Hi,

+1 (binding) There some minor license issues that can be fix next release

I checked:
- LICENSE changes look good, a couple of minor issues (see below)
- NOTICE files fine
- one binary file in mynewt manager [1] - I don’t 100% sure this is compiled 
code but you may want to consider removing it
- all needed source file have ASF headers
- can compile from source

In the core LICENSE you mention MQTT as being under a EPL 1.0 license. That’s 
category B and can’t be included in an Apache source distribution, it is 
however  actually under EDL which is Category A and can be included. The 
correct license in full is included so please fix the typo in the LICENSE for 
the next release.

In the mynewt manger:
- In LICENSE structs is mentioned twice I add the send one should be another 
product name given the link?
- the crypto libraries also include code based on public domain code e.g. [2] 
you may want to add this to license. There’s about a dozen instances from a 
couple of different sources.
- Missing BSD license for pkg errors [3] and these file licensed by apple [4] 
and this [5] note the terms of the license [6]

Thanks,
Justin

1. 
apache-mynewt-newtmgr-1.3.0/vendor/golang.org/x/crypto/ed25519/testdata/sign.input.gz
2. 
apache-mynewt-newtmgr-1.3.0/vendor/golang.org/x/crypto/curve25519/const_amd64.h
3. apache-mynewt-newtmgr-1.3.0/vendor/github.com/pkg/errors/LICENSE
4. apache-mynewt-newtmgr-1.3.0/vendor/golang.org/x/net/html/testdata/webkit/
5. 
apache-mynewt-newtmgr-1.3.0/vendor/golang.org/x/net/html/charset/testdata/README
6. https://www.w3.org/Consortium/Legal/2008/04-testsuite-license

Reply via email to