You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@openoffice.apache.org by co...@apache.org on 2012/02/20 19:39:00 UTC

[CONF] Apache OpenOffice Community > IP_Clearance

Space: Apache OpenOffice Community (https://cwiki.apache.org/confluence/display/OOOUSERS)
Page: IP_Clearance (https://cwiki.apache.org/confluence/display/OOOUSERS/IP_Clearance)


Edited by Pedro Giffuni:
---------------------------------------------------------------------
h2. IP clearance

The former code base of OpenOffice.org used several external libraries and code with incompatible licenses (see also [Third-Party Licensing Policy|http://www.apache.org/legal/3party.html]) that cannot be longer used in the Apache Open Office project or at least not in the same way. A first overview of critical stuff can be found on the "[Migration|http://wiki.services.openoffice.org/wiki/ApacheMigration]" page in the community wiki. This page is intended to document the ongoing work of the IP clearance in more detail but still high-level.

The process will be redefined and improved over time and in the end we will end up with an automated process using the Apache Release Audit Tool (RAT) to ensure that we have always a clean code base for Apache Open Office.

The licenses are color coded according to their category on [Third-Party Licensing Policy|http://www.apache.org/legal/3party.html]: {highlight:green}[Category A License|http://www.apache.org/legal/3party.html#category-a]{highlight}, {highlight:yellow}[Category B License|http://www.apache.org/legal/3party.html#category-b]
{highlight} and {highlight:red}[Category X License|http://www.apache.org/legal/3party.html#category-x]
{highlight}

Contributors are encouraged to file issues for the intrinsic code changes. [Issue 118566|https://issues.apache.org/ooo/show_bug.cgi?id=118566] exists as a parent issue for the 3rd party component removal tasks. Please add such issues as blocking issues to [issue 118566|https://issues.apache.org/ooo/show_bug.cgi?id=118566].

The impact of removed or replaced libraries to the released OpenOffice is detailed [here|IP_Clearance Impact].

|| Priority || Task || Impact || Migration Path || Details, Comments || Relevant libraries \\
and licenses || Volunteers, \\
Status ||
| 1 | Clarify legal usage of Category B (eg MPL) libraries | relevant for many critical libs | If allowed, upstream patches where possible and use binaries| Binary builds of libraries can be shipped with binary release of AOO.
Source code of libraries can remain on an Apache server but (like ext_sources of old OOo.)\\  BUT
- source code of libraries is not shipped in a source release of AOO
- instead it can be downloaded and built during bootstrap, but only when developer uses a configure option that is off by default | |{bgcolor:green}Done{bgcolor} |
| | Clarify usage of GNU cp, GNU patch, -GNU tar- | Used during the build process | Native CP | Searching the mailing list archive reveals that GNU cp is a prerequisite for the FreeBSD's port. \\  \\
No problem regarding IP clearance - see [ooo-dev post|http://mail-archives.apache.org/mod_mbox/incubator-ooo-dev/201110.mbox/%3CCAKTa1mgJF0v2UjUn6kgx=_HKXwt6FjBCHw8cqUGeCZX-uHt6SA@mail.gmail.com%3E]. It is only used during the build. \\  \\
In the long-run we should get rid of its usage. | | pfg, [orw|mailto:orwittmann@googlemail.com] \\  {highlight:green} Solved {highlight} Some work was done to mitigate the issue on BSD. |
| | List of files where it seems that the copyright owner is not Oracle \\
but the license probably is compatible with the ASL - [http://ooo-wiki.apache.org/wiki/ApacheMigration/Permissive]\\ | | NOTICE file | clarify status of these files \\
See wiki – ApacheMigration | | {bgcolor:green}Done{bgcolor} but it would be good to check thirdpartylicense.html |
| | List of files where it seems that the copyright owner is not Oracle \\
but the license probably is _not_ compatible with the ASL - [http://ooo-wiki.apache.org/wiki/ApacheMigration/GPL]\\ | | libegg removed. autoconf stuff is OK'd by legal. | clarify status of these files \\
See wiki ApacheMigration | | {bgcolor:green}Done{bgcolor} AF may review |
| 1 | Regexp | Required for all searches in Writer/Calc/Impress/Help | ICU regexp | A heavily modified LGPL regexp library was replaced by ICU regexp | | HDU \\  {highlight:green} Done {highlight} |
| 1 | dmake | Used during the build. | Use as an external package until we replace it with system gmake. | moving outside trunk SVN directory. Thus, everything under trunk can be our source release | main/dmake \\  {bgcolor:red}GPL{bgcolor} |  {bgcolor:green}af: done - [118604|https://issues.apache.org/ooo/show_bug.cgi?id=118604]{bgcolor} |
| 1 | translations | Essential for localization | None | Are these included in SGA? \\
They are now part of the SGA, see [oracle-sga-2-txt|http://svn.apache.org/viewvc/incubator/ooo/pmc/ip-review/oracle-sga-2.txt?view=markup] | | {bgcolor:green}jsc: done{bgcolor} |
| 1 | Clarify usage of boost | Used all over the place especially for smart pointers, extensive use in module canvas | | clarify if license can be used under Apache \\
boost is widely used in the source code \\  \\
Corresponding JIRA issue, found [here|https://issues.apache.org/jira/browse/LEGAL-101], has been solved - Boost Software License Version 1.0 is now been classified as category A | boost_1-39_0.tar.gz \\ {highlight:green}Boost Software License Version 1.0{highlight} | {highlight:green} solved {highlight} |
| 1 | Clarify usage of Oracle Berkeley DB | Used in modules l10ntools, xmlhelp and desktop | l10ntools: removal of 'dead code' using Berkeley DB \\ xmlhelp: code using Berkeley DB is also more or less 'dead' and can be removed \\ desktop: replacement already available | Not usable in Apache due to license - corresponding JIRA issue, found [here|https://issues.apache.org/jira/browse/LEGAL-113] | db-4.7.25.NC-custom.tar.gz \\ {highlight:red}Open Source License for Oracle Berkeley DB{highlight} | {bgcolor:green}done{bgcolor} \\ hdu, orw \\ [118662|https://issues.apache.org/ooo/show_bug.cgi?id=118662] |
| 2 | idlcpp \\ | IDL Compiler \\ | ucpp | Underlying and used code ([lcc|http://sites.google.com/site/lccretargetablecompiler/Home]) has a problematic [license|https://github.com/drh/lcc/blob/master/CPYRIGHT]. The used code will be replaced by a different preprocessor [ucpp|http://code.google.com/p/ucpp/] with an Apache compatible license (BSD). Related issue [118568|https://issues.apache.org/ooo/show_bug.cgi?id=118568].
- ucpp evaluated - {highlight:green}done{highlight}
- idlc changed to use ucpp - {highlight:green}done{highlight}
- new module for ucpp created (md5 marked download file in ext_source patch for makefile build works) - {highlight:green}done{highlight}
- tested on Windows building udkapi and offapi - {highlight:green}done{highlight}
- testing on Linux building udkapi and offapi - open
- testing on MacOS building udkapi and offapi - {highlight:green}done{highlight} | ucpp \\  {highlight:green}new BSD license{highlight} | {highlight:green}jsc: done {highlight} |
| 2 | dictionaries | Required for spell checking | None | Can we have dictionaries be installed by users as extensions? \\
\\
Can some dictionaries be contributed by original authors under ALv2? \\ | | {bgcolor:green} af: done - [118636|https://issues.apache.org/ooo/show_bug.cgi?id=118636]{bgcolor}|
| 2 | replace svg (LGPL) support | Used for the important Ooo3.4 feature: SVG support | parsing SVG directly and converting it to primitives | figure out the dependent office functionalities \\
Replacement for librsvg and cairo \\
\\
three options: \\
\\
1) Deactivate \\
2) Replace with Java renderer \\
3) Write our own SVG import in C+\+ \\ | librsvg-2.32.1.tar.gz \\  {bgcolor:red}LGPL{bgcolor}\\
libcroco-0.6.2.tar.gz \\  {bgcolor:red}LGPL{bgcolor}\\
libgsf-1.14.19.tar.gz \\  {bgcolor:red}LGPL{bgcolor}\\
cairo-1.8.0.tar.gz \\  {bgcolor:red}LGPL{bgcolor}{bgcolor:yellow}MPL{bgcolor}\\
pixman-0.12.0.tar.gz \\  {bgcolor:green}MIT{bgcolor}\\
pango-1.28.3.tar.gz \\  {bgcolor:red}LGPL{bgcolor}, parts Freetype License |ALG\\ 
\\{bgcolor:green}solved by removing:
\\-librsvg
\\-libcroco
\\-libgsf
\\-gdk-pixbuf
\\-glib
\\-gettext
\\-pango
\\in task #i118466#
\\(replacement in preparation){bgcolor} |
| 2 | replace neon (LGPL) | Used for HTTP file access and WEBDAV support | [serf|http://code.google.com/p/serf/] (AL2) | it is more or less a MUST; related issue [118569|https://issues.apache.org/ooo/show_bug.cgi?id=118569]. \\ \\ replacement with serf in progress | neon-0.29.5.tar.gz \\  {bgcolor:red}LGPL{bgcolor} | jsc \\
{highlight:green}removed - [118584|https://issues.apache.org/ooo/show_bug.cgi?id=118584]{highlight} \\ {highlight:yellow}replace - [118569|https://issues.apache.org/ooo/show_bug.cgi?id=118569]\\
 {highlight} |
| 2 | 3rd party/external library cups | Used for integrating into the print system on Unix | Using the system provided cups functionality. // This should be off by default | CUPS headers are still required by configure. Is this OK?| cups-1.1.19.tar.gz \\  {bgcolor:red}GPL & LGPL with exceptions for Apple{bgcolor} | {bgcolor:green}af \\
external lib cups-1.1.19.tar.gz not used (anymore?) {bgcolor} but the system provided CUPS headers and libraries|
| 2 | 3rd party/external library lp_solve | Used by Calc's goal based linear-programming solver | CoinMP (EPL) | | lp_solve_5.5.tar.gz \\  {bgcolor:red}LGPL{bgcolor} | {highlight:green}removed - [118567|https://issues.apache.org/ooo/show_bug.cgi?id=118567]\\
 {highlight} |
| 2 | 3rd party/external library openssl | Used for libcurl and as an eventual migration path of LGPL NSS | Already Apache approved? \\
an optional PKCS11 support needs a seperate review | | openssl-0.9.8l.tar.gz \\  {bgcolor:green}OpenSSL License, SSLeay License (both BSD style){bgcolor} | {bgcolor:green}Category A license: nothing to do{bgcolor} |
| 3 | fix copyright/license statements in i18npool for the data files based on ICU. \\
There are missing/unclear copyright/license headers. | Used by line breaking \\
spell checking \\
word counting \\
word selection \\
etc. | | Main part of these files are covered by Oracle's SGA - see [oracle-sga-2-txt|http://svn.apache.org/viewvc/incubator/ooo/pmc/ip-review/oracle-sga-2.txt?view=markup] \\ \\ Missing are the data files in folder i18npool/source/breakiterator/data/ which have IBM copyright header. These need to get proper license text. \\ As these are files are taken from ICU and are adapted to OOo needs, it is worse looking for new ones from ICU. \\ \\ proper license information is now available in this folder | | {bgcolor:green}done{bgcolor} \\ orw |
| 3 | clarify status of library files used for tests | check license compatibility\\and the need for the binaries | None | see wiki – ApacheMigration:
- VBasicEventListener
- connectivity | | hdu \\ {highlight:green} solved: binaries not needed and removed {highlight} |
| 4 | 3rd party/external library mysql-connector | Used by Base for connecting to MySQL data bases | None | | mysql-connector-cpp.zip \\  {bgcolor:red}GPL{bgcolor} | {highlight:green}af: removed - [118594|https://issues.apache.org/ooo/show_bug.cgi?id=118594]\\
 {highlight} |
| 5 | 3rd party/external library epm | Used during the build process on Unix | Using the system provided packaging tools | epm is made as prerequisite and we have to use a version 3.7 with our patches. In the future we will analyze the packaging process and will change it to work with an unpatched system epm or we find an alternative. | epm-3.7.tar.gz \\  {bgcolor:red}GPL{bgcolor} | jsc {highlight:green}done - [118605|https://issues.apache.org/ooo/show_bug.cgi?id=118605]{highlight} |
| 5 | 3rd party/external library glibc | getopt() and readdir_r() for Windows | Reimplementation | | glibc-2.1.3-stub.tar.gz \\  {bgcolor:red}LGPL{bgcolor} | {highlight:green}af: removed - [118595|https://issues.apache.org/ooo/show_bug.cgi?id=118595]\\
 {highlight} |
| 5 | 3rd party/external library javamail | none as Java Mail is not used by mail merge | | removing unnecessary strings and help content - [issue 118572|https://issues.apache.org/ooo/show_bug.cgi?id=118572] | javamail-1_3_1.zip | orw \\ {highlight:green} Solved - nothing to do regarding IP clearance{highlight} |
| 5 | 3rd party/external library xpdf | Used by PDF import extension | [Apache PDFBox|http://pdfbox.apache.org/] or eventually native parsing of PDF | | xpdf-3.02.tar.gz \\  {bgcolor:red}GPL{bgcolor} | {highlight:green}af: removed - [118592|https://issues.apache.org/ooo/show_bug.cgi?id=118592]\\
 {highlight} |
| 6 | 3rd party/external library gentiumbasic-fonts | A useful set of high quality fonts for e.g. templates | None | | gentium-basicfonts.1.10.zip \\
SIL OpenFont License{bgcolor:red}similar to GPL{bgcolor} | {highlight:green}af: removed - [118600|https://issues.apache.org/ooo/show_bug.cgi?id=118600]\\
 {highlight}|
| 6 | 3rd party/external library liberation-fonts | A useful set of high quality fonts, mostly equivalent to those from MS. | Chrome OS has replacement fonts (Tinos, Arimo and Cousine) under OFL.| | liberation-fonts-ttf-1.06.0.20100721.tar.gz \\  {bgcolor:red}GPL{bgcolor} | {highlight:green}af: removed - [118600|https://issues.apache.org/ooo/show_bug.cgi?id=118600]\\
 {highlight}|
| 6 | 3rd party/external library gettext | Used by GTK integration and testautomation | GTK: none \\
testautomation: rewrite without gettext | | gettext-0.18.1.1.tar.gz \\  {bgcolor:red}GPL{bgcolor} |{bgcolor:green}ALG: solved by removal with SVG in #118466#{bgcolor}|
| 6 | 3rd party/external library glib | Used by GTK integration | Use system provided functionality | | glib-2.28.1.tar.gz \\  {bgcolor:red}LGPL{bgcolor}|{bgcolor:green}ALG: solved by removal with SVG in #118466#{bgcolor}|
| 6 | 3rd party/external library libwpd | Used for WordPerfect import/export | None | Default is that this filter is now disabled and removed but it can be built with a system available libwpd (0.8.x). It would be also possible to create an extension and provide it separately if anybody takes care of this. | libwpd-0.8.8.tar.gz \\  {bgcolor:red}LGPL{bgcolor} | jsc \\
{highlight:green}removed - [118587|https://issues.apache.org/ooo/show_bug.cgi?id=118587]{highlight} |
| 6 | 3rd party/external library swingEx | Used by scripting frameworks Javascript support library | None | | swingExSrc.zip | {bgcolor:green}af: done - [118612|https://issues.apache.org/ooo/show_bug.cgi?id=118612]{bgcolor} |
| 8 | 3rd party/external library \\
Core | Used by report builder extension | None | | core.zip \\  {bgcolor:red}LGPL{bgcolor} | {highlight:green}removed - [118573|https://issues.apache.org/ooo/show_bug.cgi?id=118573]\\
 {highlight} |
| 8 | 3rd party/external library \\
flow-engine | Used by report builder extension | None | | flow-engine.0.9.4.zip \\  {bgcolor:red}LGPL{bgcolor} | {highlight:green}removed - [118573|https://issues.apache.org/ooo/show_bug.cgi?id=118573]\\
 {highlight} |
| 8 | 3rd party/external library libxml | Used by report builder extension | None | | libxml-1.1.7.zip \\  {bgcolor:red}LGPL{bgcolor} | {highlight:green}removed - [118573|https://issues.apache.org/ooo/show_bug.cgi?id=118573]\\
 {highlight} |
| 8 | 3rd party/external library \\
libbase | Used by report builder extension | None | | libbase-1.1.6.zip \\  {bgcolor:red}LGPL{bgcolor} | {highlight:green}removed - [118573|https://issues.apache.org/ooo/show_bug.cgi?id=118573]\\
 {highlight} |
| 8 | 3rd party/external library \\
libfonts | Used by report builder extension | None | | libfonts-1.1.6.zip \\  {bgcolor:red}LGPL{bgcolor} | {highlight:green}removed - [118573|https://issues.apache.org/ooo/show_bug.cgi?id=118573]\\
 {highlight} |
| 8 | 3rd party/external library \\
libformula | Used by report builder extension | None | | libformula-1.1.7.zip \\  {bgcolor:red}LGPL{bgcolor} | {highlight:green}removed - [118573|https://issues.apache.org/ooo/show_bug.cgi?id=118573]\\
 {highlight} |
| 8 | 3rd party/external library \\
liblayout | Used by report builder extension | None | | liblayout-0.2.10.zip \\  {bgcolor:red}LGPL{bgcolor} | {highlight:green}removed - [118573|https://issues.apache.org/ooo/show_bug.cgi?id=118573]\\
 {highlight} |
| 8 | 3rd party/external library \\
libloader | Used by report builder extension | None | | libloader-1.1.6.zip \\  {bgcolor:red}LGPL{bgcolor} | {highlight:green}removed - [118573|https://issues.apache.org/ooo/show_bug.cgi?id=118573]\\
 {highlight} |
| 8 | 3rd party/external library \\
librepository | Used by report builder extension | None | | librepository-1.1.6.zip \\  {bgcolor:red}LGPL{bgcolor} | {highlight:green}removed - [118573|https://issues.apache.org/ooo/show_bug.cgi?id=118573]\\
 {highlight} |
| 8 | 3rd party/external library \\
libserializer | Used by report builder extension | None | | libserializer-1.1.6.zip \\  {bgcolor:red}LGPL{bgcolor} | {highlight:green}removed - [118573|https://issues.apache.org/ooo/show_bug.cgi?id=118573]\\
 {highlight} |
| 8 | 3rd party/external library \\
flute | Used by report builder extension | None | | flute-1.1.6.zip \\  {bgcolor:red}LGPL{bgcolor} | {highlight:green}removed - [118573|https://issues.apache.org/ooo/show_bug.cgi?id=118573]\\
 {highlight} |
| 8 | 3rd party/external library \\
gdk-pixbuf | Used by AVMedia for Video playback | None | | gdk-pixbuf-2.23.0.tar.gz \\  {bgcolor:red}LGPL{bgcolor}{bgcolor:yellow}MPL{bgcolor}|{bgcolor:green}ALG: solved by removal with SVG in #118466#{bgcolor}|
| 8 | 3rd party/external library \\
Cppunit | Used for automated unit testing | | | cppunit-1.12.1.tar.gz \\  {bgcolor:red}LGPL{bgcolor} | {bgcolor:green}af: done, committed - [118608|https://issues.apache.org/ooo/show_bug.cgi?id=118608]{bgcolor}|
| 8 | External images \\
Crystal Icons, Oxygen Icons| Used by KDE and KDE4 | Use existing Tango or Galaxy icon sets | | ooo_crystal_images-1.tar.gz \\  {bgcolor:red}LGPL{bgcolor} \\ ooo_oxygen_images-2009-06-17.tar.gz \\ {bgcolor:red}GPL{bgcolor} | {bgcolor:green} pfg: removed - [118613|https://issues.apache.org/ooo/show_bug.cgi?id=118613]{bgcolor}|
| 9 | xmerge/source/activesync/BIN/xmergesync.dll | Integration with Nokia WordProcessor \\
Writer2Latex \\
PocketPC Calc | | clarify status of these file \\
see wiki – ApacheMigration | | {bgcolor:green} af: resolved\\this is not an ip problem, just a dll that has been checked in{bgcolor} |

The following libraries have a {highlight:yellow}[category B License|http://www.apache.org/legal/3party.html#category-b]
{highlight}:

|| Library || License || Details, Comments ||
| seamonkey-1.1.14.source.tar.gz | {bgcolor:yellow}MPL{bgcolor}  | Used for providing NSS, LDAP, and address book integration \\ We already support alternative openldap. \\
Address book support uses Mozilla XPCOM to communicate with drivers and Mozilla libraries to access Thunderbird address book. [Details|IP_Clearance_Address Book]\\
Can we upstream our patches? |
| hunspell-1.2.9.tar.gz | {bgcolor:red}LGPL{bgcolor}{bgcolor:yellow}MPL{bgcolor} | Used for spell checking |
| hyphen-2.7.1.tar.gz | {bgcolor:red}LGPL{bgcolor}{bgcolor:red}GPL{bgcolor}{bgcolor:yellow}MPL{bgcolor} | Required for language specific hyphenations |
| nss-3.12.6-with-nspr-4.8.4.tar.gz | {bgcolor:yellow}MPL{bgcolor}  | Used for loading and saving of signed and encrypted documents and the related certificate and key management \\ possible alternative: openssl \\ NSS key management is not replaceable without the user being required certificate and key management \\
figure out the dependent office functionalities \\
already known: xmlsecurity and AES encryption |
| silgraphite-2.3.1.tar.gz | {bgcolor:yellow}CPL{bgcolor}{bgcolor:red}GPL{bgcolor}{bgcolor:red}LGPL{bgcolor} | Used for complex text layout of minority scripts |
| source-9.0.0.7-bj.zip (saxon) | {bgcolor:yellow}MPL{bgcolor} | Used for XML transformations from and to some file formats of minor importance \\
e.g. Tex \\ posssible alternative: Apache Xalan |
| stax-api-1.0-2-sources.jar (StAX) | {bgcolor:red}GPL{bgcolor}{bgcolor:yellow}CDDL{bgcolor} | Used along with Saxon but apparently only on older versions of Java \\ New [StAX|http://stax.codehaus.org//] releases seem to be under AL2.  |
| rhino1_7R3.zip | {bgcolor:yellow}MPL{bgcolor}  | Used by scripting framework for JavaScript support. |
| bsh-2.0b1-src.tar.gz (BeanShell) | {bgcolor:red}LGPL{bgcolor}{bgcolor:yellow}SPL{bgcolor} | Used by scripting framework \\ [BeanShell|http://beanshell.org/] will be relicensed under AL2.  |

Change your notification preferences: https://cwiki.apache.org/confluence/users/viewnotifications.action