[Fedora-legal-list] msv (xsdlib) licensing review
As part of the jaxb 4.0.2 -> 4.0.3 update, part of this package is
needed for its code generation. Therefore, I would like to package it in
Fedora. This package has complex licensing which is why I am asking for
a review. Note that I only need the "xsdlib" subdirectory.
I only need a stripped-down version of this package as if by
downloading:
https://github.com/xmlark/msv/archive/refs/tags/msv-2022.7.tar.gz
and running (inside the msv-msv-2022.7 directory):
find . -mindepth 1 -maxdepth 1 -type d ! -name 'xsdlib' -exec rm -rf {} +
rm -rf xsdlib/src/main/resources
rm -rf xsdlib/src/test
grep -l -r --ignore-case 'proprietary' | xargs rm -v
Most problematic license files are: copyright.txt and license.txt in
https://github.com/xmlark/msv/tree/main/docs/xsdlib. To my knowledge,
all files that remained use explicit BSD-3-Clause or Apache-1.1.
Question is whether we could have removed the copyright.txt and
license.txt files in the first place.
Current upstream: https://github.com/xmlark/msv
Previous package in Fedora (used different source repository):
https://koji.fedoraproject.org/koji/packageinfo?packageID=2576
Previous bug related to licensing:
https://bugzilla.redhat.com/show_bug.cgi?id=87684
Also grep --ignore-case for "proprietary" "confidential",
"nuclear".
--
Marián Konček