Package: wnpp Owner: Loic Dachary (OuoU) <loic@debian.org> Severity: wishlist * Package name : libsignal-service-java Version : 2.7.1 Upstream Author : Open Whisper Systems * URL or Web page : https://github.com/signalapp/libsignal-service-java * License : GPLv3 Description : A Java library for communicating via Signal A Java/Android library for communicating with the Signal messaging service. The Signal encryption protocol is a stateful protocol, so libsignal-service users need to implement the storage interface SignalProtocolStore, which handles load/store of your key and session information to durable media. This library is useful, for instance, to implement CLI tools to dialog with the Signal servers such as signal-cli[0]. About the portability to Debian GNU/Linux: the library is not portable to Debian GNU/Linux as-is. However patches are available to make that possible[1]. The are consistently maintained and released under the same license by their author. About the license: I assume the license is GPLv3 because https://github.com/signalapp/libsignal-service-java/blob/master/LICENSE contains it. The android/build.gradle and java/build.gradle files further confirm this licensing choice. The string gpl (case insensitive) is not found anywhere else in the sources. However, the README claims it is AGPLv3 and this inconsistency was reported in 2017 but not addressed[2]. I'm inclined to think this is not a blocking problem and that we can reasonably conclude the library is licensed under the GPLv3. I would be interested in the opinion of people with more experience in asserting the conditions under which a software is actually releases when confronted to similar inconsistencies. [0] https://github.com/AsamK/signal-cli [1] https://github.com/Turasa/libsignal-service-java [2] https://github.com/signalapp/libsignal-service-java/issues/42
Attachment:
signature.asc
Description: OpenPGP digital signature