Re: Handling lack of access to upstream license files (Was: Fwd: Git repository for "azure-annotations" library is missing/private/incorrect)

[Ralph Goers <ra...@dslextreme.com>]

A source jar on Maven central is not necessarily a buildable version of the source. Typically, it is enough to let you view the source in your IDE but may not have all the other stuff required to perform a build.

Ralph

> On Dec 26, 2021, at 1:59 PM, David Jencks <da...@gmail.com> wrote:
> 
> ? To quote,
> 
> and its source is available
> within a source .jar on Maven Central
> 
> My understanding of how Apache works is that only the source in released artifacts is supported by any legal protection by the Foundation and that the VCS serves as an internal way of helping PMC members track whether they are willing to vote yes on a proposed release artifact.  I don’t think the open source status of our products would be affected by making all the Apache VCS repositories unavailable to the public.  Anyone can take the released source, put it into a VCS of their choice, work on it, and submit a patch via email. Probably no one would, but this is a thought experiment.
> 
> David Jencks
> 
>> On Dec 26, 2021, at 12:15 PM, Justin Mclean <ju...@classsoftware.com> wrote:
>> 
>> Hi,
>> 
>> I’m concerned that this software is not open source. It may have a permissive OS license but if the source code is not publicly available how can it be open source?
>> 
>> Kind Regards,
>> Justin
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
>> For additional commands, e-mail: legal-discuss-help@apache.org
>> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
> For additional commands, e-mail: legal-discuss-help@apache.org
> 
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org

Re: Handling lack of access to upstream license files (Was: Fwd: Git repository for "azure-annotations" library is missing/private/incorrect)

[Gary Gregory <ga...@gmail.com>]

A "-source" jar on Maven central will rarely build indeed, since it won't
normally contain build files like a POM or Ant build file. It is only used
as a view on the classes. A "src" or "bin" zip file can sometimes but
rarely be found on Central. Those might sometimes be helpful depending on
what you are trying to do.

The only way to build is from git or from an "src" zip or gz file. The zip
files you get from an Apache project's download page or a mirror.

Gary

On Thu, Jan 6, 2022, 10:04 Ralph Goers <ra...@dslextreme.com> wrote:

> A source jar on Maven central is not necessarily a buildable version of
> the source. Typically, it is enough to let you view the source in your IDE
> but may not have all the other stuff required to perform a build.
>
> Ralph
>
> > On Dec 26, 2021, at 1:59 PM, David Jencks <da...@gmail.com>
> wrote:
> >
> > ? To quote,
> >
> > and its source is available
> > within a source .jar on Maven Central
> >
> > My understanding of how Apache works is that only the source in released
> artifacts is supported by any legal protection by the Foundation and that
> the VCS serves as an internal way of helping PMC members track whether they
> are willing to vote yes on a proposed release artifact.  I don’t think the
> open source status of our products would be affected by making all the
> Apache VCS repositories unavailable to the public.  Anyone can take the
> released source, put it into a VCS of their choice, work on it, and submit
> a patch via email. Probably no one would, but this is a thought experiment.
> >
> > David Jencks
> >
> >> On Dec 26, 2021, at 12:15 PM, Justin Mclean <ju...@classsoftware.com>
> wrote:
> >>
> >> Hi,
> >>
> >> I’m concerned that this software is not open source. It may have a
> permissive OS license but if the source code is not publicly available how
> can it be open source?
> >>
> >> Kind Regards,
> >> Justin
> >> ---------------------------------------------------------------------
> >> To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
> >> For additional commands, e-mail: legal-discuss-help@apache.org
> >>
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
> > For additional commands, e-mail: legal-discuss-help@apache.org
> >
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
> For additional commands, e-mail: legal-discuss-help@apache.org
>
>