> RYA-179 <https://issues.apache.org/jira/browse/RYA-179> Review
> > > > License /
> > > > >>> Copyright notices on Rya Artifacts
> > > > >>>
> > > > >>> I was able to create a 3rd party dependency license report for
> Rya
> > > > >>> from the license
> > > > >>> maven plugin.
> > > > >>> <http://www.mojohaus.org/license-maven-plugin/>
> > > > >>>
> > > > >>> Good: I can send the full list if you like.  Mostly ASL and
> clearly
> > > > >>> permitted.
> > > > >>>
> > > > >>> Okay: A number of CDDL and CPL licenses -- permitted if no source
> > > code
> > > > is
> > > > >>> included.
> > > > >>>
> > > > >>> Needs Improvement: The following are not clearly permitted
> > licenses:
> > > > >>>
> > > > >>>        (cern.colt MIT license see
> > > > >>> https://dst.lbl.gov/ACSSoftware/colt/license.html) colt
> > > > >> (colt:colt:1.2.0 -
> > > > >>> no url defined)
> > > > >>>            -- this is a mistake, should be  java.util.Arrays, not
> > > > >>> cern.colt.Arrays  -- creating an issue to eliminate dependency.
> > > > >>>        (GNU LESSER GENERAL PUBLIC LICENSE) JCalendar
> > > > >>> (com.toedter:jcalendar:1.1.4 -
> > http://www.toedter.com/en/jcalendar/)
> > > > >>>        (Lesser General Public License (LGPL)) JTS Topology Suite
> > > > >>> (com.vividsolutions:jts:1.13 -
> > > > >>> http://sourceforge.net/projects/jts-topo-suite)
> > > > >>>        (Lesser General Public License (LGPL)) Image
> I/O-Extensions
> > -
> > > > >> GeoCore
> > > > >>> (it.geosolutions.imageio-ext:imageio-ext-geocore:1.1.13 - no url
> > > > defined)
> > > > >>>        (Lesser General Public License (LGPL)) Image
> I/O-Extensions
> > -
> > > > >> Custom
> > > > >>> Streams (it.geosolutions.imageio-ext:imageio-ext-streams:1.1.13
> -
> > no
> > > > url
> > > > >>> defined)
> > > > >>>        (Lesser General Public License (LGPL)) Improved TIFF
> Plugin
> > > > >>> (it.geosolutions.imageio-ext:imageio-ext-tiff:1.1.13 - no url
> > > defined)
> > > > >>>        (Lesser General Public License (LGPL)) Image
> I/O-Extensions
> > -
> > > > >>> utilities classes and methods
> > > > >>> (it.geosolutions.imageio-ext:imageio-ext-utilities:1.1.13 - no
> url
> > > > >> defined)
> > > > >>>        (Unknown license) jai_codec (javax.media:jai_codec:1.1.3 -
> > no
> > > > url
> > > > >>> defined)
> > > > >>>        (Unknown license) jai_core (javax.media:jai_core:1.1.3 -
> no
> > > url
> > > > >>> defined)
> > > > >>>        (Unknown license) jai_imageio
> (javax.media:jai_imageio:1.1 -
> > > no
> > > > url
> > > > >>> defined)
> > > > >>>        (Unknown license) jgridshift (jgridshift:jgridshift:1.0 -
> no
> > > url
> > > > >>> defined)
> > > > >>>        (GNU Lesser General Public License) Remote Tea Runtime
> > > > >>> (org.acplt:oncrpc:1.0.7 - http://remotetea.sourceforge.net/)
> > > > >>>        (Unknown license) Antlr 3.4 Runtime
> > > > (org.antlr:antlr-runtime:3.4 -
> > > > >>> http://www.antlr.org)
> > > > >>>        (Unknown license) Jettison (org.codehaus.jettison:
> > > jettison:1.1
> > > > - no
> > > > >>> url defined)
> > > > >>>        (Lesser General Public License (LGPL)) API interfaces
> > > > >>> (org.geotools:gt-api:14.3 - no url defined)
> > > > >>>        (Lesser General Public License (LGPL)) Grid Coverage
> module
> > > > >>> (org.geotools:gt-coverage:14.3 - no url defined)
> > > > >>>        (Lesser General Public License (LGPL)) OGC CQL to Filter
> > > parser
> > > > >>> (org.geotools:gt-cql:14.1 - no url defined)
> > > > >>>        (Lesser General Public License (LGPL)) DataStore Support
> > > > >>> (org.geotools:gt-data:14.1 - no url defined)
> > > > >>>        (Lesser General Public License (LGPL)) Feature Based
> Graphs
> > > and
> > > > >>> Networks (org.geotools:gt-graph:14.3 - no url defined)
> > > > >>>        (Lesser General Public License (LGPL)) Vector grids
> > > > >>> (org.geotools:gt-grid:14.1 - no url defined)
> > > > >>>        (Lesser General Public License (LGPL)) Main module
> > > > >>> (org.geotools:gt-main:14.1 - no url defined)
> > > > >>>        (Lesser General Public License (LGPL)) Metadata
> > > > >>> (org.geotools:gt-metadata:14.1 - no url defined)
> > > > >>>        (Lesser General Public License (LGPL)) (OGC copyright)
> Open
> > > GIS
> > > > >>> Interfaces (org.geotools:gt-opengis:14.1 - no url defined)
> > > > >>>        (Lesser General Public License (LGPL)) Process
> > > > >>> (org.geotools:gt-process:14.1 - no url defined)
> > > > >>>        (Lesser General Public License (LGPL)) Process Feature
> > > > >>> (org.geotools:gt-process-feature:14.1 - no url defined)
> > > > >>>        (Lesser General Public License (LGPL)) Referencing
> services
> > > > >>> (org.geotools:gt-referencing:14.3 - no url defined)
> > > > >>>        (Lesser General Public License (LGPL)) Render
> > > > >>> (org.geotools:gt-render:14.1 - no url defined)
> > > > >>>        (Lesser General Public License (LGPL)) Shapefile module
> > > > >>> (org.geotools:gt-shapefile:14.1 - no url defined)
> > > > >>>        (Lesser General Public License (LGPL)) Feature
> transforming
> > > > feature
> > > > >>> source wrapper (org.geotools:gt-transform:14.1 - no url defined)
> > > > >>>        (Lesser General Public License (LGPL)) XML Parsing
> > > > >>> (org.geotools.xsd:gt-xsd-core:14.3 - no url defined)
> > > > >>>        (Lesser General Public License (LGPL)) GML2 XML Support
> > > > >>> (org.geotools.xsd:gt-xsd-gml2:14.3 - no url defined)
> > > > >>>        (Lesser General Public License (LGPL)) GML3 XML Support
> > > > >>> (org.geotools.xsd:gt-xsd-gml3:14.3 - no url defined)
> > > > >>>
> > > > >>> david.
> > > > >>>
> > > > >>
> > > >
> > > >
> > >
> >
>

Re: RYA-179 Review License / Copyright notices on Rya Artifacts

Posted by Josh Elser <el...@apache.org>.

I would have said that this is only kosher when you have an alternative 
to the incompatibly licensed software. Is the indexer actually optional 
(I don't have enough context)? Are there ways for me to to indexing of 
the same type of data that don't require use of these incompatible 
dependencies?

Billie might be able to provide some more context too.

Aaron D. Mihalik wrote:
>> Could we revive the indexer profile again?
>
> (tl;dr: Yes.  Mentors: Please correct us if we're wrong)
>
> This might be a solution.  I found a couple similar cases with Apache
> projects and discussions related to those cases.
>
> Apache Flink integrated with Amazon Kinesis [1] and [2].  Note that Kinesis
> is an optional profile, and it's well documented in the POM why it's
> optional.
>
> (Note that NiFi got around this by using Amazon's SDK for Java [3], which
> is purely Apache 2.0)
>
> Spark uses optional profiles to build artifacts based on LGPL
> dependencies.  Spark has to built by the user to use netlib [4][5], Ganglia
> [6], or Kinesis [6].
>
> I think a profile will work, but I'd like to see it well documented (both
> in the POM and manual) so that we never accidentally create a release with
> these artifacts.
>
> I was going to open a separate ticket to implement this, but I think it's
> good to track all of this effort under RYA-177.
>
> --Aaron
>
> [1]
> https://github.com/apache/flink/blob/release-1.1.2/flink-streaming-connectors/pom.xml#L69
> [2]
> https://github.com/apache/flink/blob/release-1.1.2/flink-streaming-connectors/flink-connector-kinesis/pom.xml#L73
>
> [3] https://github.com/apache/nifi/blob/master/pom.xml#L1316
>
> [4] https://github.com/apache/spark/blob/v2.0.0/mllib/pom.xml#L120
> [5]
> https://github.com/apache/spark/blob/v2.0.0/docs/ml-guide.md#dependencies
>
> [6] https://github.com/apache/spark/blob/v2.0.0/pom.xml#L2414
>
> [7] https://issues.apache.org/jira/browse/LEGAL-198
> [8] https://www.gnu.org/licenses/lgpl-java.html
>
>
>
> On Wed, Sep 14, 2016 at 12:09 PM David Lotts<dl...@gmail.com>  wrote:
>
>> Great find Aaron!
>> The ESRI library is quite comparable!
>>
>> Rya via Geomesa are using *JTS Topology Suite (*JTS): (the javadocs at
>> vividsolutions seems to be 404 )
>>
>>
>> http://tsusiatsoftware.net/jts/javadoc/com/vividsolutions/jts/geom/Geometry.html
>>
>> Far from a drop-in replacement, but a path forward:
>>      http://esri.github.io/geometry-api-java/javadoc/
>>
>> Interesting, ESRI has Shape file support, but no GML, the opposite of JTS!
>> david.
>>
>>
>> On Wed, Sep 14, 2016 at 10:29 AM, Aaron D. Mihalik<
>> aaron.mihalik@gmail.com>
>> wrote:
>>
>>> Yeah, that sounds possible. I don't like the idea of having to maintain
>>> another build/ci/release process, though.
>>>
>>> More importantly, we'd also have to modify our GeoIndexer interface [1]
>> to
>>> something Apache Friendly.  It looks like Ersi puts out an Apache 2.0
>>> library [2].
>>>
>>> [1]
>>> https://github.com/apache/incubator-rya/blob/master/
>>> extras/indexing/src/main/java/mvm/rya/indexing/GeoIndexer.java
>>> [2] https://github.com/Esri/geometry-api-java
>>>
>>> On Tue, Sep 13, 2016 at 10:36 PM Jim Hughes<jn...@ccri.com>  wrote:
>>>
>>>> Hi Aaron,
>>>>
>>>> Thanks, wasn't finding that list quickly...
>>>>
>>>> It sounds like the GeoMesa/GeoTools usage might fall under this Q/A:
>>>> http://www.apache.org/legal/resolved.html#optional.
>>>>
>>>> Thoughts?
>>>>
>>>> Jim
>>>>
>>>> On 9/13/2016 9:25 PM, Aaron D. Mihalik wrote:
>>>>> Jim,
>>>>>
>>>>> We've been working off of these lists:
>>>>>
>>>>> http://www.apache.org/legal/resolved.html#category-a
>>>>>
>>>>> On Tue, Sep 13, 2016 at 6:07 PM Jim Hughes<jn...@ccri.com>  wrote:
>>>>>
>>>>>> Hi David,
>>>>>>
>>>>>> A number of the geo-dependencies are likely from the geo-indexing
>>> (which
>>>>>> uses GeoMesa (Apache 2.0) which uses GeoTools and JTS).
>>>>>>
>>>>>> Are there options to make the geoindexing a profile, provide the
>>> source,
>>>>>> and not provide artifacts for that code at Apache?
>>>>>>
>>>>>> Also, is there a list of approved licenses for Apache projects
>>>>>> dependencies?
>>>>>>
>>>>>> Cheers,
>>>>>>
>>>>>> Jim
>>>>>>
>>>>>> On 09/13/2016 05:46 PM, David Lotts wrote:
>>>>>>> This issue is a release blocker:
>>>>>>> <https://issues.apache.org/jira/browse/RYA-179>
>>>>>>>
>>>>>>> RYA-179<https://issues.apache.org/jira/browse/RYA-179>  Review
>>>> License /
>>>>>>> Copyright notices on Rya Artifacts
>>>>>>>
>>>>>>> I was able to create a 3rd party dependency license report for Rya
>>>>>>> from the license
>>>>>>> maven plugin.
>>>>>>> <http://www.mojohaus.org/license-maven-plugin/>
>>>>>>>
>>>>>>> Good: I can send the full list if you like.  Mostly ASL and clearly
>>>>>>> permitted.
>>>>>>>
>>>>>>> Okay: A number of CDDL and CPL licenses -- permitted if no source
>>> code
>>>> is
>>>>>>> included.
>>>>>>>
>>>>>>> Needs Improvement: The following are not clearly permitted
>> licenses:
>>>>>>>         (cern.colt MIT license see
>>>>>>> https://dst.lbl.gov/ACSSoftware/colt/license.html) colt
>>>>>> (colt:colt:1.2.0 -
>>>>>>> no url defined)
>>>>>>>             -- this is a mistake, should be  java.util.Arrays, not
>>>>>>> cern.colt.Arrays  -- creating an issue to eliminate dependency.
>>>>>>>         (GNU LESSER GENERAL PUBLIC LICENSE) JCalendar
>>>>>>> (com.toedter:jcalendar:1.1.4 -
>> http://www.toedter.com/en/jcalendar/)
>>>>>>>         (Lesser General Public License (LGPL)) JTS Topology Suite
>>>>>>> (com.vividsolutions:jts:1.13 -
>>>>>>> http://sourceforge.net/projects/jts-topo-suite)
>>>>>>>         (Lesser General Public License (LGPL)) Image I/O-Extensions
>> -
>>>>>> GeoCore
>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-geocore:1.1.13 - no url
>>>> defined)
>>>>>>>         (Lesser General Public License (LGPL)) Image I/O-Extensions
>> -
>>>>>> Custom
>>>>>>> Streams (it.geosolutions.imageio-ext:imageio-ext-streams:1.1.13 -
>> no
>>>> url
>>>>>>> defined)
>>>>>>>         (Lesser General Public License (LGPL)) Improved TIFF Plugin
>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-tiff:1.1.13 - no url
>>> defined)
>>>>>>>         (Lesser General Public License (LGPL)) Image I/O-Extensions
>> -
>>>>>>> utilities classes and methods
>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-utilities:1.1.13 - no url
>>>>>> defined)
>>>>>>>         (Unknown license) jai_codec (javax.media:jai_codec:1.1.3 -
>> no
>>>> url
>>>>>>> defined)
>>>>>>>         (Unknown license) jai_core (javax.media:jai_core:1.1.3 - no
>>> url
>>>>>>> defined)
>>>>>>>         (Unknown license) jai_imageio (javax.media:jai_imageio:1.1 -
>>> no
>>>> url
>>>>>>> defined)
>>>>>>>         (Unknown license) jgridshift (jgridshift:jgridshift:1.0 - no
>>> url
>>>>>>> defined)
>>>>>>>         (GNU Lesser General Public License) Remote Tea Runtime
>>>>>>> (org.acplt:oncrpc:1.0.7 - http://remotetea.sourceforge.net/)
>>>>>>>         (Unknown license) Antlr 3.4 Runtime
>>>> (org.antlr:antlr-runtime:3.4 -
>>>>>>> http://www.antlr.org)
>>>>>>>         (Unknown license) Jettison (org.codehaus.jettison:
>>> jettison:1.1
>>>> - no
>>>>>>> url defined)
>>>>>>>         (Lesser General Public License (LGPL)) API interfaces
>>>>>>> (org.geotools:gt-api:14.3 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) Grid Coverage module
>>>>>>> (org.geotools:gt-coverage:14.3 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) OGC CQL to Filter
>>> parser
>>>>>>> (org.geotools:gt-cql:14.1 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) DataStore Support
>>>>>>> (org.geotools:gt-data:14.1 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) Feature Based Graphs
>>> and
>>>>>>> Networks (org.geotools:gt-graph:14.3 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) Vector grids
>>>>>>> (org.geotools:gt-grid:14.1 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) Main module
>>>>>>> (org.geotools:gt-main:14.1 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) Metadata
>>>>>>> (org.geotools:gt-metadata:14.1 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) (OGC copyright) Open
>>> GIS
>>>>>>> Interfaces (org.geotools:gt-opengis:14.1 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) Process
>>>>>>> (org.geotools:gt-process:14.1 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) Process Feature
>>>>>>> (org.geotools:gt-process-feature:14.1 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) Referencing services
>>>>>>> (org.geotools:gt-referencing:14.3 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) Render
>>>>>>> (org.geotools:gt-render:14.1 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) Shapefile module
>>>>>>> (org.geotools:gt-shapefile:14.1 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) Feature transforming
>>>> feature
>>>>>>> source wrapper (org.geotools:gt-transform:14.1 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) XML Parsing
>>>>>>> (org.geotools.xsd:gt-xsd-core:14.3 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) GML2 XML Support
>>>>>>> (org.geotools.xsd:gt-xsd-gml2:14.3 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) GML3 XML Support
>>>>>>> (org.geotools.xsd:gt-xsd-gml3:14.3 - no url defined)
>>>>>>>
>>>>>>> david.
>>>>>>>
>>>>
>

Re: RYA-179 Review License / Copyright notices on Rya Artifacts

Posted by "Aaron D. Mihalik" <aa...@gmail.com>.

> Could we revive the indexer profile again?

(tl;dr: Yes.  Mentors: Please correct us if we're wrong)

This might be a solution.  I found a couple similar cases with Apache
projects and discussions related to those cases.

Apache Flink integrated with Amazon Kinesis [1] and [2].  Note that Kinesis
is an optional profile, and it's well documented in the POM why it's
optional.

(Note that NiFi got around this by using Amazon's SDK for Java [3], which
is purely Apache 2.0)

Spark uses optional profiles to build artifacts based on LGPL
dependencies.  Spark has to built by the user to use netlib [4][5], Ganglia
[6], or Kinesis [6].

I think a profile will work, but I'd like to see it well documented (both
in the POM and manual) so that we never accidentally create a release with
these artifacts.

I was going to open a separate ticket to implement this, but I think it's
good to track all of this effort under RYA-177.

--Aaron

[1]
https://github.com/apache/flink/blob/release-1.1.2/flink-streaming-connectors/pom.xml#L69
[2]
https://github.com/apache/flink/blob/release-1.1.2/flink-streaming-connectors/flink-connector-kinesis/pom.xml#L73

[3] https://github.com/apache/nifi/blob/master/pom.xml#L1316

[4] https://github.com/apache/spark/blob/v2.0.0/mllib/pom.xml#L120
[5]
https://github.com/apache/spark/blob/v2.0.0/docs/ml-guide.md#dependencies

[6] https://github.com/apache/spark/blob/v2.0.0/pom.xml#L2414

[7] https://issues.apache.org/jira/browse/LEGAL-198
[8] https://www.gnu.org/licenses/lgpl-java.html



On Wed, Sep 14, 2016 at 12:09 PM David Lotts <dl...@gmail.com> wrote:

> Great find Aaron!
> The ESRI library is quite comparable!
>
> Rya via Geomesa are using *JTS Topology Suite (*JTS): (the javadocs at
> vividsolutions seems to be 404 )
>
>
> http://tsusiatsoftware.net/jts/javadoc/com/vividsolutions/jts/geom/Geometry.html
>
> Far from a drop-in replacement, but a path forward:
>     http://esri.github.io/geometry-api-java/javadoc/
>
> Interesting, ESRI has Shape file support, but no GML, the opposite of JTS!
> david.
>
>
> On Wed, Sep 14, 2016 at 10:29 AM, Aaron D. Mihalik <
> aaron.mihalik@gmail.com>
> wrote:
>
> > Yeah, that sounds possible. I don't like the idea of having to maintain
> > another build/ci/release process, though.
> >
> > More importantly, we'd also have to modify our GeoIndexer interface [1]
> to
> > something Apache Friendly.  It looks like Ersi puts out an Apache 2.0
> > library [2].
> >
> > [1]
> > https://github.com/apache/incubator-rya/blob/master/
> > extras/indexing/src/main/java/mvm/rya/indexing/GeoIndexer.java
> > [2] https://github.com/Esri/geometry-api-java
> >
> > On Tue, Sep 13, 2016 at 10:36 PM Jim Hughes <jn...@ccri.com> wrote:
> >
> > > Hi Aaron,
> > >
> > > Thanks, wasn't finding that list quickly...
> > >
> > > It sounds like the GeoMesa/GeoTools usage might fall under this Q/A:
> > > http://www.apache.org/legal/resolved.html#optional.
> > >
> > > Thoughts?
> > >
> > > Jim
> > >
> > > On 9/13/2016 9:25 PM, Aaron D. Mihalik wrote:
> > > > Jim,
> > > >
> > > > We've been working off of these lists:
> > > >
> > > > http://www.apache.org/legal/resolved.html#category-a
> > > >
> > > > On Tue, Sep 13, 2016 at 6:07 PM Jim Hughes <jn...@ccri.com> wrote:
> > > >
> > > >> Hi David,
> > > >>
> > > >> A number of the geo-dependencies are likely from the geo-indexing
> > (which
> > > >> uses GeoMesa (Apache 2.0) which uses GeoTools and JTS).
> > > >>
> > > >> Are there options to make the geoindexing a profile, provide the
> > source,
> > > >> and not provide artifacts for that code at Apache?
> > > >>
> > > >> Also, is there a list of approved licenses for Apache projects
> > > >> dependencies?
> > > >>
> > > >> Cheers,
> > > >>
> > > >> Jim
> > > >>
> > > >> On 09/13/2016 05:46 PM, David Lotts wrote:
> > > >>> This issue is a release blocker:
> > > >>> <https://issues.apache.org/jira/browse/RYA-179>
> > > >>>
> > > >>> RYA-179 <https://issues.apache.org/jira/browse/RYA-179> Review
> > > License /
> > > >>> Copyright notices on Rya Artifacts
> > > >>>
> > > >>> I was able to create a 3rd party dependency license report for Rya
> > > >>> from the license
> > > >>> maven plugin.
> > > >>> <http://www.mojohaus.org/license-maven-plugin/>
> > > >>>
> > > >>> Good: I can send the full list if you like.  Mostly ASL and clearly
> > > >>> permitted.
> > > >>>
> > > >>> Okay: A number of CDDL and CPL licenses -- permitted if no source
> > code
> > > is
> > > >>> included.
> > > >>>
> > > >>> Needs Improvement: The following are not clearly permitted
> licenses:
> > > >>>
> > > >>>        (cern.colt MIT license see
> > > >>> https://dst.lbl.gov/ACSSoftware/colt/license.html) colt
> > > >> (colt:colt:1.2.0 -
> > > >>> no url defined)
> > > >>>            -- this is a mistake, should be  java.util.Arrays, not
> > > >>> cern.colt.Arrays  -- creating an issue to eliminate dependency.
> > > >>>        (GNU LESSER GENERAL PUBLIC LICENSE) JCalendar
> > > >>> (com.toedter:jcalendar:1.1.4 -
> http://www.toedter.com/en/jcalendar/)
> > > >>>        (Lesser General Public License (LGPL)) JTS Topology Suite
> > > >>> (com.vividsolutions:jts:1.13 -
> > > >>> http://sourceforge.net/projects/jts-topo-suite)
> > > >>>        (Lesser General Public License (LGPL)) Image I/O-Extensions
> -
> > > >> GeoCore
> > > >>> (it.geosolutions.imageio-ext:imageio-ext-geocore:1.1.13 - no url
> > > defined)
> > > >>>        (Lesser General Public License (LGPL)) Image I/O-Extensions
> -
> > > >> Custom
> > > >>> Streams (it.geosolutions.imageio-ext:imageio-ext-streams:1.1.13 -
> no
> > > url
> > > >>> defined)
> > > >>>        (Lesser General Public License (LGPL)) Improved TIFF Plugin
> > > >>> (it.geosolutions.imageio-ext:imageio-ext-tiff:1.1.13 - no url
> > defined)
> > > >>>        (Lesser General Public License (LGPL)) Image I/O-Extensions
> -
> > > >>> utilities classes and methods
> > > >>> (it.geosolutions.imageio-ext:imageio-ext-utilities:1.1.13 - no url
> > > >> defined)
> > > >>>        (Unknown license) jai_codec (javax.media:jai_codec:1.1.3 -
> no
> > > url
> > > >>> defined)
> > > >>>        (Unknown license) jai_core (javax.media:jai_core:1.1.3 - no
> > url
> > > >>> defined)
> > > >>>        (Unknown license) jai_imageio (javax.media:jai_imageio:1.1 -
> > no
> > > url
> > > >>> defined)
> > > >>>        (Unknown license) jgridshift (jgridshift:jgridshift:1.0 - no
> > url
> > > >>> defined)
> > > >>>        (GNU Lesser General Public License) Remote Tea Runtime
> > > >>> (org.acplt:oncrpc:1.0.7 - http://remotetea.sourceforge.net/)
> > > >>>        (Unknown license) Antlr 3.4 Runtime
> > > (org.antlr:antlr-runtime:3.4 -
> > > >>> http://www.antlr.org)
> > > >>>        (Unknown license) Jettison (org.codehaus.jettison:
> > jettison:1.1
> > > - no
> > > >>> url defined)
> > > >>>        (Lesser General Public License (LGPL)) API interfaces
> > > >>> (org.geotools:gt-api:14.3 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) Grid Coverage module
> > > >>> (org.geotools:gt-coverage:14.3 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) OGC CQL to Filter
> > parser
> > > >>> (org.geotools:gt-cql:14.1 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) DataStore Support
> > > >>> (org.geotools:gt-data:14.1 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) Feature Based Graphs
> > and
> > > >>> Networks (org.geotools:gt-graph:14.3 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) Vector grids
> > > >>> (org.geotools:gt-grid:14.1 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) Main module
> > > >>> (org.geotools:gt-main:14.1 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) Metadata
> > > >>> (org.geotools:gt-metadata:14.1 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) (OGC copyright) Open
> > GIS
> > > >>> Interfaces (org.geotools:gt-opengis:14.1 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) Process
> > > >>> (org.geotools:gt-process:14.1 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) Process Feature
> > > >>> (org.geotools:gt-process-feature:14.1 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) Referencing services
> > > >>> (org.geotools:gt-referencing:14.3 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) Render
> > > >>> (org.geotools:gt-render:14.1 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) Shapefile module
> > > >>> (org.geotools:gt-shapefile:14.1 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) Feature transforming
> > > feature
> > > >>> source wrapper (org.geotools:gt-transform:14.1 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) XML Parsing
> > > >>> (org.geotools.xsd:gt-xsd-core:14.3 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) GML2 XML Support
> > > >>> (org.geotools.xsd:gt-xsd-gml2:14.3 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) GML3 XML Support
> > > >>> (org.geotools.xsd:gt-xsd-gml3:14.3 - no url defined)
> > > >>>
> > > >>> david.
> > > >>>
> > > >>
> > >
> > >
> >
>

Re: RYA-179 Review License / Copyright notices on Rya Artifacts

Posted by David Lotts <dl...@gmail.com>.

Great find Aaron!
The ESRI library is quite comparable!

Rya via Geomesa are using *JTS Topology Suite (*JTS): (the javadocs at
vividsolutions seems to be 404 )

http://tsusiatsoftware.net/jts/javadoc/com/vividsolutions/jts/geom/Geometry.html

Far from a drop-in replacement, but a path forward:
    http://esri.github.io/geometry-api-java/javadoc/

Interesting, ESRI has Shape file support, but no GML, the opposite of JTS!
david.


On Wed, Sep 14, 2016 at 10:29 AM, Aaron D. Mihalik <aa...@gmail.com>
wrote:

> Yeah, that sounds possible. I don't like the idea of having to maintain
> another build/ci/release process, though.
>
> More importantly, we'd also have to modify our GeoIndexer interface [1] to
> something Apache Friendly.  It looks like Ersi puts out an Apache 2.0
> library [2].
>
> [1]
> https://github.com/apache/incubator-rya/blob/master/
> extras/indexing/src/main/java/mvm/rya/indexing/GeoIndexer.java
> [2] https://github.com/Esri/geometry-api-java
>
> On Tue, Sep 13, 2016 at 10:36 PM Jim Hughes <jn...@ccri.com> wrote:
>
> > Hi Aaron,
> >
> > Thanks, wasn't finding that list quickly...
> >
> > It sounds like the GeoMesa/GeoTools usage might fall under this Q/A:
> > http://www.apache.org/legal/resolved.html#optional.
> >
> > Thoughts?
> >
> > Jim
> >
> > On 9/13/2016 9:25 PM, Aaron D. Mihalik wrote:
> > > Jim,
> > >
> > > We've been working off of these lists:
> > >
> > > http://www.apache.org/legal/resolved.html#category-a
> > >
> > > On Tue, Sep 13, 2016 at 6:07 PM Jim Hughes <jn...@ccri.com> wrote:
> > >
> > >> Hi David,
> > >>
> > >> A number of the geo-dependencies are likely from the geo-indexing
> (which
> > >> uses GeoMesa (Apache 2.0) which uses GeoTools and JTS).
> > >>
> > >> Are there options to make the geoindexing a profile, provide the
> source,
> > >> and not provide artifacts for that code at Apache?
> > >>
> > >> Also, is there a list of approved licenses for Apache projects
> > >> dependencies?
> > >>
> > >> Cheers,
> > >>
> > >> Jim
> > >>
> > >> On 09/13/2016 05:46 PM, David Lotts wrote:
> > >>> This issue is a release blocker:
> > >>> <https://issues.apache.org/jira/browse/RYA-179>
> > >>>
> > >>> RYA-179 <https://issues.apache.org/jira/browse/RYA-179> Review
> > License /
> > >>> Copyright notices on Rya Artifacts
> > >>>
> > >>> I was able to create a 3rd party dependency license report for Rya
> > >>> from the license
> > >>> maven plugin.
> > >>> <http://www.mojohaus.org/license-maven-plugin/>
> > >>>
> > >>> Good: I can send the full list if you like.  Mostly ASL and clearly
> > >>> permitted.
> > >>>
> > >>> Okay: A number of CDDL and CPL licenses -- permitted if no source
> code
> > is
> > >>> included.
> > >>>
> > >>> Needs Improvement: The following are not clearly permitted licenses:
> > >>>
> > >>>        (cern.colt MIT license see
> > >>> https://dst.lbl.gov/ACSSoftware/colt/license.html) colt
> > >> (colt:colt:1.2.0 -
> > >>> no url defined)
> > >>>            -- this is a mistake, should be  java.util.Arrays, not
> > >>> cern.colt.Arrays  -- creating an issue to eliminate dependency.
> > >>>        (GNU LESSER GENERAL PUBLIC LICENSE) JCalendar
> > >>> (com.toedter:jcalendar:1.1.4 - http://www.toedter.com/en/jcalendar/)
> > >>>        (Lesser General Public License (LGPL)) JTS Topology Suite
> > >>> (com.vividsolutions:jts:1.13 -
> > >>> http://sourceforge.net/projects/jts-topo-suite)
> > >>>        (Lesser General Public License (LGPL)) Image I/O-Extensions -
> > >> GeoCore
> > >>> (it.geosolutions.imageio-ext:imageio-ext-geocore:1.1.13 - no url
> > defined)
> > >>>        (Lesser General Public License (LGPL)) Image I/O-Extensions -
> > >> Custom
> > >>> Streams (it.geosolutions.imageio-ext:imageio-ext-streams:1.1.13 - no
> > url
> > >>> defined)
> > >>>        (Lesser General Public License (LGPL)) Improved TIFF Plugin
> > >>> (it.geosolutions.imageio-ext:imageio-ext-tiff:1.1.13 - no url
> defined)
> > >>>        (Lesser General Public License (LGPL)) Image I/O-Extensions -
> > >>> utilities classes and methods
> > >>> (it.geosolutions.imageio-ext:imageio-ext-utilities:1.1.13 - no url
> > >> defined)
> > >>>        (Unknown license) jai_codec (javax.media:jai_codec:1.1.3 - no
> > url
> > >>> defined)
> > >>>        (Unknown license) jai_core (javax.media:jai_core:1.1.3 - no
> url
> > >>> defined)
> > >>>        (Unknown license) jai_imageio (javax.media:jai_imageio:1.1 -
> no
> > url
> > >>> defined)
> > >>>        (Unknown license) jgridshift (jgridshift:jgridshift:1.0 - no
> url
> > >>> defined)
> > >>>        (GNU Lesser General Public License) Remote Tea Runtime
> > >>> (org.acplt:oncrpc:1.0.7 - http://remotetea.sourceforge.net/)
> > >>>        (Unknown license) Antlr 3.4 Runtime
> > (org.antlr:antlr-runtime:3.4 -
> > >>> http://www.antlr.org)
> > >>>        (Unknown license) Jettison (org.codehaus.jettison:
> jettison:1.1
> > - no
> > >>> url defined)
> > >>>        (Lesser General Public License (LGPL)) API interfaces
> > >>> (org.geotools:gt-api:14.3 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) Grid Coverage module
> > >>> (org.geotools:gt-coverage:14.3 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) OGC CQL to Filter
> parser
> > >>> (org.geotools:gt-cql:14.1 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) DataStore Support
> > >>> (org.geotools:gt-data:14.1 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) Feature Based Graphs
> and
> > >>> Networks (org.geotools:gt-graph:14.3 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) Vector grids
> > >>> (org.geotools:gt-grid:14.1 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) Main module
> > >>> (org.geotools:gt-main:14.1 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) Metadata
> > >>> (org.geotools:gt-metadata:14.1 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) (OGC copyright) Open
> GIS
> > >>> Interfaces (org.geotools:gt-opengis:14.1 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) Process
> > >>> (org.geotools:gt-process:14.1 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) Process Feature
> > >>> (org.geotools:gt-process-feature:14.1 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) Referencing services
> > >>> (org.geotools:gt-referencing:14.3 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) Render
> > >>> (org.geotools:gt-render:14.1 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) Shapefile module
> > >>> (org.geotools:gt-shapefile:14.1 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) Feature transforming
> > feature
> > >>> source wrapper (org.geotools:gt-transform:14.1 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) XML Parsing
> > >>> (org.geotools.xsd:gt-xsd-core:14.3 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) GML2 XML Support
> > >>> (org.geotools.xsd:gt-xsd-gml2:14.3 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) GML3 XML Support
> > >>> (org.geotools.xsd:gt-xsd-gml3:14.3 - no url defined)
> > >>>
> > >>> david.
> > >>>
> > >>
> >
> >
>

Re: RYA-179 Review License / Copyright notices on Rya Artifacts

Posted by Jim Hughes <jn...@ccri.com>.

Hi David,

I'm involved with lots of things at LocationTech and the 
GeoTools/GeoServer community.  JTS is close to get sorted out with a 
dual license.  That said, GeoTools is still LGPL and will likely remain 
so for awhile.

As far as I know, ESRI's Geometry library and JTS aren't immediately 
compatible.  (I.e., I don't think one is a drop-in replacement for the 
other.)  Either way, GeoMesa uses GeoTools which leverages JTS.  I just 
mention that to explain that trying to change the geometry libraries 
would not sort out the GeoTools dependency.

I think the profile approach might be best for the medium term.

Cheers,

Jim

On 09/14/2016 12:31 PM, David Lotts wrote:
> I am seeing something happening might make this a non-issue in the medium
> term.  Maybe someone can confirm this.  It looks like the LocationTech
> community is adopting JTS and (here is my speculation) trying to shed
> GeoTools and any dependence on LGPL.
>
> "... induction of JTS
> <https://www.locationtech.org/proposals/jts-topology-suite> into the
> LocationTech community. The project tasks to address including a license
> change from LGPL to BSD/EPL, ..."
> found here:
> http://boundlessgeo.com/2016/02/locationtech-incubation-sprint-update/
>
> This is great, but Geotools is LGPL only, correct?   Third-party code
> redistributed by Eclipse (EPL) explicitly excludes LGPL
> <https://eclipse.org/legal/eplfaq.php#3RDPARTY>.
> But then I see this:
>
> http://boundlessgeo.com/press-release/boundless-ccri-launch-opengeo-suite-geomesa/
>
> Perhaps this will all work out and we can just grab a later version of
> GeoMesa with 100% Apache redistributability.  :-)
>
> david.
>
> On Wed, Sep 14, 2016 at 12:09 PM, David Lotts <dl...@gmail.com> wrote:
>
>> Great find Aaron!
>> The ESRI library is quite comparable!
>>
>> Rya via Geomesa are using *JTS Topology Suite (*JTS): (the javadocs at
>> vividsolutions seems to be 404 )
>>      http://tsusiatsoftware.net/jts/javadoc/com/vividsolutions/jts/geom/
>> Geometry.html
>>
>> Far from a drop-in replacement, but a path forward:
>>      http://esri.github.io/geometry-api-java/javadoc/
>>
>> Interesting, ESRI has Shape file support, but no GML, the opposite of JTS!
>> david.
>>
> On Wed, Sep 14, 2016 at 10:39 AM, Puja Valiyil <pu...@gmail.com> wrote:
>
>> Could we revive the indexer profile again?  Make everything in indexing
>> only included in that profile?  That could push off refactoring the
>> geoindexing until our next release.
>>
>> On Wed, Sep 14, 2016 at 10:29 AM, Aaron D. Mihalik <
>> aaron.mihalik@gmail.com>
>> wrote:
>>
>>> Yeah, that sounds possible. I don't like the idea of having to maintain
>>> another build/ci/release process, though.
>>>
>>> More importantly, we'd also have to modify our GeoIndexer interface [1]
>> to
>>> something Apache Friendly.  It looks like Ersi puts out an Apache 2.0
>>> library [2].
>>>
>>> [1]
>>> https://github.com/apache/incubator-rya/blob/master/
>>> extras/indexing/src/main/java/mvm/rya/indexing/GeoIndexer.java
>>> [2] https://github.com/Esri/geometry-api-java
>>>
>>> On Tue, Sep 13, 2016 at 10:36 PM Jim Hughes <jn...@ccri.com> wrote:
>>>
>>>> Hi Aaron,
>>>>
>>>> Thanks, wasn't finding that list quickly...
>>>>
>>>> It sounds like the GeoMesa/GeoTools usage might fall under this Q/A:
>>>> http://www.apache.org/legal/resolved.html#optional.
>>>>
>>>> Thoughts?
>>>>
>>>> Jim
>>>>
>>>> On 9/13/2016 9:25 PM, Aaron D. Mihalik wrote:
>>>>> Jim,
>>>>>
>>>>> We've been working off of these lists:
>>>>>
>>>>> http://www.apache.org/legal/resolved.html#category-a
>>>>>
>>>>> On Tue, Sep 13, 2016 at 6:07 PM Jim Hughes <jn...@ccri.com> wrote:
>>>>>
>>>>>> Hi David,
>>>>>>
>>>>>> A number of the geo-dependencies are likely from the geo-indexing
>>> (which
>>>>>> uses GeoMesa (Apache 2.0) which uses GeoTools and JTS).
>>>>>>
>>>>>> Are there options to make the geoindexing a profile, provide the
>>> source,
>>>>>> and not provide artifacts for that code at Apache?
>>>>>>
>>>>>> Also, is there a list of approved licenses for Apache projects
>>>>>> dependencies?
>>>>>>
>>>>>> Cheers,
>>>>>>
>>>>>> Jim
>>>>>>
>>>>>> On 09/13/2016 05:46 PM, David Lotts wrote:
>>>>>>> This issue is a release blocker:
>>>>>>> <https://issues.apache.org/jira/browse/RYA-179>
>>>>>>>
>>>>>>> RYA-179 <https://issues.apache.org/jira/browse/RYA-179> Review
>>>> License /
>>>>>>> Copyright notices on Rya Artifacts
>>>>>>>
>>>>>>> I was able to create a 3rd party dependency license report for Rya
>>>>>>> from the license
>>>>>>> maven plugin.
>>>>>>> <http://www.mojohaus.org/license-maven-plugin/>
>>>>>>>
>>>>>>> Good: I can send the full list if you like.  Mostly ASL and clearly
>>>>>>> permitted.
>>>>>>>
>>>>>>> Okay: A number of CDDL and CPL licenses -- permitted if no source
>>> code
>>>> is
>>>>>>> included.
>>>>>>>
>>>>>>> Needs Improvement: The following are not clearly permitted
>> licenses:
>>>>>>>         (cern.colt MIT license see
>>>>>>> https://dst.lbl.gov/ACSSoftware/colt/license.html) colt
>>>>>> (colt:colt:1.2.0 -
>>>>>>> no url defined)
>>>>>>>             -- this is a mistake, should be  java.util.Arrays, not
>>>>>>> cern.colt.Arrays  -- creating an issue to eliminate dependency.
>>>>>>>         (GNU LESSER GENERAL PUBLIC LICENSE) JCalendar
>>>>>>> (com.toedter:jcalendar:1.1.4 - http://www.toedter.com/en/
>> jcalendar/)
>>>>>>>         (Lesser General Public License (LGPL)) JTS Topology Suite
>>>>>>> (com.vividsolutions:jts:1.13 -
>>>>>>> http://sourceforge.net/projects/jts-topo-suite)
>>>>>>>         (Lesser General Public License (LGPL)) Image I/O-Extensions
>> -
>>>>>> GeoCore
>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-geocore:1.1.13 - no url
>>>> defined)
>>>>>>>         (Lesser General Public License (LGPL)) Image I/O-Extensions
>> -
>>>>>> Custom
>>>>>>> Streams (it.geosolutions.imageio-ext:imageio-ext-streams:1.1.13 -
>> no
>>>> url
>>>>>>> defined)
>>>>>>>         (Lesser General Public License (LGPL)) Improved TIFF Plugin
>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-tiff:1.1.13 - no url
>>> defined)
>>>>>>>         (Lesser General Public License (LGPL)) Image I/O-Extensions
>> -
>>>>>>> utilities classes and methods
>>>>>>> (it.geosolutions.imageio-ext:imageio-ext-utilities:1.1.13 - no url
>>>>>> defined)
>>>>>>>         (Unknown license) jai_codec (javax.media:jai_codec:1.1.3 -
>> no
>>>> url
>>>>>>> defined)
>>>>>>>         (Unknown license) jai_core (javax.media:jai_core:1.1.3 - no
>>> url
>>>>>>> defined)
>>>>>>>         (Unknown license) jai_imageio (javax.media:jai_imageio:1.1 -
>>> no
>>>> url
>>>>>>> defined)
>>>>>>>         (Unknown license) jgridshift (jgridshift:jgridshift:1.0 - no
>>> url
>>>>>>> defined)
>>>>>>>         (GNU Lesser General Public License) Remote Tea Runtime
>>>>>>> (org.acplt:oncrpc:1.0.7 - http://remotetea.sourceforge.net/)
>>>>>>>         (Unknown license) Antlr 3.4 Runtime
>>>> (org.antlr:antlr-runtime:3.4 -
>>>>>>> http://www.antlr.org)
>>>>>>>         (Unknown license) Jettison (org.codehaus.jettison:
>>> jettison:1.1
>>>> - no
>>>>>>> url defined)
>>>>>>>         (Lesser General Public License (LGPL)) API interfaces
>>>>>>> (org.geotools:gt-api:14.3 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) Grid Coverage module
>>>>>>> (org.geotools:gt-coverage:14.3 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) OGC CQL to Filter
>>> parser
>>>>>>> (org.geotools:gt-cql:14.1 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) DataStore Support
>>>>>>> (org.geotools:gt-data:14.1 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) Feature Based Graphs
>>> and
>>>>>>> Networks (org.geotools:gt-graph:14.3 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) Vector grids
>>>>>>> (org.geotools:gt-grid:14.1 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) Main module
>>>>>>> (org.geotools:gt-main:14.1 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) Metadata
>>>>>>> (org.geotools:gt-metadata:14.1 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) (OGC copyright) Open
>>> GIS
>>>>>>> Interfaces (org.geotools:gt-opengis:14.1 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) Process
>>>>>>> (org.geotools:gt-process:14.1 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) Process Feature
>>>>>>> (org.geotools:gt-process-feature:14.1 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) Referencing services
>>>>>>> (org.geotools:gt-referencing:14.3 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) Render
>>>>>>> (org.geotools:gt-render:14.1 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) Shapefile module
>>>>>>> (org.geotools:gt-shapefile:14.1 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) Feature transforming
>>>> feature
>>>>>>> source wrapper (org.geotools:gt-transform:14.1 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) XML Parsing
>>>>>>> (org.geotools.xsd:gt-xsd-core:14.3 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) GML2 XML Support
>>>>>>> (org.geotools.xsd:gt-xsd-gml2:14.3 - no url defined)
>>>>>>>         (Lesser General Public License (LGPL)) GML3 XML Support
>>>>>>> (org.geotools.xsd:gt-xsd-gml3:14.3 - no url defined)
>>>>>>>
>>>>>>> david.
>>>>>>>
>>>>

Re: RYA-179 Review License / Copyright notices on Rya Artifacts

Posted by David Lotts <dl...@gmail.com>.

I am seeing something happening might make this a non-issue in the medium
term.  Maybe someone can confirm this.  It looks like the LocationTech
community is adopting JTS and (here is my speculation) trying to shed
GeoTools and any dependence on LGPL.

"... induction of JTS
<https://www.locationtech.org/proposals/jts-topology-suite> into the
LocationTech community. The project tasks to address including a license
change from LGPL to BSD/EPL, ..."
found here:
http://boundlessgeo.com/2016/02/locationtech-incubation-sprint-update/

This is great, but Geotools is LGPL only, correct?   Third-party code
redistributed by Eclipse (EPL) explicitly excludes LGPL
<https://eclipse.org/legal/eplfaq.php#3RDPARTY>.
But then I see this:

http://boundlessgeo.com/press-release/boundless-ccri-launch-opengeo-suite-geomesa/

Perhaps this will all work out and we can just grab a later version of
GeoMesa with 100% Apache redistributability.  :-)

david.

On Wed, Sep 14, 2016 at 12:09 PM, David Lotts <dl...@gmail.com> wrote:

> Great find Aaron!
> The ESRI library is quite comparable!
>
> Rya via Geomesa are using *JTS Topology Suite (*JTS): (the javadocs at
> vividsolutions seems to be 404 )
>     http://tsusiatsoftware.net/jts/javadoc/com/vividsolutions/jts/geom/
> Geometry.html
>
> Far from a drop-in replacement, but a path forward:
>     http://esri.github.io/geometry-api-java/javadoc/
>
> Interesting, ESRI has Shape file support, but no GML, the opposite of JTS!
> david.
>

On Wed, Sep 14, 2016 at 10:39 AM, Puja Valiyil <pu...@gmail.com> wrote:

> Could we revive the indexer profile again?  Make everything in indexing
> only included in that profile?  That could push off refactoring the
> geoindexing until our next release.
>
> On Wed, Sep 14, 2016 at 10:29 AM, Aaron D. Mihalik <
> aaron.mihalik@gmail.com>
> wrote:
>
> > Yeah, that sounds possible. I don't like the idea of having to maintain
> > another build/ci/release process, though.
> >
> > More importantly, we'd also have to modify our GeoIndexer interface [1]
> to
> > something Apache Friendly.  It looks like Ersi puts out an Apache 2.0
> > library [2].
> >
> > [1]
> > https://github.com/apache/incubator-rya/blob/master/
> > extras/indexing/src/main/java/mvm/rya/indexing/GeoIndexer.java
> > [2] https://github.com/Esri/geometry-api-java
> >
> > On Tue, Sep 13, 2016 at 10:36 PM Jim Hughes <jn...@ccri.com> wrote:
> >
> > > Hi Aaron,
> > >
> > > Thanks, wasn't finding that list quickly...
> > >
> > > It sounds like the GeoMesa/GeoTools usage might fall under this Q/A:
> > > http://www.apache.org/legal/resolved.html#optional.
> > >
> > > Thoughts?
> > >
> > > Jim
> > >
> > > On 9/13/2016 9:25 PM, Aaron D. Mihalik wrote:
> > > > Jim,
> > > >
> > > > We've been working off of these lists:
> > > >
> > > > http://www.apache.org/legal/resolved.html#category-a
> > > >
> > > > On Tue, Sep 13, 2016 at 6:07 PM Jim Hughes <jn...@ccri.com> wrote:
> > > >
> > > >> Hi David,
> > > >>
> > > >> A number of the geo-dependencies are likely from the geo-indexing
> > (which
> > > >> uses GeoMesa (Apache 2.0) which uses GeoTools and JTS).
> > > >>
> > > >> Are there options to make the geoindexing a profile, provide the
> > source,
> > > >> and not provide artifacts for that code at Apache?
> > > >>
> > > >> Also, is there a list of approved licenses for Apache projects
> > > >> dependencies?
> > > >>
> > > >> Cheers,
> > > >>
> > > >> Jim
> > > >>
> > > >> On 09/13/2016 05:46 PM, David Lotts wrote:
> > > >>> This issue is a release blocker:
> > > >>> <https://issues.apache.org/jira/browse/RYA-179>
> > > >>>
> > > >>> RYA-179 <https://issues.apache.org/jira/browse/RYA-179> Review
> > > License /
> > > >>> Copyright notices on Rya Artifacts
> > > >>>
> > > >>> I was able to create a 3rd party dependency license report for Rya
> > > >>> from the license
> > > >>> maven plugin.
> > > >>> <http://www.mojohaus.org/license-maven-plugin/>
> > > >>>
> > > >>> Good: I can send the full list if you like.  Mostly ASL and clearly
> > > >>> permitted.
> > > >>>
> > > >>> Okay: A number of CDDL and CPL licenses -- permitted if no source
> > code
> > > is
> > > >>> included.
> > > >>>
> > > >>> Needs Improvement: The following are not clearly permitted
> licenses:
> > > >>>
> > > >>>        (cern.colt MIT license see
> > > >>> https://dst.lbl.gov/ACSSoftware/colt/license.html) colt
> > > >> (colt:colt:1.2.0 -
> > > >>> no url defined)
> > > >>>            -- this is a mistake, should be  java.util.Arrays, not
> > > >>> cern.colt.Arrays  -- creating an issue to eliminate dependency.
> > > >>>        (GNU LESSER GENERAL PUBLIC LICENSE) JCalendar
> > > >>> (com.toedter:jcalendar:1.1.4 - http://www.toedter.com/en/
> jcalendar/)
> > > >>>        (Lesser General Public License (LGPL)) JTS Topology Suite
> > > >>> (com.vividsolutions:jts:1.13 -
> > > >>> http://sourceforge.net/projects/jts-topo-suite)
> > > >>>        (Lesser General Public License (LGPL)) Image I/O-Extensions
> -
> > > >> GeoCore
> > > >>> (it.geosolutions.imageio-ext:imageio-ext-geocore:1.1.13 - no url
> > > defined)
> > > >>>        (Lesser General Public License (LGPL)) Image I/O-Extensions
> -
> > > >> Custom
> > > >>> Streams (it.geosolutions.imageio-ext:imageio-ext-streams:1.1.13 -
> no
> > > url
> > > >>> defined)
> > > >>>        (Lesser General Public License (LGPL)) Improved TIFF Plugin
> > > >>> (it.geosolutions.imageio-ext:imageio-ext-tiff:1.1.13 - no url
> > defined)
> > > >>>        (Lesser General Public License (LGPL)) Image I/O-Extensions
> -
> > > >>> utilities classes and methods
> > > >>> (it.geosolutions.imageio-ext:imageio-ext-utilities:1.1.13 - no url
> > > >> defined)
> > > >>>        (Unknown license) jai_codec (javax.media:jai_codec:1.1.3 -
> no
> > > url
> > > >>> defined)
> > > >>>        (Unknown license) jai_core (javax.media:jai_core:1.1.3 - no
> > url
> > > >>> defined)
> > > >>>        (Unknown license) jai_imageio (javax.media:jai_imageio:1.1 -
> > no
> > > url
> > > >>> defined)
> > > >>>        (Unknown license) jgridshift (jgridshift:jgridshift:1.0 - no
> > url
> > > >>> defined)
> > > >>>        (GNU Lesser General Public License) Remote Tea Runtime
> > > >>> (org.acplt:oncrpc:1.0.7 - http://remotetea.sourceforge.net/)
> > > >>>        (Unknown license) Antlr 3.4 Runtime
> > > (org.antlr:antlr-runtime:3.4 -
> > > >>> http://www.antlr.org)
> > > >>>        (Unknown license) Jettison (org.codehaus.jettison:
> > jettison:1.1
> > > - no
> > > >>> url defined)
> > > >>>        (Lesser General Public License (LGPL)) API interfaces
> > > >>> (org.geotools:gt-api:14.3 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) Grid Coverage module
> > > >>> (org.geotools:gt-coverage:14.3 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) OGC CQL to Filter
> > parser
> > > >>> (org.geotools:gt-cql:14.1 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) DataStore Support
> > > >>> (org.geotools:gt-data:14.1 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) Feature Based Graphs
> > and
> > > >>> Networks (org.geotools:gt-graph:14.3 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) Vector grids
> > > >>> (org.geotools:gt-grid:14.1 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) Main module
> > > >>> (org.geotools:gt-main:14.1 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) Metadata
> > > >>> (org.geotools:gt-metadata:14.1 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) (OGC copyright) Open
> > GIS
> > > >>> Interfaces (org.geotools:gt-opengis:14.1 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) Process
> > > >>> (org.geotools:gt-process:14.1 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) Process Feature
> > > >>> (org.geotools:gt-process-feature:14.1 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) Referencing services
> > > >>> (org.geotools:gt-referencing:14.3 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) Render
> > > >>> (org.geotools:gt-render:14.1 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) Shapefile module
> > > >>> (org.geotools:gt-shapefile:14.1 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) Feature transforming
> > > feature
> > > >>> source wrapper (org.geotools:gt-transform:14.1 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) XML Parsing
> > > >>> (org.geotools.xsd:gt-xsd-core:14.3 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) GML2 XML Support
> > > >>> (org.geotools.xsd:gt-xsd-gml2:14.3 - no url defined)
> > > >>>        (Lesser General Public License (LGPL)) GML3 XML Support
> > > >>> (org.geotools.xsd:gt-xsd-gml3:14.3 - no url defined)
> > > >>>
> > > >>> david.
> > > >>>
> > > >>
> > >
> > >
> >
>

Re: RYA-179 Review License / Copyright notices on Rya Artifacts

Posted by Puja Valiyil <pu...@gmail.com>.

Could we revive the indexer profile again?  Make everything in indexing
only included in that profile?  That could push off refactoring the
geoindexing until our next release.

On Wed, Sep 14, 2016 at 10:29 AM, Aaron D. Mihalik <aa...@gmail.com>
wrote:

> Yeah, that sounds possible. I don't like the idea of having to maintain
> another build/ci/release process, though.
>
> More importantly, we'd also have to modify our GeoIndexer interface [1] to
> something Apache Friendly.  It looks like Ersi puts out an Apache 2.0
> library [2].
>
> [1]
> https://github.com/apache/incubator-rya/blob/master/
> extras/indexing/src/main/java/mvm/rya/indexing/GeoIndexer.java
> [2] https://github.com/Esri/geometry-api-java
>
> On Tue, Sep 13, 2016 at 10:36 PM Jim Hughes <jn...@ccri.com> wrote:
>
> > Hi Aaron,
> >
> > Thanks, wasn't finding that list quickly...
> >
> > It sounds like the GeoMesa/GeoTools usage might fall under this Q/A:
> > http://www.apache.org/legal/resolved.html#optional.
> >
> > Thoughts?
> >
> > Jim
> >
> > On 9/13/2016 9:25 PM, Aaron D. Mihalik wrote:
> > > Jim,
> > >
> > > We've been working off of these lists:
> > >
> > > http://www.apache.org/legal/resolved.html#category-a
> > >
> > > On Tue, Sep 13, 2016 at 6:07 PM Jim Hughes <jn...@ccri.com> wrote:
> > >
> > >> Hi David,
> > >>
> > >> A number of the geo-dependencies are likely from the geo-indexing
> (which
> > >> uses GeoMesa (Apache 2.0) which uses GeoTools and JTS).
> > >>
> > >> Are there options to make the geoindexing a profile, provide the
> source,
> > >> and not provide artifacts for that code at Apache?
> > >>
> > >> Also, is there a list of approved licenses for Apache projects
> > >> dependencies?
> > >>
> > >> Cheers,
> > >>
> > >> Jim
> > >>
> > >> On 09/13/2016 05:46 PM, David Lotts wrote:
> > >>> This issue is a release blocker:
> > >>> <https://issues.apache.org/jira/browse/RYA-179>
> > >>>
> > >>> RYA-179 <https://issues.apache.org/jira/browse/RYA-179> Review
> > License /
> > >>> Copyright notices on Rya Artifacts
> > >>>
> > >>> I was able to create a 3rd party dependency license report for Rya
> > >>> from the license
> > >>> maven plugin.
> > >>> <http://www.mojohaus.org/license-maven-plugin/>
> > >>>
> > >>> Good: I can send the full list if you like.  Mostly ASL and clearly
> > >>> permitted.
> > >>>
> > >>> Okay: A number of CDDL and CPL licenses -- permitted if no source
> code
> > is
> > >>> included.
> > >>>
> > >>> Needs Improvement: The following are not clearly permitted licenses:
> > >>>
> > >>>        (cern.colt MIT license see
> > >>> https://dst.lbl.gov/ACSSoftware/colt/license.html) colt
> > >> (colt:colt:1.2.0 -
> > >>> no url defined)
> > >>>            -- this is a mistake, should be  java.util.Arrays, not
> > >>> cern.colt.Arrays  -- creating an issue to eliminate dependency.
> > >>>        (GNU LESSER GENERAL PUBLIC LICENSE) JCalendar
> > >>> (com.toedter:jcalendar:1.1.4 - http://www.toedter.com/en/jcalendar/)
> > >>>        (Lesser General Public License (LGPL)) JTS Topology Suite
> > >>> (com.vividsolutions:jts:1.13 -
> > >>> http://sourceforge.net/projects/jts-topo-suite)
> > >>>        (Lesser General Public License (LGPL)) Image I/O-Extensions -
> > >> GeoCore
> > >>> (it.geosolutions.imageio-ext:imageio-ext-geocore:1.1.13 - no url
> > defined)
> > >>>        (Lesser General Public License (LGPL)) Image I/O-Extensions -
> > >> Custom
> > >>> Streams (it.geosolutions.imageio-ext:imageio-ext-streams:1.1.13 - no
> > url
> > >>> defined)
> > >>>        (Lesser General Public License (LGPL)) Improved TIFF Plugin
> > >>> (it.geosolutions.imageio-ext:imageio-ext-tiff:1.1.13 - no url
> defined)
> > >>>        (Lesser General Public License (LGPL)) Image I/O-Extensions -
> > >>> utilities classes and methods
> > >>> (it.geosolutions.imageio-ext:imageio-ext-utilities:1.1.13 - no url
> > >> defined)
> > >>>        (Unknown license) jai_codec (javax.media:jai_codec:1.1.3 - no
> > url
> > >>> defined)
> > >>>        (Unknown license) jai_core (javax.media:jai_core:1.1.3 - no
> url
> > >>> defined)
> > >>>        (Unknown license) jai_imageio (javax.media:jai_imageio:1.1 -
> no
> > url
> > >>> defined)
> > >>>        (Unknown license) jgridshift (jgridshift:jgridshift:1.0 - no
> url
> > >>> defined)
> > >>>        (GNU Lesser General Public License) Remote Tea Runtime
> > >>> (org.acplt:oncrpc:1.0.7 - http://remotetea.sourceforge.net/)
> > >>>        (Unknown license) Antlr 3.4 Runtime
> > (org.antlr:antlr-runtime:3.4 -
> > >>> http://www.antlr.org)
> > >>>        (Unknown license) Jettison (org.codehaus.jettison:
> jettison:1.1
> > - no
> > >>> url defined)
> > >>>        (Lesser General Public License (LGPL)) API interfaces
> > >>> (org.geotools:gt-api:14.3 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) Grid Coverage module
> > >>> (org.geotools:gt-coverage:14.3 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) OGC CQL to Filter
> parser
> > >>> (org.geotools:gt-cql:14.1 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) DataStore Support
> > >>> (org.geotools:gt-data:14.1 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) Feature Based Graphs
> and
> > >>> Networks (org.geotools:gt-graph:14.3 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) Vector grids
> > >>> (org.geotools:gt-grid:14.1 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) Main module
> > >>> (org.geotools:gt-main:14.1 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) Metadata
> > >>> (org.geotools:gt-metadata:14.1 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) (OGC copyright) Open
> GIS
> > >>> Interfaces (org.geotools:gt-opengis:14.1 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) Process
> > >>> (org.geotools:gt-process:14.1 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) Process Feature
> > >>> (org.geotools:gt-process-feature:14.1 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) Referencing services
> > >>> (org.geotools:gt-referencing:14.3 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) Render
> > >>> (org.geotools:gt-render:14.1 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) Shapefile module
> > >>> (org.geotools:gt-shapefile:14.1 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) Feature transforming
> > feature
> > >>> source wrapper (org.geotools:gt-transform:14.1 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) XML Parsing
> > >>> (org.geotools.xsd:gt-xsd-core:14.3 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) GML2 XML Support
> > >>> (org.geotools.xsd:gt-xsd-gml2:14.3 - no url defined)
> > >>>        (Lesser General Public License (LGPL)) GML3 XML Support
> > >>> (org.geotools.xsd:gt-xsd-gml3:14.3 - no url defined)
> > >>>
> > >>> david.
> > >>>
> > >>
> >
> >
>

Re: RYA-179 Review License / Copyright notices on Rya Artifacts

Posted by "Aaron D. Mihalik" <aa...@gmail.com>.

Yeah, that sounds possible. I don't like the idea of having to maintain
another build/ci/release process, though.

More importantly, we'd also have to modify our GeoIndexer interface [1] to
something Apache Friendly.  It looks like Ersi puts out an Apache 2.0
library [2].

[1]
https://github.com/apache/incubator-rya/blob/master/extras/indexing/src/main/java/mvm/rya/indexing/GeoIndexer.java
[2] https://github.com/Esri/geometry-api-java

On Tue, Sep 13, 2016 at 10:36 PM Jim Hughes <jn...@ccri.com> wrote:

> Hi Aaron,
>
> Thanks, wasn't finding that list quickly...
>
> It sounds like the GeoMesa/GeoTools usage might fall under this Q/A:
> http://www.apache.org/legal/resolved.html#optional.
>
> Thoughts?
>
> Jim
>
> On 9/13/2016 9:25 PM, Aaron D. Mihalik wrote:
> > Jim,
> >
> > We've been working off of these lists:
> >
> > http://www.apache.org/legal/resolved.html#category-a
> >
> > On Tue, Sep 13, 2016 at 6:07 PM Jim Hughes <jn...@ccri.com> wrote:
> >
> >> Hi David,
> >>
> >> A number of the geo-dependencies are likely from the geo-indexing (which
> >> uses GeoMesa (Apache 2.0) which uses GeoTools and JTS).
> >>
> >> Are there options to make the geoindexing a profile, provide the source,
> >> and not provide artifacts for that code at Apache?
> >>
> >> Also, is there a list of approved licenses for Apache projects
> >> dependencies?
> >>
> >> Cheers,
> >>
> >> Jim
> >>
> >> On 09/13/2016 05:46 PM, David Lotts wrote:
> >>> This issue is a release blocker:
> >>> <https://issues.apache.org/jira/browse/RYA-179>
> >>>
> >>> RYA-179 <https://issues.apache.org/jira/browse/RYA-179> Review
> License /
> >>> Copyright notices on Rya Artifacts
> >>>
> >>> I was able to create a 3rd party dependency license report for Rya
> >>> from the license
> >>> maven plugin.
> >>> <http://www.mojohaus.org/license-maven-plugin/>
> >>>
> >>> Good: I can send the full list if you like.  Mostly ASL and clearly
> >>> permitted.
> >>>
> >>> Okay: A number of CDDL and CPL licenses -- permitted if no source code
> is
> >>> included.
> >>>
> >>> Needs Improvement: The following are not clearly permitted licenses:
> >>>
> >>>        (cern.colt MIT license see
> >>> https://dst.lbl.gov/ACSSoftware/colt/license.html) colt
> >> (colt:colt:1.2.0 -
> >>> no url defined)
> >>>            -- this is a mistake, should be  java.util.Arrays, not
> >>> cern.colt.Arrays  -- creating an issue to eliminate dependency.
> >>>        (GNU LESSER GENERAL PUBLIC LICENSE) JCalendar
> >>> (com.toedter:jcalendar:1.1.4 - http://www.toedter.com/en/jcalendar/)
> >>>        (Lesser General Public License (LGPL)) JTS Topology Suite
> >>> (com.vividsolutions:jts:1.13 -
> >>> http://sourceforge.net/projects/jts-topo-suite)
> >>>        (Lesser General Public License (LGPL)) Image I/O-Extensions -
> >> GeoCore
> >>> (it.geosolutions.imageio-ext:imageio-ext-geocore:1.1.13 - no url
> defined)
> >>>        (Lesser General Public License (LGPL)) Image I/O-Extensions -
> >> Custom
> >>> Streams (it.geosolutions.imageio-ext:imageio-ext-streams:1.1.13 - no
> url
> >>> defined)
> >>>        (Lesser General Public License (LGPL)) Improved TIFF Plugin
> >>> (it.geosolutions.imageio-ext:imageio-ext-tiff:1.1.13 - no url defined)
> >>>        (Lesser General Public License (LGPL)) Image I/O-Extensions -
> >>> utilities classes and methods
> >>> (it.geosolutions.imageio-ext:imageio-ext-utilities:1.1.13 - no url
> >> defined)
> >>>        (Unknown license) jai_codec (javax.media:jai_codec:1.1.3 - no
> url
> >>> defined)
> >>>        (Unknown license) jai_core (javax.media:jai_core:1.1.3 - no url
> >>> defined)
> >>>        (Unknown license) jai_imageio (javax.media:jai_imageio:1.1 - no
> url
> >>> defined)
> >>>        (Unknown license) jgridshift (jgridshift:jgridshift:1.0 - no url
> >>> defined)
> >>>        (GNU Lesser General Public License) Remote Tea Runtime
> >>> (org.acplt:oncrpc:1.0.7 - http://remotetea.sourceforge.net/)
> >>>        (Unknown license) Antlr 3.4 Runtime
> (org.antlr:antlr-runtime:3.4 -
> >>> http://www.antlr.org)
> >>>        (Unknown license) Jettison (org.codehaus.jettison:jettison:1.1
> - no
> >>> url defined)
> >>>        (Lesser General Public License (LGPL)) API interfaces
> >>> (org.geotools:gt-api:14.3 - no url defined)
> >>>        (Lesser General Public License (LGPL)) Grid Coverage module
> >>> (org.geotools:gt-coverage:14.3 - no url defined)
> >>>        (Lesser General Public License (LGPL)) OGC CQL to Filter parser
> >>> (org.geotools:gt-cql:14.1 - no url defined)
> >>>        (Lesser General Public License (LGPL)) DataStore Support
> >>> (org.geotools:gt-data:14.1 - no url defined)
> >>>        (Lesser General Public License (LGPL)) Feature Based Graphs and
> >>> Networks (org.geotools:gt-graph:14.3 - no url defined)
> >>>        (Lesser General Public License (LGPL)) Vector grids
> >>> (org.geotools:gt-grid:14.1 - no url defined)
> >>>        (Lesser General Public License (LGPL)) Main module
> >>> (org.geotools:gt-main:14.1 - no url defined)
> >>>        (Lesser General Public License (LGPL)) Metadata
> >>> (org.geotools:gt-metadata:14.1 - no url defined)
> >>>        (Lesser General Public License (LGPL)) (OGC copyright) Open GIS
> >>> Interfaces (org.geotools:gt-opengis:14.1 - no url defined)
> >>>        (Lesser General Public License (LGPL)) Process
> >>> (org.geotools:gt-process:14.1 - no url defined)
> >>>        (Lesser General Public License (LGPL)) Process Feature
> >>> (org.geotools:gt-process-feature:14.1 - no url defined)
> >>>        (Lesser General Public License (LGPL)) Referencing services
> >>> (org.geotools:gt-referencing:14.3 - no url defined)
> >>>        (Lesser General Public License (LGPL)) Render
> >>> (org.geotools:gt-render:14.1 - no url defined)
> >>>        (Lesser General Public License (LGPL)) Shapefile module
> >>> (org.geotools:gt-shapefile:14.1 - no url defined)
> >>>        (Lesser General Public License (LGPL)) Feature transforming
> feature
> >>> source wrapper (org.geotools:gt-transform:14.1 - no url defined)
> >>>        (Lesser General Public License (LGPL)) XML Parsing
> >>> (org.geotools.xsd:gt-xsd-core:14.3 - no url defined)
> >>>        (Lesser General Public License (LGPL)) GML2 XML Support
> >>> (org.geotools.xsd:gt-xsd-gml2:14.3 - no url defined)
> >>>        (Lesser General Public License (LGPL)) GML3 XML Support
> >>> (org.geotools.xsd:gt-xsd-gml3:14.3 - no url defined)
> >>>
> >>> david.
> >>>
> >>
>
>

Re: RYA-179 Review License / Copyright notices on Rya Artifacts

Posted by Jim Hughes <jn...@ccri.com>.

Hi Aaron,

Thanks, wasn't finding that list quickly...

It sounds like the GeoMesa/GeoTools usage might fall under this Q/A: 
http://www.apache.org/legal/resolved.html#optional.

Thoughts?

Jim

On 9/13/2016 9:25 PM, Aaron D. Mihalik wrote:
> Jim,
>
> We've been working off of these lists:
>
> http://www.apache.org/legal/resolved.html#category-a
>
> On Tue, Sep 13, 2016 at 6:07 PM Jim Hughes <jn...@ccri.com> wrote:
>
>> Hi David,
>>
>> A number of the geo-dependencies are likely from the geo-indexing (which
>> uses GeoMesa (Apache 2.0) which uses GeoTools and JTS).
>>
>> Are there options to make the geoindexing a profile, provide the source,
>> and not provide artifacts for that code at Apache?
>>
>> Also, is there a list of approved licenses for Apache projects
>> dependencies?
>>
>> Cheers,
>>
>> Jim
>>
>> On 09/13/2016 05:46 PM, David Lotts wrote:
>>> This issue is a release blocker:
>>> <https://issues.apache.org/jira/browse/RYA-179>
>>>
>>> RYA-179 <https://issues.apache.org/jira/browse/RYA-179> Review License /
>>> Copyright notices on Rya Artifacts
>>>
>>> I was able to create a 3rd party dependency license report for Rya
>>> from the license
>>> maven plugin.
>>> <http://www.mojohaus.org/license-maven-plugin/>
>>>
>>> Good: I can send the full list if you like.  Mostly ASL and clearly
>>> permitted.
>>>
>>> Okay: A number of CDDL and CPL licenses -- permitted if no source code is
>>> included.
>>>
>>> Needs Improvement: The following are not clearly permitted licenses:
>>>
>>>        (cern.colt MIT license see
>>> https://dst.lbl.gov/ACSSoftware/colt/license.html) colt
>> (colt:colt:1.2.0 -
>>> no url defined)
>>>            -- this is a mistake, should be  java.util.Arrays, not
>>> cern.colt.Arrays  -- creating an issue to eliminate dependency.
>>>        (GNU LESSER GENERAL PUBLIC LICENSE) JCalendar
>>> (com.toedter:jcalendar:1.1.4 - http://www.toedter.com/en/jcalendar/)
>>>        (Lesser General Public License (LGPL)) JTS Topology Suite
>>> (com.vividsolutions:jts:1.13 -
>>> http://sourceforge.net/projects/jts-topo-suite)
>>>        (Lesser General Public License (LGPL)) Image I/O-Extensions -
>> GeoCore
>>> (it.geosolutions.imageio-ext:imageio-ext-geocore:1.1.13 - no url defined)
>>>        (Lesser General Public License (LGPL)) Image I/O-Extensions -
>> Custom
>>> Streams (it.geosolutions.imageio-ext:imageio-ext-streams:1.1.13 - no url
>>> defined)
>>>        (Lesser General Public License (LGPL)) Improved TIFF Plugin
>>> (it.geosolutions.imageio-ext:imageio-ext-tiff:1.1.13 - no url defined)
>>>        (Lesser General Public License (LGPL)) Image I/O-Extensions -
>>> utilities classes and methods
>>> (it.geosolutions.imageio-ext:imageio-ext-utilities:1.1.13 - no url
>> defined)
>>>        (Unknown license) jai_codec (javax.media:jai_codec:1.1.3 - no url
>>> defined)
>>>        (Unknown license) jai_core (javax.media:jai_core:1.1.3 - no url
>>> defined)
>>>        (Unknown license) jai_imageio (javax.media:jai_imageio:1.1 - no url
>>> defined)
>>>        (Unknown license) jgridshift (jgridshift:jgridshift:1.0 - no url
>>> defined)
>>>        (GNU Lesser General Public License) Remote Tea Runtime
>>> (org.acplt:oncrpc:1.0.7 - http://remotetea.sourceforge.net/)
>>>        (Unknown license) Antlr 3.4 Runtime (org.antlr:antlr-runtime:3.4 -
>>> http://www.antlr.org)
>>>        (Unknown license) Jettison (org.codehaus.jettison:jettison:1.1 - no
>>> url defined)
>>>        (Lesser General Public License (LGPL)) API interfaces
>>> (org.geotools:gt-api:14.3 - no url defined)
>>>        (Lesser General Public License (LGPL)) Grid Coverage module
>>> (org.geotools:gt-coverage:14.3 - no url defined)
>>>        (Lesser General Public License (LGPL)) OGC CQL to Filter parser
>>> (org.geotools:gt-cql:14.1 - no url defined)
>>>        (Lesser General Public License (LGPL)) DataStore Support
>>> (org.geotools:gt-data:14.1 - no url defined)
>>>        (Lesser General Public License (LGPL)) Feature Based Graphs and
>>> Networks (org.geotools:gt-graph:14.3 - no url defined)
>>>        (Lesser General Public License (LGPL)) Vector grids
>>> (org.geotools:gt-grid:14.1 - no url defined)
>>>        (Lesser General Public License (LGPL)) Main module
>>> (org.geotools:gt-main:14.1 - no url defined)
>>>        (Lesser General Public License (LGPL)) Metadata
>>> (org.geotools:gt-metadata:14.1 - no url defined)
>>>        (Lesser General Public License (LGPL)) (OGC copyright) Open GIS
>>> Interfaces (org.geotools:gt-opengis:14.1 - no url defined)
>>>        (Lesser General Public License (LGPL)) Process
>>> (org.geotools:gt-process:14.1 - no url defined)
>>>        (Lesser General Public License (LGPL)) Process Feature
>>> (org.geotools:gt-process-feature:14.1 - no url defined)
>>>        (Lesser General Public License (LGPL)) Referencing services
>>> (org.geotools:gt-referencing:14.3 - no url defined)
>>>        (Lesser General Public License (LGPL)) Render
>>> (org.geotools:gt-render:14.1 - no url defined)
>>>        (Lesser General Public License (LGPL)) Shapefile module
>>> (org.geotools:gt-shapefile:14.1 - no url defined)
>>>        (Lesser General Public License (LGPL)) Feature transforming feature
>>> source wrapper (org.geotools:gt-transform:14.1 - no url defined)
>>>        (Lesser General Public License (LGPL)) XML Parsing
>>> (org.geotools.xsd:gt-xsd-core:14.3 - no url defined)
>>>        (Lesser General Public License (LGPL)) GML2 XML Support
>>> (org.geotools.xsd:gt-xsd-gml2:14.3 - no url defined)
>>>        (Lesser General Public License (LGPL)) GML3 XML Support
>>> (org.geotools.xsd:gt-xsd-gml3:14.3 - no url defined)
>>>
>>> david.
>>>
>>

Re: RYA-179 Review License / Copyright notices on Rya Artifacts

Posted by "Aaron D. Mihalik" <aa...@gmail.com>.

Jim,

We've been working off of these lists:

http://www.apache.org/legal/resolved.html#category-a

On Tue, Sep 13, 2016 at 6:07 PM Jim Hughes <jn...@ccri.com> wrote:

> Hi David,
>
> A number of the geo-dependencies are likely from the geo-indexing (which
> uses GeoMesa (Apache 2.0) which uses GeoTools and JTS).
>
> Are there options to make the geoindexing a profile, provide the source,
> and not provide artifacts for that code at Apache?
>
> Also, is there a list of approved licenses for Apache projects
> dependencies?
>
> Cheers,
>
> Jim
>
> On 09/13/2016 05:46 PM, David Lotts wrote:
> > This issue is a release blocker:
> > <https://issues.apache.org/jira/browse/RYA-179>
> >
> > RYA-179 <https://issues.apache.org/jira/browse/RYA-179> Review License /
> > Copyright notices on Rya Artifacts
> >
> > I was able to create a 3rd party dependency license report for Rya
> > from the license
> > maven plugin.
> > <http://www.mojohaus.org/license-maven-plugin/>
> >
> > Good: I can send the full list if you like.  Mostly ASL and clearly
> > permitted.
> >
> > Okay: A number of CDDL and CPL licenses -- permitted if no source code is
> > included.
> >
> > Needs Improvement: The following are not clearly permitted licenses:
> >
> >       (cern.colt MIT license see
> > https://dst.lbl.gov/ACSSoftware/colt/license.html) colt
> (colt:colt:1.2.0 -
> > no url defined)
> >           -- this is a mistake, should be  java.util.Arrays, not
> > cern.colt.Arrays  -- creating an issue to eliminate dependency.
> >       (GNU LESSER GENERAL PUBLIC LICENSE) JCalendar
> > (com.toedter:jcalendar:1.1.4 - http://www.toedter.com/en/jcalendar/)
> >       (Lesser General Public License (LGPL)) JTS Topology Suite
> > (com.vividsolutions:jts:1.13 -
> > http://sourceforge.net/projects/jts-topo-suite)
> >       (Lesser General Public License (LGPL)) Image I/O-Extensions -
> GeoCore
> > (it.geosolutions.imageio-ext:imageio-ext-geocore:1.1.13 - no url defined)
> >       (Lesser General Public License (LGPL)) Image I/O-Extensions -
> Custom
> > Streams (it.geosolutions.imageio-ext:imageio-ext-streams:1.1.13 - no url
> > defined)
> >       (Lesser General Public License (LGPL)) Improved TIFF Plugin
> > (it.geosolutions.imageio-ext:imageio-ext-tiff:1.1.13 - no url defined)
> >       (Lesser General Public License (LGPL)) Image I/O-Extensions -
> > utilities classes and methods
> > (it.geosolutions.imageio-ext:imageio-ext-utilities:1.1.13 - no url
> defined)
> >       (Unknown license) jai_codec (javax.media:jai_codec:1.1.3 - no url
> > defined)
> >       (Unknown license) jai_core (javax.media:jai_core:1.1.3 - no url
> > defined)
> >       (Unknown license) jai_imageio (javax.media:jai_imageio:1.1 - no url
> > defined)
> >       (Unknown license) jgridshift (jgridshift:jgridshift:1.0 - no url
> > defined)
> >       (GNU Lesser General Public License) Remote Tea Runtime
> > (org.acplt:oncrpc:1.0.7 - http://remotetea.sourceforge.net/)
> >       (Unknown license) Antlr 3.4 Runtime (org.antlr:antlr-runtime:3.4 -
> > http://www.antlr.org)
> >       (Unknown license) Jettison (org.codehaus.jettison:jettison:1.1 - no
> > url defined)
> >       (Lesser General Public License (LGPL)) API interfaces
> > (org.geotools:gt-api:14.3 - no url defined)
> >       (Lesser General Public License (LGPL)) Grid Coverage module
> > (org.geotools:gt-coverage:14.3 - no url defined)
> >       (Lesser General Public License (LGPL)) OGC CQL to Filter parser
> > (org.geotools:gt-cql:14.1 - no url defined)
> >       (Lesser General Public License (LGPL)) DataStore Support
> > (org.geotools:gt-data:14.1 - no url defined)
> >       (Lesser General Public License (LGPL)) Feature Based Graphs and
> > Networks (org.geotools:gt-graph:14.3 - no url defined)
> >       (Lesser General Public License (LGPL)) Vector grids
> > (org.geotools:gt-grid:14.1 - no url defined)
> >       (Lesser General Public License (LGPL)) Main module
> > (org.geotools:gt-main:14.1 - no url defined)
> >       (Lesser General Public License (LGPL)) Metadata
> > (org.geotools:gt-metadata:14.1 - no url defined)
> >       (Lesser General Public License (LGPL)) (OGC copyright) Open GIS
> > Interfaces (org.geotools:gt-opengis:14.1 - no url defined)
> >       (Lesser General Public License (LGPL)) Process
> > (org.geotools:gt-process:14.1 - no url defined)
> >       (Lesser General Public License (LGPL)) Process Feature
> > (org.geotools:gt-process-feature:14.1 - no url defined)
> >       (Lesser General Public License (LGPL)) Referencing services
> > (org.geotools:gt-referencing:14.3 - no url defined)
> >       (Lesser General Public License (LGPL)) Render
> > (org.geotools:gt-render:14.1 - no url defined)
> >       (Lesser General Public License (LGPL)) Shapefile module
> > (org.geotools:gt-shapefile:14.1 - no url defined)
> >       (Lesser General Public License (LGPL)) Feature transforming feature
> > source wrapper (org.geotools:gt-transform:14.1 - no url defined)
> >       (Lesser General Public License (LGPL)) XML Parsing
> > (org.geotools.xsd:gt-xsd-core:14.3 - no url defined)
> >       (Lesser General Public License (LGPL)) GML2 XML Support
> > (org.geotools.xsd:gt-xsd-gml2:14.3 - no url defined)
> >       (Lesser General Public License (LGPL)) GML3 XML Support
> > (org.geotools.xsd:gt-xsd-gml3:14.3 - no url defined)
> >
> > david.
> >
>
>

Re: RYA-179 Review License / Copyright notices on Rya Artifacts

Posted by Jim Hughes <jn...@ccri.com>.

Hi David,

A number of the geo-dependencies are likely from the geo-indexing (which 
uses GeoMesa (Apache 2.0) which uses GeoTools and JTS).

Are there options to make the geoindexing a profile, provide the source, 
and not provide artifacts for that code at Apache?

Also, is there a list of approved licenses for Apache projects dependencies?

Cheers,

Jim

On 09/13/2016 05:46 PM, David Lotts wrote:
> This issue is a release blocker:
> <https://issues.apache.org/jira/browse/RYA-179>
>
> RYA-179 <https://issues.apache.org/jira/browse/RYA-179> Review License /
> Copyright notices on Rya Artifacts
>
> I was able to create a 3rd party dependency license report for Rya
> from the license
> maven plugin.
> <http://www.mojohaus.org/license-maven-plugin/>
>
> Good: I can send the full list if you like.  Mostly ASL and clearly
> permitted.
>
> Okay: A number of CDDL and CPL licenses -- permitted if no source code is
> included.
>
> Needs Improvement: The following are not clearly permitted licenses:
>
>       (cern.colt MIT license see
> https://dst.lbl.gov/ACSSoftware/colt/license.html) colt (colt:colt:1.2.0 -
> no url defined)
>           -- this is a mistake, should be  java.util.Arrays, not
> cern.colt.Arrays  -- creating an issue to eliminate dependency.
>       (GNU LESSER GENERAL PUBLIC LICENSE) JCalendar
> (com.toedter:jcalendar:1.1.4 - http://www.toedter.com/en/jcalendar/)
>       (Lesser General Public License (LGPL)) JTS Topology Suite
> (com.vividsolutions:jts:1.13 -
> http://sourceforge.net/projects/jts-topo-suite)
>       (Lesser General Public License (LGPL)) Image I/O-Extensions - GeoCore
> (it.geosolutions.imageio-ext:imageio-ext-geocore:1.1.13 - no url defined)
>       (Lesser General Public License (LGPL)) Image I/O-Extensions - Custom
> Streams (it.geosolutions.imageio-ext:imageio-ext-streams:1.1.13 - no url
> defined)
>       (Lesser General Public License (LGPL)) Improved TIFF Plugin
> (it.geosolutions.imageio-ext:imageio-ext-tiff:1.1.13 - no url defined)
>       (Lesser General Public License (LGPL)) Image I/O-Extensions -
> utilities classes and methods
> (it.geosolutions.imageio-ext:imageio-ext-utilities:1.1.13 - no url defined)
>       (Unknown license) jai_codec (javax.media:jai_codec:1.1.3 - no url
> defined)
>       (Unknown license) jai_core (javax.media:jai_core:1.1.3 - no url
> defined)
>       (Unknown license) jai_imageio (javax.media:jai_imageio:1.1 - no url
> defined)
>       (Unknown license) jgridshift (jgridshift:jgridshift:1.0 - no url
> defined)
>       (GNU Lesser General Public License) Remote Tea Runtime
> (org.acplt:oncrpc:1.0.7 - http://remotetea.sourceforge.net/)
>       (Unknown license) Antlr 3.4 Runtime (org.antlr:antlr-runtime:3.4 -
> http://www.antlr.org)
>       (Unknown license) Jettison (org.codehaus.jettison:jettison:1.1 - no
> url defined)
>       (Lesser General Public License (LGPL)) API interfaces
> (org.geotools:gt-api:14.3 - no url defined)
>       (Lesser General Public License (LGPL)) Grid Coverage module
> (org.geotools:gt-coverage:14.3 - no url defined)
>       (Lesser General Public License (LGPL)) OGC CQL to Filter parser
> (org.geotools:gt-cql:14.1 - no url defined)
>       (Lesser General Public License (LGPL)) DataStore Support
> (org.geotools:gt-data:14.1 - no url defined)
>       (Lesser General Public License (LGPL)) Feature Based Graphs and
> Networks (org.geotools:gt-graph:14.3 - no url defined)
>       (Lesser General Public License (LGPL)) Vector grids
> (org.geotools:gt-grid:14.1 - no url defined)
>       (Lesser General Public License (LGPL)) Main module
> (org.geotools:gt-main:14.1 - no url defined)
>       (Lesser General Public License (LGPL)) Metadata
> (org.geotools:gt-metadata:14.1 - no url defined)
>       (Lesser General Public License (LGPL)) (OGC copyright) Open GIS
> Interfaces (org.geotools:gt-opengis:14.1 - no url defined)
>       (Lesser General Public License (LGPL)) Process
> (org.geotools:gt-process:14.1 - no url defined)
>       (Lesser General Public License (LGPL)) Process Feature
> (org.geotools:gt-process-feature:14.1 - no url defined)
>       (Lesser General Public License (LGPL)) Referencing services
> (org.geotools:gt-referencing:14.3 - no url defined)
>       (Lesser General Public License (LGPL)) Render
> (org.geotools:gt-render:14.1 - no url defined)
>       (Lesser General Public License (LGPL)) Shapefile module
> (org.geotools:gt-shapefile:14.1 - no url defined)
>       (Lesser General Public License (LGPL)) Feature transforming feature
> source wrapper (org.geotools:gt-transform:14.1 - no url defined)
>       (Lesser General Public License (LGPL)) XML Parsing
> (org.geotools.xsd:gt-xsd-core:14.3 - no url defined)
>       (Lesser General Public License (LGPL)) GML2 XML Support
> (org.geotools.xsd:gt-xsd-gml2:14.3 - no url defined)
>       (Lesser General Public License (LGPL)) GML3 XML Support
> (org.geotools.xsd:gt-xsd-gml3:14.3 - no url defined)
>
> david.
>