On 19-Jan-2018, Russ Allbery wrote:
> Ben Finney <bignose@debian.org> writes:
>
> > Why the entire contents? The only thing that clause requires is “the
> > attribution notices contained within such NOTICE file”.
>
> Let's make this more concrete, because I'm not sure you understand
> the nature of the problem.
We may be describing different problems. I am responding to a bug
report that claims:
Apache 2.0 requires distributing any NOTICE file along with
derivative works […]
and I'm asking how that assertion squares with the text of the
license.
> Here's an example of a NOTICE file from a real Debian package:
>
> […]
>
> What parts of this do you think are attribution notices?
> What parts of this do you think a Debian developer would naturally
> include in debian/copyright?
I can't claim to know what an unspecified Debian developer would
naturally do.
You appear to be asking that to make the point that it's difficult to
maintain transcribed information when that information is subject to
change; I agree with that point.
That point is not special to the Apache License 2.0 requirements.
That point also doesn't support making a Lintian error for failing to
duplicate information that, when the Debian Policy requirements are
satisfied by transcribing that information into the ‘copyright’ file
installed with every binary package, entirely satisfies the Apache
License 2.0 §4(d) requirements.
> Important additional piece of information: other than in this file,
> the string "The Danish CLARIN Consortium" appears nowhere in the
> upstream source distribution, and the string "The National Research
> Council of Canada" appears only here and in a CREDITS file.
I don't see how that's relevant to the justification of what the
Apache License 2.0 requires.
Either that information is required in the ‘copyright’ file (because
it is attribution notices needed for copyright information), or
they're not attribution notices and so the Apache License 2.0 doesn't
require us to distribute that information.
If there isn't a special requirement on us to copy the ‘NOTICE’ file
in addition to the existing Debian policy requirements – and my
reading of this bug report leads me to conclude there is no such
special requirement – I don't see why we'd impose a Lintian error tag
for that.
--
\ “[I]t is impossible for anyone to begin to learn that which he |
`\ thinks he already knows.” —Epictetus, _Discourses_ |
_o__) |
Ben Finney <bignose@debian.org>
Attachment:
signature.asc
Description: PGP signature