You are viewing a plain text version of this content. The canonical link for it is here.
Posted to legal-discuss@apache.org by Jason Davies <ja...@jasondavies.com> on 2009/08/10 14:21:23 UTC
Do all third-party dependencies require software grant agreements?
Hi again,
The first time I read http://incubator.apache.org/ip-clearance/index.html
I got the impression that a SGA is required before *any* third-party
libraries can be imported into SVN. However, if the library is simply
a dependency and is copied without changes simply to allow bundling,
is a SGA really required?
For example, I have just realised that we also bundle the jQuery
JavaScript library, which is released under the BSD (modified)
license. Do we need to ask the author to sign a SGA too? And what if
we cannot contact the author of such a library, does that mean we
cannot import it into SVN even if it was released under an ASL-
compatible license?
Thanks,
--
Jason Davies
www.jasondavies.com
---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org
Re: Do all third-party dependencies require software grant
agreements?
Posted by Niclas Hedhman <ni...@hedhman.org>.
On Tue, Aug 11, 2009 at 4:13 PM, Jason Davies<ja...@jasondavies.com> wrote:
>> Yes, I think this is reasonable...
>
> Sorry, do you mean we *should* maintain a separate patch that is applied at
> build time, or are you just responding to the question about IP clearance?
> I should really have split those into separate paragraphs :-)
Yes to both. *should* as I wouldn't call it a *must*, and "Yes, no
need for IP clearance"
IANAL
--
Niclas Hedhman, Software Developer
http://www.qi4j.org - New Energy for Java
I live here; http://tinyurl.com/2qq9er
I work here; http://tinyurl.com/2ymelc
I relax here; http://tinyurl.com/2cgsug
---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org
Re: Do all third-party dependencies require software grant agreements?
Posted by Jason Davies <ja...@jasondavies.com>.
Hi Niclas,
On 11 Aug 2009, at 09:11, Niclas Hedhman wrote:
> On Tue, Aug 11, 2009 at 4:05 PM, Jason Davies<ja...@jasondavies.com>
> wrote:
>
>> As our intention is not to fork this dependency, I assume we do not
>> require
>> it to go through IP clearance? If required we could easily
>> maintain a patch
>> in SVN that gets applied to a clean copy of the upstream code on
>> building
>> it.
>
> Yes, I think this is reasonable...
Sorry, do you mean we *should* maintain a separate patch that is
applied at build time, or are you just responding to the question
about IP clearance? I should really have split those into separate
paragraphs :-)
--
Jason Davies
www.jasondavies.com
---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org
Re: Do all third-party dependencies require software grant
agreements?
Posted by Niclas Hedhman <ni...@hedhman.org>.
On Tue, Aug 11, 2009 at 4:05 PM, Jason Davies<ja...@jasondavies.com> wrote:
> As our intention is not to fork this dependency, I assume we do not require
> it to go through IP clearance? If required we could easily maintain a patch
> in SVN that gets applied to a clean copy of the upstream code on building
> it.
Yes, I think this is reasonable...
Cheers
--
Niclas Hedhman, Software Developer
http://www.qi4j.org - New Energy for Java
I live here; http://tinyurl.com/2qq9er
I work here; http://tinyurl.com/2ymelc
I relax here; http://tinyurl.com/2cgsug
---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org
Re: Do all third-party dependencies require software grant agreements?
Posted by Jason Davies <ja...@jasondavies.com>.
Hi Robert,
Thanks for your reply. I do have one more point that I need to
clarify though, please see below.
On 10 Aug 2009, at 13:46, Robert Burrell Donkin wrote:
> Jason Davies wrote:
>> Hi again,
>>
>> The first time I read
>> http://incubator.apache.org/ip-clearance/index.html I got the
>> impression
>> that a SGA is required before *any* third-party libraries can be
>> imported into SVN. However, if the library is simply a dependency
>> and
>> is copied without changes simply to allow bundling, is a SGA really
>> required?
>>
>> For example, I have just realised that we also bundle the jQuery
>> JavaScript library, which is released under the BSD (modified)
>> license.
>> Do we need to ask the author to sign a SGA too? And what if we
>> cannot
>> contact the author of such a library, does that mean we cannot
>> import it
>> into SVN even if it was released under an ASL-compatible license?
>
> IP clearance is for code bases which are being imported into apache
> for
> future development. it's not required for unmodified third party
> library
> dependencies. if you do distribution third party libraries, you do
> need
> to follow http://www.apache.org/legal/src-headers.html.
One of our dependencies has minor modifications [1] but the patches
have been submitted upstream and we expect they will be merged as all
the previous ones have been. Actually, there is one patch that we
haven't submitted upstream yet but we will do so once we get this
release out of the door.
As our intention is not to fork this dependency, I assume we do not
require it to go through IP clearance? If required we could easily
maintain a patch in SVN that gets applied to a clean copy of the
upstream code on building it.
[1]: http://markmail.org/message/yyh4tfstq5qv5ngi
Thanks for your help,
--
Jason Davies
www.jasondavies.com
---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org
Re: Do all third-party dependencies require software grant agreements?
Posted by Robert Burrell Donkin <rd...@apache.org>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Jason Davies wrote:
> Hi again,
>
> The first time I read
> http://incubator.apache.org/ip-clearance/index.html I got the impression
> that a SGA is required before *any* third-party libraries can be
> imported into SVN. However, if the library is simply a dependency and
> is copied without changes simply to allow bundling, is a SGA really
> required?
>
> For example, I have just realised that we also bundle the jQuery
> JavaScript library, which is released under the BSD (modified) license.
> Do we need to ask the author to sign a SGA too? And what if we cannot
> contact the author of such a library, does that mean we cannot import it
> into SVN even if it was released under an ASL-compatible license?
IP clearance is for code bases which are being imported into apache for
future development. it's not required for unmodified third party library
dependencies. if you do distribution third party libraries, you do need
to follow http://www.apache.org/legal/src-headers.html.
- - robert
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org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=9lY3
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org
Re: Do all third-party dependencies require software grant
agreements?
Posted by Niclas Hedhman <ni...@hedhman.org>.
Adding to Robert's answer; the general recommendation is to depend on a
downloadable artifact from the origin project, and only if that is
impossible should one import the full expanded codebase into SVN..
-- Niclas
On Aug 10, 2009 8:22 PM, "Jason Davies" <ja...@jasondavies.com> wrote:
Hi again,
The first time I read http://incubator.apache.org/ip-clearance/index.html I
got the impression that a SGA is required before *any* third-party libraries
can be imported into SVN. However, if the library is simply a dependency
and is copied without changes simply to allow bundling, is a SGA really
required?
For example, I have just realised that we also bundle the jQuery JavaScript
library, which is released under the BSD (modified) license. Do we need to
ask the author to sign a SGA too? And what if we cannot contact the author
of such a library, does that mean we cannot import it into SVN even if it
was released under an ASL-compatible license?
Thanks,
--
Jason Davies
www.jasondavies.com
---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org