[
https://issues.apache.org/jira/browse/HTTPCLIENT-2317?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17814946#comment-17814946
]
Neil C Smith edited comment on HTTPCLIENT-2317 at 2/6/24 7:38 PM:
------------------------------------------------------------------
Commenting here because it relates to a discussion on a NetBeans PR here -
https://github.com/apache/netbeans/pull/7034
IMO the source license looks wrong - I don't think it should have MPL in it, or
licenses for anything that are not in the source tree.
A more interesting thing is how to handle in the binary license file. That
might be worth clarifying with legal. Because MPL and a bunch of other Cat B
licenses allow distribution under license of choice when not in source form, or
as part of a larger work. Which for ASF would surely be ASL.
Obviously, correct attribution is required, so the dependencies change might be
OK, or maybe should be in notice?
was (Author: neilcsmith):
Commenting here because it relates to a discussion on a NetBeans PR here -
https://github.com/apache/netbeans/pull/7034
IMO the source license looks wrong - I don't think it should have MPL in it, or
licenses for anything that are not in the source tree.
A more interesting thing is how to handle in the binary license file. That
might be worth clarifying with legal. Because MPL and a bunch of other Cat B
licenses allow distribution under license of choice when not in source form, or
as part of a larger work. Which for ASF would surely be ASL.
Obviously, correct attribution is required, so the dependencies change looks
good IMO.
> The license in the httpclient5 artifact on Maven central is not correct.
> ------------------------------------------------------------------------
>
> Key: HTTPCLIENT-2317
> URL: https://issues.apache.org/jira/browse/HTTPCLIENT-2317
> Project: HttpComponents HttpClient
> Issue Type: Bug
> Affects Versions: 4.5.14, 5.3.1, 5.4-alpha1
> Reporter: Jan Lahoda
> Priority: Minor
>
> Looking at the 'httpclient5' artifact on Maven central, like:
> [https://repo1.maven.org/maven2/org/apache/httpcomponents/client5/httpclient5/5.3.1/httpclient5-5.3.1.jar]
> [https://repo1.maven.org/maven2/org/apache/httpcomponents/client5/httpclient5/5.4-alpha1/httpclient5-5.4-alpha1.jar]
> these contain 'mozilla/public-suffix-list.txt', which is under MPL 2.0, but
> the license file embedded in these artifacts (META-INF/LICENSE) does not
> contain the MPL 2.0.
>
> The binary file downloadable from Apache download server has the correct
> license file:
> [https://dlcdn.apache.org//httpcomponents/httpclient/binary/httpcomponents-client-5.3.1-bin.tar.gz]
>
> It would be nice if the artifacts on Maven central could have the correct
> content of the license file.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@hc.apache.org
For additional commands, e-mail: dev-h...@hc.apache.org
