Hi Justin, I read your comments carefully and found that the only gap was in ./third_party/rust-sgx-sdk and I am going to fix it soon.
- I did not see any license problem with crypto/src/lib.rs or its relation with https://github.com/skalenetwork/sgxwallet/blob/develop/LevelDB.cpp. - The GPL in ./third_party/wamr.patch is from a removed file. We do not add any GPL file in the patch. - common/rusty_leveldb_sgx is modified from https://github.com/dermesser/leveldb-rs that I think is a reimplementation of https://github.com/google/leveldb. - Those different copyright statements from Google, HP, Sun, Intel, Android, Ant Financial, XiaoMi and many many others use SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception. They are from third_party/wasm-micro-runtime. Correct me if I am wrong. Sincerely, He On 2023/05/15 06:55:58 Justin Mclean wrote: > Hi, > > A search for “General Public License” shows up in these files: > ./third_party/wamr.patch > ./third_party/rust-sgx-sdk/licenses/LICENSE-tlibc.txt > ./third_party/rust-sgx-sdk/licenses/LICENSE-common-inc.txt > ./third_party/rust-sgx-sdk/sgx_backtrace/sgx_backtrace_sys/libbacktrace/ltmain.sh > ./third_party/rust-sgx-sdk/sgx_backtrace/sgx_backtrace_sys/libbacktrace/configure > ./third_party/rust-sgx-sdk/sgx_backtrace/sgx_backtrace_sys/libbacktrace/config.guess > ./third_party/rust-sgx-sdk/sgx_backtrace/sgx_backtrace_sys/libbacktrace/missing > ./third_party/rust-sgx-sdk/sgx_backtrace/sgx_backtrace_sys/libbacktrace/config.sub > > There are also a number of file copyright the Free Software Foundation. (also > in libbacktrace) > > I’ve not looked at each one and the first couple do seem to be false > positives. However this file [1], which might incorrectly has a ASF header on > it, seems to be a 1:1 implementation of this [2]??? Even if it not file that > does look like 3rd party code to me. Do you know where it originally come > from? See also [4]. It seems the original is GPL licensed(?) and porting it > to another language wouldn’t change that. > > This file [2] looks to be licensed (or at least some of it) under the Mozilla > license and that is Category B and can’t be included in a source release. The > very first part of that file is license "Apache-2.0 WITH LLVM-exception” I’m > not sure that would be allowed ether. There are other files wth this license > in the source release. > > The LICENSE list three 3rd party piece of software: > third_party/wasm-micro-runtime > third_party/rust-sgx-sdk > common/rusty_leveldb_sgx > > But there is other 3rd party files in the source release, for instance > libunwind. Note also the number of different copyright statements fm Google, > HP, Sun, Intel, Android, Ant Financial, XiaoMi and many many others. > > Kind Regards, > Justin > > 1. crypto/src/lib.rs > 2. https://github.com/skalenetwork/sgxwallet/blob/develop/LevelDB.cpp > 3. ./third_party/wamr.patch > 4. https://teaclave.apache.org/teaclave/common/rusty_leveldb_sgx/ --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
