Incorrect license of cargo-core-uberjar
Description
relates to
Activity
S. Ali Tokmen July 16, 2019 at 5:44 PM
Cool, I'll perform the release now

Lukas Jungmann July 16, 2019 at 9:13 AM
Current 1.7.6-SNAPSHOT looks good to me. Thanks!

Lukas Jungmann July 10, 2019 at 10:12 PM
Will take a look at this and get back to you by Tue next week. Thanks!
S. Ali Tokmen July 10, 2019 at 10:05 PM
Hi Lukas
Excellent I performed now multiple commits on master
to implement the following:
Updated the
uberjar
definition as suggested, i.e. that it does have the Codehaus Cargo JOnAS container but not the LGPL classes / dependencies from OW2 JOnASUpdated the
samples
so that they only add OW2 JOnAS Configurator to the test classpathUpdated the documentation for the OW2 JOnAS 4.x and 5.x containers to explain the requirement for the configurator requirement for Java and ANT
Added new tests, to check that:
The Maven 2 / Maven 3 plugin can use JOnAS automatically, with all dependencies included
The
uberjar
doesn’t have the OW2 classes in it
Would you mind to also have a look and let me know if all looks good now?
Thank you

Lukas Jungmann July 10, 2019 at 3:05 PM
That should do the trick too
The license of cargo itself and cargo-core-uberjar is Apache License 2.0 but the cargo-core-uberjar artifact contains files having LGPL license (coming transitively from JOnAs through repackaging):
cargo-core-uberjar-1.7.5-sources.jar/org/ow2/jonas/tools/configurator/api/JDBCConfiguration.java cargo-core-uberjar-1.7.5-sources.jar/org/ow2/jonas/tools/configurator/api/JonasConfigurator.java cargo-core-uberjar-1.7.5-sources.jar/org/ow2/jonas/tools/configurator/Jonas.java
I'm afraid that also code contained in
cargo-core-uberjar-1.7.5-sources.jar/org/ow2/jonas/tools/configurator/configurator-impl.jar
is covered by LGPL.IANAL but if a library contains some LGPL code then the library must be either under GPL or LGPL. In any case, current state is wrong.
I see following options how this can be fixed:
LGPL code is removed from the uberjar, dependency is made optional for those who need it
JOnAs code re-used in Cargo is updated to Apache License 2.0 (or anything compatible with it)
LGPL is applied to cargo-core-uberjar
I prefer going with option 1). Going with option 3) would not allow me to use cargo in my project.