Hi,

In one of the discussions on legal discuss it was pointed out that the Apache 
1.0 license [1] contains an advertising clause which actually makes it Category 
X / incompatible with the Apache 1.1/2.0 licenses.

It turns out that Adobe used some Apache 1.0 licensed code in the Flex SDK from 
the Apache JServ project. [2] This is inside the Apache Velocity project, but 
I’m not sure of the history / changes Adobe made here. Velocity 1.4 itself is 
licensed Apache 2.0 [3] so there's no issue there.

Our options to fix this as I see it are:
- Remove the code. Does anyone know what it used for? Form a quick glance it 
looks like Velocity is used to parse MXML files? So we probably can’t remove it 
all, but it may be that we don’t need the troublesome JServ bit and can remove 
that? The only thing I can think it may of been used for is way back in Flex 
1.5 days to compile MXML code on the fly on the server.
- Update to a recent version of velocity. I don’t know how much work that would 
be it's likely to be difficult as Adobe made a number of changes to Velocity 
and I don’t think there are many people are familiar with this code. There a 
risk here we could break something badly.
- Ask the JServ project if it can relicense the code we use under Apache 
license 2.0 or if it would be OK to add the advertising clause to NOTICE files. 
This is probably going to be rather difficult given the project ended in 1999. 
- Adding to NOTICE is the approach taken with OpenSSL, so we might be able to 
just ask VP legal is this OK to do this without JServ permission (as it’s was 
an Apache project).

Anyone think of anything else or have suggestions on which path to take?

Thanks,
Justin

1. https://www.apache.org/licenses/LICENSE-1.0
2. 
https://github.com/apache/flex-sdk/blob/develop/modules/thirdparty/velocity/test/texen-classpath/jar-contents/license.txt
3. https://github.com/apache/velocity-engine/blob/VEL_1_4/LICENSE
4. 
https://github.com/apache/flex-sdk/blob/develop/modules/thirdparty/velocity/src/java/org/apache/flex/forks/velocity/servlet/VelocityServlet.java

Reply via email to