[
https://issues.apache.org/jira/browse/RYA-177?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15555457#comment-15555457
]
ASF GitHub Bot commented on RYA-177:
------------------------------------
Github user pujav65 commented on the issue:
https://github.com/apache/incubator-rya/pull/101
Sorry missed the jt dependency that was pulling those in. Let me know if
you see anything else being pulled in.
> Review License on Rya Dependencies
> ----------------------------------
>
> Key: RYA-177
> URL: https://issues.apache.org/jira/browse/RYA-177
> Project: Rya
> Issue Type: Task
> Affects Versions: 3.2.10
> Reporter: Aaron Mihalik
> Assignee: David W. Lotts
> Priority: Blocker
>
> * jgridshift:jgridshift appears to be LGPL licensed
> (https://github.com/floscher/jGridShift/blob/master/LICENSE). You may
> not use this software. It looks like it was not appropriately marked in
> its pom which is why the configuration from Rya's parent apache.pom did
> not catch it. This is brought in via org.geotools.xsd:gt-xsd-gml3.
> * colt (http://dst.lbl.gov/ACSSoftware/colt/) appears to be another
> brought in by com.tinkerpop.blueprints:blueprints-core
> * com.google.code.findbugs:jsr305 is another example of GPL licensing.
> While the artifact appears to have the ASL tagged on the pom, all
> Findbugs documentation states that the project is GPL.
> I would recommend to make a pass over your dependencies to verify that
> you aren't depending on any projects which are licensed with a license
> on this list: http://www.apache.org/legal/resolved.html#category-x. See
> http://www.apache.org/licenses/GPL-compatibility.html for more details.
> The above three examples were found via a brief glance.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
