You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@netbeans.apache.org by Emilian Bold <em...@protonmail.ch> on 2018/06/05 16:29:07 UTC
New NetBeans policy: not tracking compile time dependencies license
Hello,
It seems we are somewhat overzealous in our dependency license tracking and our releases are having a lot of discussions because we still have the GPL license included among the source files, since we have compile-time GPL (w/CPE) dependencies.
We don't include the GPL license in LICENSE or NOTICE, which is correct, but the reviewers still grep for GPL and find the license text for the compile time dependencies somewhere in the external/ folders.
So, we had a vote[1] on a new Apache NetBeans policy of not tracking compile time dependencies licenses. We will do a summary review when adding new compile time dependencies, but that will be all.
See this PR where we discuss the matter a bit https://github.com/apache/incubator-netbeans/pull/561 and there are also links towards other mailing list (vote-related) discussions.
Personally I find this to be a mistake and I don't see why the ASF cares if some downstream user gets scared when grep-ing for GPL inside our release. As long as the release is valid, having the GPL license text in there would only turn away the most superficial downstream legal reviewer. Since Apache projects are not about maximising the market share or number of users, we should not be concerned with this. In this regard, what we truly need to change is the Apache policy about all this.
Vote passed[2] with the following PPMC votes:
+1 Wade Chandler
+1 Matthias Bläsing
+1 Emilian Bold (started vote)
0 Antonio Vieiro
I'll create a wiki page with to take not of this project-based policy.
1. https://lists.apache.org/thread.html/f44ed1652f900bfffc3af61a52c58cdc7be4bc9ef182291e4318dc3b@%3Cprivate.netbeans.apache.org%3E
2. https://lists.apache.org/thread.html/52fb6d7648bfddc30319cda651e4ca5a2ea46bbc0bb7bb37fb6660be@%3Cprivate.netbeans.apache.org%3E
--emi
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@netbeans.incubator.apache.org
For additional commands, e-mail: dev-help@netbeans.incubator.apache.org
For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
Re: New NetBeans policy: not tracking compile time dependencies license
Posted by Emilian Bold <em...@protonmail.ch>.
I've recorded this policy on https://cwiki.apache.org/confluence/display/NETBEANS/NetBeans+Policies
--emi
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On 5 June 2018 7:29 PM, Emilian Bold <em...@protonmail.ch> wrote:
> Hello,
>
> It seems we are somewhat overzealous in our dependency license tracking and our releases are having a lot of discussions because we still have the GPL license included among the source files, since we have compile-time GPL (w/CPE) dependencies.
>
> We don't include the GPL license in LICENSE or NOTICE, which is correct, but the reviewers still grep for GPL and find the license text for the compile time dependencies somewhere in the external/ folders.
>
> So, we had a vote[1] on a new Apache NetBeans policy of not tracking compile time dependencies licenses. We will do a summary review when adding new compile time dependencies, but that will be all.
>
> See this PR where we discuss the matter a bit https://github.com/apache/incubator-netbeans/pull/561 and there are also links towards other mailing list (vote-related) discussions.
>
> Personally I find this to be a mistake and I don't see why the ASF cares if some downstream user gets scared when grep-ing for GPL inside our release. As long as the release is valid, having the GPL license text in there would only turn away the most superficial downstream legal reviewer. Since Apache projects are not about maximising the market share or number of users, we should not be concerned with this. In this regard, what we truly need to change is the Apache policy about all this.
>
> Vote passed[2] with the following PPMC votes:
>
> +1 Wade Chandler
>
> +1 Matthias Bläsing
>
> +1 Emilian Bold (started vote)
>
> 0 Antonio Vieiro
>
> I'll create a wiki page with to take not of this project-based policy.
>
> 1. https://lists.apache.org/thread.html/f44ed1652f900bfffc3af61a52c58cdc7be4bc9ef182291e4318dc3b@<private.netbeans.apache.org>
> 2. https://lists.apache.org/thread.html/52fb6d7648bfddc30319cda651e4ca5a2ea46bbc0bb7bb37fb6660be@<private.netbeans.apache.org>
>
> --emi
>
>
> To unsubscribe, e-mail: dev-unsubscribe@netbeans.incubator.apache.org
>
> For additional commands, e-mail: dev-help@netbeans.incubator.apache.org
>
> For further information about the NetBeans mailing lists, visit:
>
> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@netbeans.incubator.apache.org
For additional commands, e-mail: dev-help@netbeans.incubator.apache.org
For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists