Hi Mike, Be careful of the findbugs annotations. While there are other projects that are indeed ALv2, it appears the canonical repo has this as LGPL [2]. Not sure if this is needed, but could be complicating in terms of the binary assemblies we would create.
There is a cleanroom implementation [1], but not sure how this would fit into the intent of what you are trying to do. Could you share some context of how you would be incorporating that source and/or library? Be sure to also consider all dependencies any target library would be incorporating. [1] https://github.com/stephenc/findbugs-annotations [2] https://github.com/findbugsproject/findbugs/tree/master/findbugs/src/java/edu/umd/cs/findbugs/annotations On Sat, Jun 23, 2018 at 1:12 PM Mike Thomsen <mikerthom...@gmail.com> wrote: > Disregard... There are apparently multiple projects out there that have the > same name and I found one that was GPL. The one this project uses > **appears** to be ASL 2.0, so I think we're good. > > On Sat, Jun 23, 2018 at 1:04 PM Mike Thomsen <mikerthom...@gmail.com> > wrote: > > > I found that Confluent has an Avro data generator project. Their code is > > ASL 2.0 with the caveat that it has a GPL dependency and they reference a > > GPL'd class in it. Can I bring this ASL 2.0 code into our code base or > do I > > have to treat it as GPL-tainted even if I remove the references to the > one > > annotation that was from a GPL'd library? > > > > > > > https://github.com/confluentinc/avro-random-generator/blob/master/src/main/java/io/confluent/avro/random/generator/Generator.java > > > > Thanks, > > > > Mike > > >