On Mon, 17 Mar 2025 at 18:54, zyx via Podofo-users
<podofo-users@lists.sourceforge.net> wrote:
> it's a long time, as long as I already forgot details of the re-
> licensing, thus I'm sorry as I believe it had been answered long ago...
> [...] Or is there anything blocking to re-license for the 1.0?

I don't know if I wrote it here but the dual MPL2/LGPL relicensing
efforts have been paused: it was a demanding task and I thought it
would have been better to finish API review first to keep the focus.
So at the moment I have no idea how long it will take to finish the
task: It's about reviewing all the commits I collected, decide which
ones configure a copyright attribution (not all of them do), prepare a
message and send it to contributors, wait and handle the situation in
case of no or negative answer.

> By any chance, did you mean _before_ the 1.0 release?

I meant after. Yes, it would be best to have it for 1.0, but if the
task proves to be not so easy I don't think it's that big issue to
relicense with 1.1 or a later version: relicensings can happen
suddenly. Anyway, I will consider resuming the effort immediately
after releasing a 1.0-rc (this will happen when the TODO list for 1.0
is fully cleared).

> By the way, thank you for keeping the library alive.

PoDoFo is essential for my job, but only 50% of my contributions are
paid, the rest is volunteering. I crave for PoDoFo to be still
relevant, and I consider the API review and relicensing efforts to be
important for that.

> I did not have time to port the litePDF project to the latest bits yet,
> also because I failed to port the podofo-sign tool earlier (the API
> changes did not make it clear to me what to do, hence the failure on my
> side; you might find my mail on the list from almost two years ago with
> a little patch attached).

I remember the little patch and I applied some (if not all) of the
changes already. Anyway, there's a new high level API for signing:
seriously, today signing a document with PoDoFo is a few lines of
code[1] and you get modern PAdES-B compliant signatures, as opposed to
legacy PKCS7 ones. Deferred signing is also supported (eg. for signing
with tokens or remote services). Tests are a good source for usage of
the newer APIs today.

Greetings,
Francesco

[1] https://github.com/podofo/podofo#user-content-faq


_______________________________________________
Podofo-users mailing list
Podofo-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/podofo-users

Reply via email to