[jira] [Commented] (AMQ-3491) Investigate and resolve LGPL dependency via camel-web

["Michael Hayes (Commented) (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/AMQ-3491?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13152878#comment-13152878 ] 

Michael Hayes commented on AMQ-3491:
------------------------------------

First I have to say I really appreciate the decisive action on this unfortunate issue - you guys did the right thing.

I have a suggestion for the future (and for all ASF projects, really). 
Would you consider running something like Black Duck Protex or equivalent as part of pre-release testing - to assure users that there are no license incompatability issues? 
Maybe running the checks just for major releases at least?
{color:red}*If every ASF project could access some license-checking tool*{color} (and use it as a pre-release check) it would add great value to the ASF brand - assuring users that *all reasonable steps* have been taken to avoid any licensing difficulties.

                
> Investigate and resolve LGPL dependency via camel-web
> -----------------------------------------------------
>
>                 Key: AMQ-3491
>                 URL: https://issues.apache.org/jira/browse/AMQ-3491
>             Project: ActiveMQ
>          Issue Type: Task
>    Affects Versions: 5.4.0, 5.5.0
>            Reporter: Gary Tully
>            Assignee: Gary Tully
>            Priority: Blocker
>             Fix For: 5.4.3, 5.5.1, 5.6.0
>
>
> May be related to trimmed down distro that uses old camel web.
> see: https://issues.apache.org/jira/browse/AMQ-3329
> ActiveMQ 5.5.0's distro includes Jaffl 0.5.1 which is
> LGPL. I traced this down to the distro containing an unpacked
> camel-web 2.4.0 war, which has several org.jruby:jruby dependencies in
> it. My read is that this is a problem because of:
> http://www.apache.org/legal/resolved#category-x
> I also noted that the distro includes org.jruby.ext.posix:jnr-posix
> which may be LGPL/GPL and also org.jruby.extras:jffi:1.0.1 which
> appears to be LGPL as well.
> The following artifacts have gaffl in them:
> +---------------------+----------------------+---------+
> | groupid             | artifactid           | version |
> +---------------------+----------------------+---------+
> | org.apache.activemq | apache-activemq      | 5.4.2   |
> | org.apache.activemq | apache-activemq      | 5.4.0   |
> | org.apache.activemq | apache-activemq      | 5.4.1   |
> | org.apache.activemq | apache-activemq      | 5.5.0   |
> | org.apache.camel    | camel-web-standalone | 2.4.0   |
> | org.apache.camel    | camel-web            | 2.4.0   |
> +---------------------+----------------------+---------+

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira