Licenses Investigation

Dependency

Files

License

Issues

Notes

Ant

ant-optional-1.5.1.jar

Apache 1.1

?

License file found inside the JAR

XML API (part of Xerces?)

xml-apis-1.0.b2.jar

Apache 1.1

ad

The jar file contains also pointers to the W3C software notice and license

Apache Batik

batik-awt-util-1.6.jar
batik-bridge-1.6.jar
batik-css-1.6.jar
batik-dom-1.6.jar
batik-ext-1.6.jar
batik-gvt-1.6.jar
batik-parser-1.6.jar
batik-script-1.6.jar
batik-svg-dom-1.6.jar
batik-svggen-1.6.jar
batik-transcoder-1.6.jar
batik-util-1.6.jar
batik-xml-1.6.jar

Apache 2.0

v3

Jakarta Commons

commons-beanutils-1.7.0.jar
commons-codec-1.2.jar
commons-collections-3.1.jar
commons-dbcp-1.2.2.jar
commons-httpclient-3.0.1.jar
commons-jxpath-1.2.jar
commons-lang-2.1.jar
commons-logging-1.1.1.jar
commons-pool-1.3.jar

Apache 2.0

v3

Log4J

log4j-1.2.12.jar

Apache 2.0

v3

Why are we shipping this in the first place?

Xerces

xml-apis-xerces-2.7.1.jar xercesImpl-2.7.1.jar

Apache 2.0

v3

The jar file contains also pointers to the W3C software notice and license. The site points to Apache 1.0, but the jar contains a copy of the Apache 2.0 one

JSR-275

jsr-275-1.0-beta-2.jar

BSD style

ad

The license reference comes from the pom.xml embedded in the jar

PicoContainer

picocontainer-1.2.jar

BSD style

?

They simply point a generic description of the BSD license, which actually does not make much sense (http://www.opensource.org/licenses/bsd-license.php)

PostgreSQL JDBC driver

postgresql-8.1-407.jdbc3.jar

BSD style

ad

HSQLDB

hsqldb-1.8.0.7.jar

Custom, BSD style

ad

JAI-ImageIO

jai_imageio-1.1.jar
jai_codec-1.1.3.jar

Custom, BSD style

ad

Ad, plus the (in)famous "we're especially not reliable if you are using this in a nuclear facility" clause

Java look&feel icons

jlfgr-1.0.jar

Custom, BSD style

ad

The license is contained in the root of the jar, it's custom, but it contains a BSD style ad requirement. Can someone else have a look?

JDOM

jdom-1.0.jar

Custom, BSD style

ad

The license file is contained in the jar META-INF

XML Pull parser

xpp3-1.1.3.4.O.jar

Custom, BSD style

ad

Eclipse EMF

ecore-2.2.2.jar

EPL

epl

Eclipse XSD

xsd-2.2.2.jar

EPL

epl

JSQLParser

jsqlparser-0.3.14.jar

LGPL v 2.0

ok

The file comes with no license, the official site does not say anything, the SF project page says LGPL (I assumed v 2.0 since the project is old)

JTS

jts-1.9.jar

LGPL v 2.0

ok

PostGIS driver

postgis-driver-1.0.jar

LGPL v 2.0

ok

Actually checked the 1.3.5 version of the driver, could not find license for 1.0 version. Also wondering if we are making any use of this jar.

ImageIO-EXT

imageio-ext-customstreams-1.0.3.jar
imageio-ext-arcgrid-1.0.3.jar
imageio-ext-gdal-1.0.3.jar
imageio-ext-gdaldted-1.0.3.jar
imageio-ext-gdalecw-1.0.3.jar
imageio-ext-gdalecwjp2-1.0.3.jar
imageio-ext-gdalehdr-1.0.3.jar
imageio-ext-gdalerdasimg-1.0.3.jar
imageio-ext-gdalframework-1.0.3.jar
imageio-ext-gdalkakadujp2-1.0.3.jar
imageio-ext-gdalmrsid-1.0.3.jar
imageio-ext-gdalmrsidjp2-1.0.3.jar
imageio-ext-gdalnitf-1.0.3.jar
imageio-ext-geocore-1.0.3.jar
imageio-ext-utilities-1.0.3.jar

LGPL v 3.0

imageio-ext-imagereadmt and imageio-ext-tiff are released as Custom, BSD style

ok

Most part of the source code for the Image I/O-Ext Project is licensed under the terms of the GNU Lesser General Public License version 3.0 of the License.
Some modules are SUN's JAI-ImageIO derivative work and are therefore released under Custom, BSD style license as listed in the table. See details here

imageio-ext-imagereadmt-1.0.3.jar

Custom, BSD Style

ad

The text of the Custom BSD style license is contained in the imageio-ext-imagereadmt-BSD-LICENSE.txt information file

imageio-ext-tiff-1.0.3.jar

Custom, BSD Style

ad

The text of the Custom BSD style license is contained in the imageio-ext-tiff-BSD-LICENSE.txt information file

GeoAPI

geoapi-2.2-M1.jar

Unclear

?

The site does not say, the pom does not contain a reference to the license. I guess LGPL v2.0 but I did not take the time to inspect a source file header

Vecmath

vecmath-1.3.1.jar

Unclear

?

The site says GPL v 2.0 + classpath exception, but the contents of the jar have a legal.txt file with a custom license. Needs investigation

ad

Advertisement clause

v3

Compatible with LGPL v3.0, but not with v2.0 according to GNU

?

Unknown, there may be issues

ok

Compatible with LGPL V2.0

epl

Incompatible according to GNU, compatible to a certain extent according to the Eclipse foundation