Bug 846720

Summary: python-webassets bundles jsmin, which has an unacceptable license
Product: [Fedora] Fedora Reporter: Stephen Gallagher <sgallagh>
Component: python-webassetsAssignee: Praveen Kumar <kumarpraveen.nitdgp>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: urgent Docs Contact:
Priority: unspecified    
Version: 17CC: kumarpraveen.nitdgp, pj.pandit, tcallawa
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-08-08 11:25:35 EDT Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---
Bug Depends On:    
Bug Blocks: 182235    

Description Stephen Gallagher 2012-08-08 09:55:52 EDT
Description of problem:
As is well-documented in many places, the license on the jsmin JavaScript minifier is unacceptable for use in Fedora[1]. Bundling this unacceptably-licensed code inside python-webassets puts the package in violation of Fedora's legal policies.

Version-Release number of selected component (if applicable):

How reproducible:
Every time

Steps to Reproduce:
1. Extract the RPM
2. Look at the license text at the top of the file /usr/lib/python2.7/site-packages/webassets/filter/jsmin/jsmin.py
Actual results:
License text includes an unenforceable clause: "The Software shall be used for Good, not Evil."

Expected results:
The license text must be one of the acceptable licenses specified on http://fedoraproject.org/wiki/Licensing:Main

Additional info:
The upstream copyright holder for jsmin has repeatedly rejected requests to correct his broken license. This is not viewed as a resolvable issue, therefore this bundled code must be removed from Fedora.

[1] https://bugzilla.redhat.com/show_bug.cgi?id=455507
Comment 1 Tom "spot" Callaway 2012-08-08 11:25:35 EDT
python-webassets-0.7.1-1.fc18 has jsmin removed. The damage is already done on the older branches, so I'm not going to "fix" it there.