Interesting question on SO

["Murphy, Mark" <mu...@metalexmfg.com>]

http://stackoverflow.com/questions/40723370/was-opensagres-allowed-to-use-apache-poi-like-packages

Does ASF defend its package names, or do we just ignore these kinds of things and folks use them at their own peril?

Re: Interesting question on SO

[Javen O'Neal <on...@apache.org>]

Thanks. We've got this in hand.

On Nov 21, 2016 7:14 PM, "Javen O'Neal" <on...@apache.org> wrote:

> Looks like there is at least one other non-Apache package using the
> org.apache.poi namespace. [1]
>
> I would approach this from a friendly direction first.
>
> I'm assuming they needed an o.a.p namespace so they would have access to
> protected and package-private methods and variables. The alternative is to
> fork POI and elevate the visibility of the classes, functions, and
> variables that they need to access. The disadvantage of a forked project is
> high overhead to keep it synchronized with the upstream project. This would
> be messy if another
>
> I like the idea of reaching out to these developers to see if they're
> willing to donate some of their code under ASL 2.0. I'm guessing most of
> this would be elevating visibility of private, package-private, and
> protected methods, as well as adding some getters and setters. Other
> changes would be adding a converters interface that they could implent or
> extend.
>
> Obviously we aren't interested in code that cannot be ASL 2.0 licensed,
> such as the iTextPdf dependency.
>
> The goal would be to allow these projects to use their own namespace
> without needing to maintain a fork of POI.
>
> [1] http://search.maven.org/#search%7Cga%7C1%7Corg.apache.poi
>
> On Nov 21, 2016 14:57, "Nick Burch" <ap...@gagravarr.org> wrote:
>
>> On Mon, 21 Nov 2016, Murphy, Mark wrote:
>>
>>> http://stackoverflow.com/questions/40723370/was-opensagres-a
>>> llowed-to-use-apache-poi-like-packages
>>>
>>> Does ASF defend its package names, or do we just ignore these kinds of
>>> things and folks use them at their own peril?
>>>
>>
>> I had a quick look at http://apache.org/foundation/marks/ but couldn't
>> see anything there about java or maven package names. I have a feeling
>> there is something somewhere that I saw a few years ago...
>>
>> If you have a bit of time, would you mind asking on trademarks@ [1] for
>> advice / pointers?
>>
>> Nick
>>
>> [1] http://www.apache.org/foundation/marks/contact
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@poi.apache.org
>> For additional commands, e-mail: dev-help@poi.apache.org
>>
>>

Re: Interesting question on SO

[Javen O'Neal <on...@apache.org>]

Looks like there is at least one other non-Apache package using the
org.apache.poi namespace. [1]

I would approach this from a friendly direction first.

I'm assuming they needed an o.a.p namespace so they would have access to
protected and package-private methods and variables. The alternative is to
fork POI and elevate the visibility of the classes, functions, and
variables that they need to access. The disadvantage of a forked project is
high overhead to keep it synchronized with the upstream project. This would
be messy if another

I like the idea of reaching out to these developers to see if they're
willing to donate some of their code under ASL 2.0. I'm guessing most of
this would be elevating visibility of private, package-private, and
protected methods, as well as adding some getters and setters. Other
changes would be adding a converters interface that they could implent or
extend.

Obviously we aren't interested in code that cannot be ASL 2.0 licensed,
such as the iTextPdf dependency.

The goal would be to allow these projects to use their own namespace
without needing to maintain a fork of POI.

[1] http://search.maven.org/#search%7Cga%7C1%7Corg.apache.poi

On Nov 21, 2016 14:57, "Nick Burch" <ap...@gagravarr.org> wrote:

> On Mon, 21 Nov 2016, Murphy, Mark wrote:
>
>> http://stackoverflow.com/questions/40723370/was-opensagres-
>> allowed-to-use-apache-poi-like-packages
>>
>> Does ASF defend its package names, or do we just ignore these kinds of
>> things and folks use them at their own peril?
>>
>
> I had a quick look at http://apache.org/foundation/marks/ but couldn't
> see anything there about java or maven package names. I have a feeling
> there is something somewhere that I saw a few years ago...
>
> If you have a bit of time, would you mind asking on trademarks@ [1] for
> advice / pointers?
>
> Nick
>
> [1] http://www.apache.org/foundation/marks/contact
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@poi.apache.org
> For additional commands, e-mail: dev-help@poi.apache.org
>
>

Re: Interesting question on SO

[Nick Burch <ap...@gagravarr.org>]

On Mon, 21 Nov 2016, Murphy, Mark wrote:
> http://stackoverflow.com/questions/40723370/was-opensagres-allowed-to-use-apache-poi-like-packages
>
> Does ASF defend its package names, or do we just ignore these kinds of 
> things and folks use them at their own peril?

I had a quick look at http://apache.org/foundation/marks/ but couldn't see 
anything there about java or maven package names. I have a feeling there 
is something somewhere that I saw a few years ago...

If you have a bit of time, would you mind asking on trademarks@ [1] for 
advice / pointers?

Nick

[1] http://www.apache.org/foundation/marks/contact

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@poi.apache.org
For additional commands, e-mail: dev-help@poi.apache.org