Package home | Report new bug | New search | Development Roadmap Status: Open | Feedback | All | Closed Since Version 2.1.2

Doc Bug #20433 Please, don't deliver outdated license file in sources
Submitted: 2014-10-24 20:19 UTC
From: midget Assigned: tkli
Status: Closed Package: Net_URL2 (version 2.1.0)
PHP Version: Irrelevant OS: Debian GNU/Linux
Roadmaps: (Not assigned)    
Subscription  


 [2014-10-24 20:19 UTC] midget (Dario Minnucci)
Description: ------------ Hi, Sources contains outdated license file 'Net_URL2-2.1.0/docs/BSD-3-CLAUSE-Heyes' that doesn't match license headers in 'Net_URL2-2.1.0/Net/URL2.php' * Copyright (c) 2007-2009, Peytz & Co. A/S * All rights reserved. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * * * Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * * Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in * the documentation and/or other materials provided with the distribution. * * Neither the name of the Net_URL2 nor the names of its contributors may * be used to endorse or promote products derived from this software * without specific prior written permission. * * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY * OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. Please, remove 'Net_URL2-2.1.0/docs/BSD-3-CLAUSE-Heyes' from delivered sources. Thanks in advance.

Comments

 [2014-10-26 01:36 UTC] tkli (Tom Klingenberg)
-Status: Open +Status: Feedback
Sorry for the ambiguity, but that license is not outdated. It has been identified as the original license (so far) and per requirements of the licensing terms it has to be kept with source distribution. Are you running into a problem with a license scanner or similar? Please provide more information, so a better decision can be made to deal with your issue.
 [2014-10-26 19:37 UTC] midget (Dario Minnucci)
Hi Tom, Thanks for the quick answer. This issue has been brought up to me on the Debian Bug Tracker System [0]. I've compare the license in question and the one on the top of 'Net_URL2-2.1.0/Net/URL2.php' and they seems ambiguous (in year coverage and copyright holders), so I removed 'Net_URL2-2.1.0/docs/BSD-3-CLAUSE-Heyes' from the Debian package. I believe that, if 'Net_URL2-2.1.0/docs/BSD-3-CLAUSE-Heyes' is the original license, this should appears on the top of 'Net_URL2-2.1.0/Net/URL2.php' file. If both are correct, I'll can state that in or 'debian/copyright' file [1]. Please, clarify this issue to know how to proceed. Thanks in advance. [0] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=764882 [1] http://metadata.ftp-master.debian.org/changelogs/main/p/php-net-url2/unstable_copyright
 [2014-10-29 00:28 UTC] tkli (Tom Klingenberg)
Hi Dario, sorry for not taking care for this earlier. It's actually pretty simple as it turns out. This is the license file for docs/example.php So both are correct, as BSD-3-Clause can be used as a per-file-license. The copyright was never unstable. This is also properly documented in the docblock on top of docs/example.php: * This file contains code Copyright (c) 2002-2003, Richard Heyes, * See BSD-3-CLAUSE-Heyes, * Author: Richard Heyes <richard at php net> I might also add another one into the docs folder for "Peytz & Co. A/S". In the report in https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=764882 it has just been confused with the wrong file, that license file does not apply for Net/URL2.php. If you have packaged docs/BSD-3-CLAUSE-Heyes so that when installed results being superset of all information stored into the file /usr/share/doc/php-net-url2/copyright then this was wrong. If you want to combine the copyright information of the whole package into a single file, then you would need to take it from the docblock on top of Net/URL2.php and if it ships with docs/example.php *additionally* from docs/BSD-3-CLAUSE-Heyes. Please let me know what could be done to make this more clear and less burdensome for packaging and downstream distribution from your point of view.
 [2014-10-29 14:08 UTC] midget (Dario Minnucci)
Hi Tom, Thanks for clarifying this issue. I'll fix the Debian package ASAP. Fee free to tag this issue as 'solved' Regards,
 [2014-10-31 16:51 UTC] midget (Dario Minnucci)
Just for the record, A new version [0] was uploaded to Debian repositories fixing this issue [1]. [0] https://packages.qa.debian.org/p/php-net-url2/news/20141029T095012Z.html [1] http://metadata.ftp-master.debian.org/changelogs/main/p/php-net-url2/unstable_copyright Thanks for your support.
 [2014-11-27 15:53 UTC] tkli (Tom Klingenberg)
-Status: Feedback +Status: Closed -Assigned To: +Assigned To: tkli
Closed: Needed clarification has been given and downstream was able to solve this. Thanks for your support!