https://bugzilla.redhat.com/show_bug.cgi?id=1271193
--- Comment #6 from Michael Simacek <msimacek(a)redhat.com> ---
(In reply to Mikolaj Izdebski from comment #4)
I share doubts wit Gil. I remember that code from OSGi Alliance used
to be
non-free and that's why we don't ship any code from them in Fedora. The
tarball used in SRPM under review indicates that it may be free software,
but it's questionable whether it's genuine and what are the actual licensing
terms.
Michael, is it possible to obtain the same source code directly from
upstream, bypassing Maven Central? Upstream download page may reveal more
details helpful in the review and will help making sure that the code is
genuine.
It can be obtained at [0]. It's not the same JAR as it also contains binary
classes, but it contains the same source (in OSGI-OPT) and license file. But
the catch is that in order to get to download page [1], I had to agree to
non-free license at [2]. The subsequent page contains links to both the
specification documents and code. The JAR contains no further references to
that bad license and only includes ASL and mentions ASL in about.html and file
headers.
Based on that, I believe the bad license covers only the specification
documents, not the code.
Note that the same interfaces/classes (well, different versions/subsets
thereof, otherwise I wouldn't be packaging this) also have to be included in
every OSGi implementation, such as felix or equinox, which are considered free
and included in Fedora.
[0]
https://osgi.org/download/r6/osgi.cmpn-6.0.0.jar
[1]
http://www.osgi.org/Download/Release6 (you don't need to fill the form,
just submit it as it is)
[2]
http://www.osgi.org/Main/OSGiSpecificationLicense
--
You are receiving this mail because:
You are on the CC list for the bug.
You are always notified about changes to this product and component