GeoNetwork Library Review

Created by: Jeroen Ticheler

Creation Date: 12-03-2007

Back to GeoNetwork Provenance Review

Purpose

Document potential Library/Component issues

• Listing any external components that are included "in the source tree" for the project.
• Listing all external dependencies with potentially problematic or conflicting license terms.

External components included in the source tree

Six (6) external classes are used in the source tree. The classes have been provided and adapted by the original copyright holder.

The classes are licensed as GNU-GPL version 2 and copyrighted as follows:

//==============================================================================
//===
//===   Codec (adapted class from druid project http://druid.sf.net)
//===
//===   Copyright (C) by Andrea Carboni.
//===   This file may be distributed under the terms of the GPL license.
//==============================================================================

Files concerned:

• org/fao/gast/lib/druid/Codec.java
• org/fao/gast/lib/druid/DdfLoader.java
• org/fao/gast/lib/druid/Import.java
• org/fao/gast/lib/druid/ImportField.java
• org/fao/gast/lib/druid/SqlMapper.java
• org/fao/gast/lib/druid/SqlType.java

This inclusion does not pose a problem for the project as copyright and license are properly referenced and compatible with the project.

External dependencies

Conflict?	API	License / comment
No	a2jruntime.jar	GNU Public License
No	activation.jar	Sun Microsystems Inc. Binary Code License
No	commons-codec.jar	The Apache Software License, Version 2.0
No	commons-email.jar	The Apache Software License, Version 2.0
No	commons-fileupload.jar	The Apache Software License, Version 2.0
No	commons-httpclient.jar	The Apache Software License, Version 2.0
No	commons-io.jar	The Apache Software License, Version 2.0
No	commons-lang.jar	The Apache Software License, Version 2.0
No	commons-logging-api.jar	The Apache Software License, Version 2.0
No	commons-logging.jar	The Apache Software License, Version 2.0
No	cql-java.jar	GNU-LGPL license version 2.1
No	dlib.jar	GNU-LGPL license version 2.1
No	gnu-regexp.jar	GNU-LGPL license version 2.1
No	jdbm.jar	BSD License
No	jdom.jar	Apache-style open source license
No	jeeves.jar	GNU-LGPL license version 2.1 - Jeeves originally developed and still developed as supporting framework of the GeoNetwork opensource application.
No	junit.jar	Common Public License, version 1.1
No	ki-jzkit-hss.jar	GNU Public License
No	ki-jzkit-iface.jar	GNU Public License
No	ki-jzkit-z3950.jar	GNU Public License
No	ki-util.jar	GNU Public License
No	lizard-tiff.jar	GNU-LGPL license version 2.1
No	log4j.jar	The Apache Software License, Version 2.0
No	lucene.jar	The Apache Software License, Version 2.0
No	mail.jar	Sun Microsystems Inc. Binary Code License
No	marc4j.jar	GNU Lesser Public License
No	mckoidb.jar	GNU General Public License
No	mkjdbc.jar	GNU General Public License
No	openrdf-model.jar	GNU-LGPL license version 2.1
No	openrdf-util.jar	GNU-LGPL license version 2.1
No	postgresql.jdbc3.jar	BSD license
No	rio.jar	GNU-LGPL license version 2.1
No	serializer.jar	The Apache Software License, Version 2.0
No	sesame.jar	GNU-LGPL license version 2.1
No	tyrex.jar	BSD-like license
No	xalan.jar	The Apache Software License, Version 2.0

In the Web Map component InterMap the additional API's are used:

Conflict?	API	License / comment
No	acme.jar	Acme license (included with GeoNetwork opensource software
No	commons-logging-adapters.jar	The Apache Software License, Version 2.0
No	itext-2.0.4.jar	GNU Lesser Public License
No	jai_codec.jar	Java Distribution License (JDL)
No	jai_core.jar	Java Distribution License (JDL)
Yes - Resolved	cos.jar	O'Reilly com.oreilly.servlet (cos.jar) license. The API has been removed from the GeoNetwork core and from the map viewer part (InterMap). Code changes have made it obsolete already. Source code can not be distributed under the license while the compiled code can be included in non-commercial projects. This is ambiguous at least.

Potentially problematic dependencies

None identified

Problematic APIs without dependencies

Conflict?	API	License / comment
Yes - removed	ojdbc14.jar	Oracle Technology Network Development and Distribution License Agreement. This Oracle JDBC driver has to be downloaded from Oracle JDBC Driver Downloads