[java-sig-commits] [Bug 879615] New: maven-jflex-plugin: GPL code linked with GPL-incompatible libraries

[Red Hat Bugzilla]

Product: Fedora
https://bugzilla.redhat.com/show_bug.cgi?id=879615

Bug ID: 879615
           Summary: maven-jflex-plugin: GPL code linked with
                    GPL-incompatible libraries
           Product: Fedora
           Version: 18
         Component: maven-jflex-plugin
          Severity: unspecified
          Priority: unspecified
          Reporter: [e-mail]
            Blocks: 182235 (FE-Legal)

Description of problem:
maven-jflex-plugin is licensed under GPL (any version), but it links with
GPL-incompatible code (at least classworlds, which is licensed under Plexus
license [1], but it also likely that it is liked with CPL-licensed code of
junit and some ASL 1.1 code somewhere).

Possible solutions:
1) rewrite the plugin from scratch (only ~400 lines of code)
2) remove the package from Fedora and port other packages not to depend on it
3) obtain GPL classpath exception from copyright holders (maven-jflex-plugin
links to a GPL library - jflex, so the exception for this library would be
needed too)

Version-Release number of selected component (if applicable):
1.4.3-8

[1] https://fedoraproject.org/wiki/Licensing/Plexus_Classworlds_License