I finally found time to look at this. On 2/8/15, 10:30 PM, "Justin Mclean" <jus...@classsoftware.com> wrote:
>Hi, > >From a quick look that are OK, but are probably not 100% correct, but IMO >it's not a licensing error on our part and not a blocker. > >IMO the (minor) issues are: >1. Binary bundles as3 commons which is not mentioned in license/notice. >(It's Apache licensed). >2. We have stuff in LICENSE that should probably go in NOTICE and we >don't mention the copyright owner. >3. We could mention that the MD5 code was originally BSD licensed when >it's header was replaced. In this particular case, I, as an Adobe employee, re-licensed the code and donated it to Apache. Normally there would be an issue about re-licensing BSD code, but this is an exception. AIUI, no need to mention the prior licensing any more than we mention the prior licensing of the other code from Adobe. > >The issue re 1 + 2 is that the Apache software we're bundling is missing >(the required) NOTICE file. All Apache licensed software should have a >minimal NOTICE file with the copyright owner. This normally would then be >copied into our NOTICE file but as it was missing we've added them to >LICENSE and miss out mentioning the copyright owner. The font file is >binary and it's not immediately obvious it's Apache licensed so important >IMO that should stay. I’m not sure what the right answer is. It would be more obvious if the Installer’s binary artifact was a compressed artifact, but given it is a DMG or EXE, I’m not sure how to package a LICENSE and NOTICE in it in a way the consumer can easily access it, so I’m not sure what rules apply. We only download the binary SWC from as3 commons zip and don’t bundle the full SWC. It is a library used by the linker. The SWC is not deployed in the binary. It isn’t clear that we “moved” any copyrights, so I’m not sure that the LICENSE should change. IMO, we’re ok as it is, but if someone wants to try to figure out the recommended way to handle DMG and EXE files and make the required build changes, I would support their effort. Since PMC members wrote AS3 Commons, they can speak up if they want more attribution. -Alex
