Thanks, Justin. Somehow I completely forgot to update the LICENSE files this time around. I'll cancel the vote.
Chris On Tue, Nov 29, 2016 at 02:13:02PM +1100, Justin Mclean wrote: > Hi, > > -1 binding due to LICENSE issues (see below) and cryptography issues > (tinycrypt and polarssl) and there’s a license incompatible with Apache > license 2.0 in the release. [5] (4 clause BSD) > > It looks like tinycrypt and polarssl has been added since last release but > not listed here(?) [2] > > I checked: > - artefacts include incubating > - signatures and hashes good > - NOTICE is good > - LICENSE is missing quite a few items (see below) > - DISCLAIMER exists > - All source files have headers > - No unexpected binary files in release > > The LICENSE files for core and newt are identical to last release but several > 3rd party items have been added > > For core: > - BSD licensed tiny crypt copyright (c) 2015, Intel Corporation [3] > - BSD license PPP copyright (c) 1994-2002 Paul Mackerras [4]+ > - BSD license CHAP/MD5 copyright (c) 1994-2002 Paul Mackerras [4]+ > - BSD license CHAP copyright (c) 1995 Eric Rosenquist. [4] > - PD license EAP for PP 2001 by Sun Microsystems, Inc. [4] > - BSD license PPP Encryption copyright (c) 2002 Google, Inc.[4] > - BSD license EUI64 copyright (c) 1999 Tommi Komulainen[4]+ > - BSD license assorted files copyright (c) 1984-2000 Carnegie Mellon > University. [4]+ > - MIT licensed PPP copyright (c) 2003 by Marc Boucher and Copyright (c) 1997 > Global Election Systems Inc. [4]+ > - BSD licensed files copyright 2016 STMicroelectronics [6] > - BSD licensed code based on XySSL copyright (C) 2006-2008 Christophe Devine > [7] > - BSD licensed polarssl copyright (C) 2009 Paul Bakker [7] > - BSD license SNMP copyright (c) 2001, 2002 Leon Woestenberg and copyright > (c) 2001, 2002 Axon Digital Design B.V. [8] (and other files) > - BSD licensed lwIP TCP/IP stack copyright (c) 2001, 2002 Swedish Institute > of Computer Science. [9] > - BSD licensed IGMP copyright (c) 2002 CITEL Technologies Ltd. [10] > - BSD license AutoIP copyright (c) 2007 Dominik Spies [11] > - BSD license files copyright (c) 2013 - 2015, Freescale Semiconductor, Inc. > [12] > - BSD licensed coap copyright 2016 Intel Corporation and 2013, Institute for > Pervasive Computing, ETH Zurich [13] > - and about a dozen others (including ARM and Nordic Semiconductor) as I gave > up at this point > > Note the lines marked + have an additional clause (required notice) that > effects the NOTICE file (I think). > > For newt: > - PD licensed code copyright (c) 2012 Miki Tebeka [14] > - 20 or so MIT(?) licensed files [15] copyright Ugorji Nwoke [15] > - MIT licensed go coap copyright (c) 2013 Dustin Sallings [16] > - BSD licensed gatt copyright (c) 2014 PayPal Inc [17] > - MIT licensed xpc [18] > - MIT licensed gioctl copyright (c) 2014 Mark Wolfe [19] > > This file [5] is licensed under a 4 clause BSD license which is not on the > list of approved licenses. > > Also looks like you download page need updating to provide links to download > the voted on artefacts for the last release. [1] > > Thanks, > Justin > > 1. https://mynewt.apache.org/download/ > 2. https://www.apache.org/licenses/exports/ > 3. ./apache-mynewt-core-1.0.0-b1-incubating/crypto/tinycrypt/* > 4. ./apache-mynewt-core-1.0.0-b1-incubating/net/ip/lwip_base/src/netif/ppp/* > 5. > ./apache-mynewt-core-1.0.0-b1-incubating/net/ip/lwip_base/src/netif/ppp/pppoe.c > 6. > ./apache-mynewt-core-1.0.0-b1-incubating/hw/mcu/stm/stm32f4xx/src/ext/Drivers/CMSIS/Device/ST/STM32F4xx/* > 7. > ./apache-mynewt-core-1.0.0-b1-incubating/net/ip/lwip_base/src/netif/ppp/polarssl/* > 8. > ./apache-mynewt-core-1.0.0-b1-incubating/net/ip/lwip_base/include/lwip/apps/snmp.h > 9. ./apache-mynewt-core-1.0.0-b1-incubating/net/ip/lwip_base/ > 10. > ./apache-mynewt-core-1.0.0-b1-incubating/net/ip/lwip_base/src/core/ipv4/igmp.c > 11. > ./apache-mynewt-core-1.0.0-b1-incubating/net/ip/lwip_base/src/core/ipv4/autoip.c > 12. > ./apache-mynewt-core-1.0.0-b1-incubating/hw/mcu/nxp/src/ext/sdk-2.0-frdm-k64f_b160321/devices/MK64F12/* > 13. ./apache-mynewt-core-1.0.0-b1-incubating/net/oic/src/messaging/coap/* > 14. > ./apache-mynewt-newt-1.0.0-b1-incubating/newtmgr/vendor/github.com/Sirupsen/logrus/alt_exit.go > 15 > ./apache-mynewt-newt-1.0.0-b1-incubating/newtmgr/vendor/github.com/ugorji/go/codec/*.go > 16 > ./apache-mynewt-newt-1.0.0-b1-incubating/newtmgr/vendor/github.com/dustin/go-coap/LICENSE > 17 > ./apache-mynewt-newt-1.0.0-b1-incubating/newtmgr/vendor/github.com/runtimeinc/gatt/* > 18 > ./apache-mynewt-newt-1.0.0-b1-incubating/newtmgr/vendor/github.com/runtimeinc/gatt/xpc/* > 19. > ./apache-mynewt-newt-1.0.0-b1-incubating/newtmgr/vendor/github.com/runtimeinc/gatt/linux/gioctl/* > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
