GeoNetwork Library Review

From OSGeo
Jump to: navigation, search

Created by: Jeroen Ticheler

Creation Date: 12-03-2007

Updated: 05-05-2008

Back to GeoNetwork Provenance Review

The project graduated from incubation on 2 May 2008

Purpose

Document potential Library/Component issues

  • Listing any external components that are included "in the source tree" for the project.
  • Listing all external dependencies with potentially problematic or conflicting license terms.

External components included in the source tree

Six (6) external classes are used in the source tree. The classes have been provided and adapted by the original copyright holder.

The classes are licensed as GNU-GPL version 2 and copyrighted as follows:

//==============================================================================
//===
//===   Codec (adapted class from druid project http://druid.sf.net)
//===
//===   Copyright (C) by Andrea Carboni.
//===   This file may be distributed under the terms of the GPL license.
//==============================================================================

Files concerned:

  • org/fao/gast/lib/druid/Codec.java
  • org/fao/gast/lib/druid/DdfLoader.java
  • org/fao/gast/lib/druid/Import.java
  • org/fao/gast/lib/druid/ImportField.java
  • org/fao/gast/lib/druid/SqlMapper.java
  • org/fao/gast/lib/druid/SqlType.java

This inclusion does not pose a problem for the project as copyright and license are properly referenced and compatible with the project.

External dependencies

Conflict? API License / comment
No a2jruntime.jar GNU Public License
No activation.jar Sun Microsystems Inc. Binary Code License
No commons-codec.jar The Apache Software License, Version 2.0
No commons-email.jar The Apache Software License, Version 2.0
No commons-fileupload.jar The Apache Software License, Version 2.0
No commons-httpclient.jar The Apache Software License, Version 2.0
No commons-io.jar The Apache Software License, Version 2.0
No commons-lang.jar The Apache Software License, Version 2.0
No commons-logging-api.jar The Apache Software License, Version 2.0
No commons-logging.jar The Apache Software License, Version 2.0
No cql-java.jar GNU-LGPL license version 2.1
No dlib.jar GNU-LGPL license version 2.1
No gnu-regexp.jar GNU-LGPL license version 2.1
No jdbm.jar BSD License
No jdom.jar Apache-style open source license
No jeeves.jar GNU-LGPL license version 2.1 - Jeeves originally developed and still developed as supporting framework of the GeoNetwork opensource application.
No junit.jar Common Public License, version 1.1
No ki-jzkit-hss.jar GNU Public License
No ki-jzkit-iface.jar GNU Public License
No ki-jzkit-z3950.jar GNU Public License
No ki-util.jar GNU Public License
No lizard-tiff.jar GNU-LGPL license version 2.1
No log4j.jar The Apache Software License, Version 2.0
No lucene.jar The Apache Software License, Version 2.0
No mail.jar Sun Microsystems Inc. Binary Code License
No marc4j.jar GNU Lesser Public License
No mckoidb.jar GNU General Public License
No mkjdbc.jar GNU General Public License
No openrdf-model.jar GNU-LGPL license version 2.1
No openrdf-util.jar GNU-LGPL license version 2.1
No postgresql.jdbc3.jar BSD license
No rio.jar GNU-LGPL license version 2.1
No serializer.jar The Apache Software License, Version 2.0
No sesame.jar GNU-LGPL license version 2.1
No tyrex.jar BSD-like license
No xalan.jar The Apache Software License, Version 2.0

In the Web Map component InterMap the additional API's are used:

Conflict? API License / comment
No acme.jar Acme license (included with GeoNetwork opensource software
No commons-logging-adapters.jar The Apache Software License, Version 2.0
No itext-2.0.4.jar GNU Lesser Public License
No jai_codec.jar Java Distribution License (JDL)
No jai_core.jar Java Distribution License (JDL)
Yes - Resolved cos.jar O'Reilly com.oreilly.servlet (cos.jar) license. The API has been removed from the GeoNetwork core and from the map viewer part (InterMap). Code changes have made it obsolete already. Source code can not be distributed under the license while the compiled code can be included in non-commercial projects. This is ambiguous at least.

Potentially problematic dependencies

None identified

Problematic APIs without dependencies

Conflict? API License / comment
Yes - removed ojdbc14.jar Oracle Technology Network Development and Distribution License Agreement. This Oracle JDBC driver has to be downloaded from Oracle JDBC Driver Downloads