On Tue, 2012-11-06 at 14:25 +0100, Alec Leamas wrote: > Im considering to package the Spotify client [1]: This is a binary > without sources aimed for the nonfree section. Two issues are not > immediately clear to me: > > -Package has a frightening attachment of included licenses [2]. Do I > need to sort out all of these in the License: tag?! Or is there a > loophole to just use "Re-distributable, no changes permitted" , which is > the overall conditions from Spotify? > > - To make things work, I need to bundle some old libs (libssl, > libcrypto) since I can't relink the spotify binary blob. Is this OK; > given that these libs are private and not visible to other packages? > > Anyone, out there? > > --alec > > > [1] http://community.spotify.com/t5/Desktop-Linux/bd-p/spotifylinux > [2] http://leamas.fedorapeople.org/licenses.xhtml
I sure wouldn't mind seeing this. Not sure what advice to give you on licensing, but I wouldn't see the bundling as a deal-breaker as long as you were willing to keep an eye on vulnerabilities in the bundled libs. If the list's consensus is to go for it, I'd be happy to review it. Jonathan
