[ 
https://issues.apache.org/jira/browse/FLEX-35058?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Justin Mclean updated FLEX-35058:
---------------------------------
    Description: 
Note also effects Flex JS 0.6.

Binary file has a few issues:
- Could have Apache licensed Google Caja project [1][2][3] While not required 
by current policy it seem odd to mention one 3rd party Apache licence software 
in LICENSE but not another.
- Contains code from Apache Shindig [4], this has a NOTICE file [5] which would 
likely effect our binary NOTICE file.
- This file [6] is based on BSD license code [7] This should be mentioned in 
LICENSE
- This file [8] contains code from http://www.json.org/json2.js which is public 
domain which should be mentioned in LICENSE.
- This file [9] contains code from 
http://webfx.eae.net/dhtml/slider/js/range.js which is Apache licensed and 
should be mention in LICENSE if other 3rd party Apache licensed files are.
- The BSD licensed file [10] contains code from 
http://www.bytestrom.eu/blog/2009/1120a_jpeg_encoder_for_javascript (unknown 
license). We need to work out what the original license was and if it's Apache 
compatable.

1. 
./js/lib/google/closure-library/third_party/closure/goog/caja/string/html/htmlparser.js
2. 
./js/lib/google/closure-library/third_party/closure/goog/caja/string/html/htmlsanitizer.js
3. https://github.com/google/caja/blob/master/LICENSE.txt
4. ./js/lib/google/closure-library/third_party/closure/goog/osapi/osapi.js
5. http://svn.apache.org/repos/asf/shindig/trunk/NOTICE
6. 
./js/lib/google/closure-library/third_party/closure/goog/loremipsum/text/loremipsum.js
7. https://code.google.com/archive/p/lorem-ipsum-generator/
8. ./js/lib/google/closure-library/closure/goog/json/json.js
9 ./js/lib/google/closure-library/closure/goog/ui/rangemodel.js
10. 
./js/lib/google/closure-library/third_party/closure/goog/jpeg_encoder/jpeg_encoder_basic.js


  was:
Not also effects Flex JS 0.6.

Binary file has a few issues:
- Could have Apache licensed Google Caja project [1][2][3] While not required 
by current policy it seem odd to mention one 3rd party Apache licence software 
in LICENSE but not another.
- Contains code from Apache Shindig [4], this has a NOTICE file [5] which would 
likely effect our binary NOTICE file.
- This file [6] is based on BSD license code [7] This should be mentioned in 
LICENSE
- This file [8] contains code from http://www.json.org/json2.js which is public 
domain which should be mentioned in LICENSE.
- This file [9] contains code from 
http://webfx.eae.net/dhtml/slider/js/range.js which is Apache licensed and 
should be mention in LICENSE if other 3rd party Apache licensed files are.
- The BSD licensed file [10] contains code from 
http://www.bytestrom.eu/blog/2009/1120a_jpeg_encoder_for_javascript (unknown 
license). We need to work out what the original license was and if it's Apache 
compatable.

1. 
./js/lib/google/closure-library/third_party/closure/goog/caja/string/html/htmlparser.js
2. 
./js/lib/google/closure-library/third_party/closure/goog/caja/string/html/htmlsanitizer.js
3. https://github.com/google/caja/blob/master/LICENSE.txt
4. ./js/lib/google/closure-library/third_party/closure/goog/osapi/osapi.js
5. http://svn.apache.org/repos/asf/shindig/trunk/NOTICE
6. 
./js/lib/google/closure-library/third_party/closure/goog/loremipsum/text/loremipsum.js
7. https://code.google.com/archive/p/lorem-ipsum-generator/
8. ./js/lib/google/closure-library/closure/goog/json/json.js
9 ./js/lib/google/closure-library/closure/goog/ui/rangemodel.js
10. 
./js/lib/google/closure-library/third_party/closure/goog/jpeg_encoder/jpeg_encoder_basic.js



> Flex JS LICENCE and NOTICE doesn't follow ASF policy
> ----------------------------------------------------
>
>                 Key: FLEX-35058
>                 URL: https://issues.apache.org/jira/browse/FLEX-35058
>             Project: Apache Flex
>          Issue Type: Bug
>          Components: FlexJS
>    Affects Versions: Apache FlexJS 0.5.0
>            Reporter: Justin Mclean
>
> Note also effects Flex JS 0.6.
> Binary file has a few issues:
> - Could have Apache licensed Google Caja project [1][2][3] While not required 
> by current policy it seem odd to mention one 3rd party Apache licence 
> software in LICENSE but not another.
> - Contains code from Apache Shindig [4], this has a NOTICE file [5] which 
> would likely effect our binary NOTICE file.
> - This file [6] is based on BSD license code [7] This should be mentioned in 
> LICENSE
> - This file [8] contains code from http://www.json.org/json2.js which is 
> public domain which should be mentioned in LICENSE.
> - This file [9] contains code from 
> http://webfx.eae.net/dhtml/slider/js/range.js which is Apache licensed and 
> should be mention in LICENSE if other 3rd party Apache licensed files are.
> - The BSD licensed file [10] contains code from 
> http://www.bytestrom.eu/blog/2009/1120a_jpeg_encoder_for_javascript (unknown 
> license). We need to work out what the original license was and if it's 
> Apache compatable.
> 1. 
> ./js/lib/google/closure-library/third_party/closure/goog/caja/string/html/htmlparser.js
> 2. 
> ./js/lib/google/closure-library/third_party/closure/goog/caja/string/html/htmlsanitizer.js
> 3. https://github.com/google/caja/blob/master/LICENSE.txt
> 4. ./js/lib/google/closure-library/third_party/closure/goog/osapi/osapi.js
> 5. http://svn.apache.org/repos/asf/shindig/trunk/NOTICE
> 6. 
> ./js/lib/google/closure-library/third_party/closure/goog/loremipsum/text/loremipsum.js
> 7. https://code.google.com/archive/p/lorem-ipsum-generator/
> 8. ./js/lib/google/closure-library/closure/goog/json/json.js
> 9 ./js/lib/google/closure-library/closure/goog/ui/rangemodel.js
> 10. 
> ./js/lib/google/closure-library/third_party/closure/goog/jpeg_encoder/jpeg_encoder_basic.js



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to