Incorrect license of cargo-core-uberjar

Description

The license of cargo itself and cargo-core-uberjar is Apache License 2.0 but the cargo-core-uberjar artifact contains files having LGPL license (coming transitively from JOnAs through repackaging):

cargo-core-uberjar-1.7.5-sources.jar/org/ow2/jonas/tools/configurator/api/JDBCConfiguration.java cargo-core-uberjar-1.7.5-sources.jar/org/ow2/jonas/tools/configurator/api/JonasConfigurator.java cargo-core-uberjar-1.7.5-sources.jar/org/ow2/jonas/tools/configurator/Jonas.java

I'm afraid that also code contained in cargo-core-uberjar-1.7.5-sources.jar/org/ow2/jonas/tools/configurator/configurator-impl.jar is covered by LGPL.

IANAL but if a library contains some LGPL code then the library must be either under GPL or LGPL. In any case, current state is wrong.

I see following options how this can be fixed:

  1. LGPL code is removed from the uberjar, dependency is made optional for those who need it

  2. JOnAs code re-used in Cargo is updated to Apache License 2.0 (or anything compatible with it)

  3. LGPL is applied to cargo-core-uberjar

I prefer going with option 1). Going with option 3) would not allow me to use cargo in my project.

Activity

Show:

S. Ali Tokmen July 16, 2019 at 5:44 PM

Cool, I'll perform the release now

Lukas Jungmann July 16, 2019 at 9:13 AM

Current 1.7.6-SNAPSHOT looks good to me. Thanks!

Lukas Jungmann July 10, 2019 at 10:12 PM

Will take a look at this and get back to you by Tue next week. Thanks!

S. Ali Tokmen July 10, 2019 at 10:05 PM

Hi Lukas

Excellent I performed now multiple commits on master to implement the following:

  • Updated the uberjar definition as suggested, i.e. that it does have the Codehaus Cargo JOnAS container but not the LGPL classes / dependencies from OW2 JOnAS

  • Updated the samples so that they only add OW2 JOnAS Configurator to the test classpath

  • Updated the documentation for the OW2 JOnAS 4.x and 5.x containers to explain the requirement for the configurator requirement for Java and ANT

  • Added new tests, to check that:

    1. The Maven 2 / Maven 3 plugin can use JOnAS automatically, with all dependencies included

    2. The uberjar doesn’t have the OW2 classes in it

Would you mind to also have a look and let me know if all looks good now?

Thank you

Lukas Jungmann July 10, 2019 at 3:05 PM

That should do the trick too

Fixed

Details

Assignee

Reporter

Fix versions

Affects versions

Priority

Created July 3, 2019 at 6:52 PM
Updated July 16, 2019 at 5:46 PM
Resolved July 16, 2019 at 5:44 PM