Bug 879615 - maven-jflex-plugin: GPL code linked with GPL-incompatible libraries
Summary: maven-jflex-plugin: GPL code linked with GPL-incompatible libraries
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Fedora
Classification: Fedora
Component: maven-jflex-plugin
Version: 18
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Mikolaj Izdebski
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 879620
TreeView+ depends on / blocked
 
Reported: 2012-11-23 12:49 UTC by Mikolaj Izdebski
Modified: 2013-01-09 21:37 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
: 879620 (view as bug list)
Environment:
Last Closed: 2013-01-09 21:37:33 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Mikolaj Izdebski 2012-11-23 12:49:28 UTC
Description of problem:
maven-jflex-plugin is licensed under GPL (any version), but it links with GPL-incompatible code (at least classworlds, which is licensed under Plexus license [1], but it also likely that it is liked with CPL-licensed code of junit and some ASL 1.1 code somewhere).

Possible solutions:
1) rewrite the plugin from scratch (only ~400 lines of code)
2) remove the package from Fedora and port other packages not to depend on it
3) obtain GPL classpath exception from copyright holders (maven-jflex-plugin links to a GPL library - jflex, so the exception for this library would be needed too)

Version-Release number of selected component (if applicable):
1.4.3-8

[1] https://fedoraproject.org/wiki/Licensing/Plexus_Classworlds_License

Comment 1 Tom "spot" Callaway 2012-11-27 15:28:36 UTC
I think this is something that needs to be raised with upstream.

Comment 2 Fedora Admin XMLRPC Client 2013-01-09 10:10:32 UTC
This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.

Comment 3 Mikolaj Izdebski 2013-01-09 21:37:33 UTC
Package not needed any longer (dependency removed from qdox package).
Release engineering has been notified to block this package:
https://fedorahosted.org/rel-eng/ticket/5440


Note You need to log in before you can comment on or make changes to this bug.