[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#885042: Check inclusion of Apache 2.0 NOTICE files



On 22-Dec-2017, Russ Allbery wrote:

> Apache 2.0 requires distributing any NOTICE file along with
> derivative works […]

My reading of the license text doesn't match that. I think you are
referring to Apache License version 2.0, § 4 (d):

      (d) If the Work includes a "NOTICE" text file as part of its
          distribution, then any Derivative Works that You distribute
          must include a readable copy of the attribution notices
          contained within such NOTICE file, excluding those notices
          that do not pertain to any part of the Derivative Works, in
          at least one of the following places: within a NOTICE text
          file distributed as part of the Derivative Works; within the
          Source form or documentation, if provided along with the
          Derivative Works; or, within a display generated by the
          Derivative Works, if and wherever such third-party notices
          normally appear. The contents of the NOTICE file are for
          informational purposes only and do not modify the License.
          You may add Your own attribution notices within Derivative
          Works that You distribute, alongside or as an addendum to
          the NOTICE text from the Work, provided that such additional
          attribution notices cannot be construed as modifying the
          License.

That does require “Derivative Works […] must include a readable copy
of the attribution notices contained within such NOTICE file […] in at
least one of the following places: […] within the Source form or
documentation, if provided along with the Derivative Works; […]”.

Do you think the routine inclusion of those notices, in the package's
‘copyright’ file, does not satisfy the above clause? I think it does:
that file is installed in the documentation along with the package.

So, I am not seeing how you think the ‘NOTICE’ file itself must be
duplicated.

-- 
 \     “Pinky, are you pondering what I'm pondering?” “I think so, but |
  `\          where will we find an open tattoo parlor at this time of |
_o__)                                   night?” —_Pinky and The Brain_ |
Ben Finney <bignose@debian.org>

Attachment: signature.asc
Description: PGP signature


Reply to: