[
https://issues.apache.org/jira/browse/KARAF-7976?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17998382#comment-17998382
]
Jean-Baptiste Onofré edited comment on KARAF-7976 at 7/5/25 4:38 PM:
---------------------------------------------------------------------
I don't think these classes are actually coming from OpenJDK or JDK. AFAIR, it
came from Geronimo Specs and other Apache projects.
Anyway, I don't think we are still using this, so I will do a cleanup.
was (Author: jbonofre):
For JAX-RS, I think it's from Apache CXF. For java XML, I don't remember.
Anyway, I don't think we are still using this, so I will do a cleanup.
> Karaf appears to include GPL licensed code
> ------------------------------------------
>
> Key: KARAF-7976
> URL: https://issues.apache.org/jira/browse/KARAF-7976
> Project: Karaf
> Issue Type: Task
> Components: karaf
> Reporter: PJ Fanning
> Assignee: Jean-Baptiste Onofré
> Priority: Major
>
> The ASF does not allow Apache projects to use GPL code.
> https://www.apache.org/legal/resolved.html
> Here is one example but there are other classes in your karaf repo that
> appear to be copies of Java built-in javax.xml classes. Those javax.xml
> classes are GPL licensed regardless of what header you have put on them -
> unless someone from Oracle has granted to them to your project so that you
> can change the license.
> https://github.com/apache/karaf/blob/fa669fb5a54b045b486a312fd4e43bda53c8b7d0/specs/java.xml/src/main/java/javax/xml/parsers/SAXParserFactory.java
> The original file with its GPL license header.
> https://github.com/openjdk/jdk/blob/5e40fb6bda1d56e3eba584b49aa0b68096b34169/src/java.xml/share/classes/javax/xml/parsers/SAXParserFactory.java
> I've seen some of these javax classes appear in standalone jars like stax-api
> and those are often dual licensed, eg CDDL and GPL. CDDL is still Category B
> so we wouldn't be able to include source with that license either.
> I would appreciate if someone could review this soon. I will bring this to
> the attention of the ASF Legal team if we need to get more clarification.
> There may be a reason to allow you to have this source code but could you
> share it here?
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
