Created attachment 23297 [details] Patch to update the NOTICE and LICENSE files As discussed on the mailing list, I did a quick review of the main components included in the latest beta release and updated the LICENSE and NOTICE files accordingly. See the attached patch for the proposed changes. The updated NOTICE file only contains the copyright attributions required by the various included licenses, and the LICENSE file embeds the full license texts (or equivalent) of the included components. Some notes: * I'm not sure if the chunks_parse_cmds.tbl was re-licensed under the ALv2 or if the author granted ASF a CLA-style license to distribute the file. In the latter case we wouldn't need to include the entry I've now added in the NOTICE file. * The DOM4J license has a weak advertising clause that I asked Apache Legal about. See https://issues.apache.org/jira/browse/LEGAL-43. The initial response suggests that the license is fine and that no extra credit beyond what I've already included is needed. * The JSR 173 API jar is another slightly troublesome case, see https://issues.apache.org/jira/browse/LEGAL-42. Early response from Apache Legal suggests that we should rather use the ALv2 version available from Apache Geronimo. * The XMLBeans NOTICE file is a bit complex. I've tried my best to identify which parts of XMLBeans are included in POI and to include only the relevant entries from the XMLBeans NOTICE. * I only reviewed the licensing of the included jar files (and the chunds_parse_cmds.tbl file). Are there source files (or non-jar binaries) within POI that are not under ALv2 or that have explicit NOTICE requirements?
Thanks! I see that Apache Geronimo uses Woodstox 3.2.0. From http://woodstox.codehaus.org/FAQ it says that it is available with an ASL 2.0 license. It would be good to switch this out as soon as we can.
Jukka, Thanks a lot. I applied your patch in r747303 along with the fix from Bug 46758. Since we don't use BEA's JSR 173 anymore, I removed its entries from LICENSE and NOTICE. > The XMLBeans NOTICE file is a bit complex. I've tried my best to identify >which parts of XMLBeans are included in POI and to include only the relevant >entries from the XMLBeans NOTICE. You've included the correct entries. POI only uses the main XMLBeans jar (xmlbeans-2.3.0.jar) which contains the code for W3C XML schemas and Piccolo XML Parser. Regards, Yegor
(In reply to comment #2) > Jukka, > > Thanks a lot. I applied your patch in r747303along with the fix from Bug > 46758. > Since we don't use BEA's JSR 173 anymore, I removed its entries from LICENSE > and NOTICE. There is still a reference to BEA in the NOTICE: > This product contains parts that were originally based on software from BEA. > Copyright (c) 2000-2003, BEA Systems, <http://www.bea.com/>. Regards, Dave
> > There is still a reference to BEA in the NOTICE: > > > This product contains parts that were originally based on software from BEA. > > Copyright (c) 2000-2003, BEA Systems, <http://www.bea.com/>. > > Regards, > Dave It's about XmlBeans. It was submitted to the Apache Incubator and Apache XML projects by BEA Systems in September 2003.