[ 
https://issues.apache.org/jira/browse/HTTPCLIENT-2317?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17817706#comment-17817706
 ] 

Neil C Smith commented on HTTPCLIENT-2317:
------------------------------------------

[~hboutemy] can I clarify some things in your comments, in particular with 
differing concerns that Jan and I have in terms of consuming this artefact in 
another ASF project.

In particular, do you consider the plain ASL wrong here?  What we have here is 
effectively statically linked MPL "code" inside a single binary artefact.  So, 
according to MPL 3.2.b and 3.3.3 this artefact is being redistributed in 
"executable" form under terms of choice, which for us will always be solely 
under Apache License?  And, if so, should the LICENSE file need to include 
extra licenses where something in a binary artefact is redistributed under our 
license _within the context in which it is found_?

> The license in the httpclient5 artifact on Maven central is not correct.
> ------------------------------------------------------------------------
>
>                 Key: HTTPCLIENT-2317
>                 URL: https://issues.apache.org/jira/browse/HTTPCLIENT-2317
>             Project: HttpComponents HttpClient
>          Issue Type: Bug
>    Affects Versions: 4.5.14, 5.3.1, 5.4-alpha1
>            Reporter: Jan Lahoda
>            Priority: Minor
>
> Looking at the 'httpclient5' artifact on Maven central, like:
> [https://repo1.maven.org/maven2/org/apache/httpcomponents/client5/httpclient5/5.3.1/httpclient5-5.3.1.jar]
> [https://repo1.maven.org/maven2/org/apache/httpcomponents/client5/httpclient5/5.4-alpha1/httpclient5-5.4-alpha1.jar]
> these contain 'mozilla/public-suffix-list.txt', which is under MPL 2.0, but 
> the license file embedded in these artifacts (META-INF/LICENSE) does not 
> contain the MPL 2.0.
>  
> The binary file downloadable from Apache download server has the correct 
> license file:
> [https://dlcdn.apache.org//httpcomponents/httpclient/binary/httpcomponents-client-5.3.1-bin.tar.gz]
>  
> It would be nice if the artifacts on Maven central could have the correct 
> content of the license file.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@hc.apache.org
For additional commands, e-mail: dev-h...@hc.apache.org

Reply via email to