[PKG-Openstack-devel] python-xstatic-angular-bootstrap_0.11.0.2-1_amd64.changes REJECTED

[Paul Tagliamonte]

On Sat, May 02, 2015 at 11:07:51PM +0200, Thomas Goirand wrote:
> Hi Paul!
> 
> First of all, thanks a lot for all the package review. This is simply
> awesome, and helps me really a lot in my work!

np :)

> Well, for all XStatic projects, the habit is to use the same licensing as
> for the javascript that is packaged as Python module. So in this file:
> 
> xstatic/pkg/angular_bootstrap/__init__.py
> 
> you can see:
> 
> LICENSE = '(same as %s)' % DISPLAY_NAME
> 
> then in xstatic/pkg/angular_bootstrap/data/angular-bootstrap.js, in the
> header of the file, you may see:
> 
>  * angular-ui-bootstrap
>  * http://angular-ui.github.io/bootstrap/
> 
>  * Version: 0.11.0 - 2014-05-01
>  * License: MIT
> 
> So, python-xstatic-angular-bootstrap uses the same Expat license.
> 
> Is this enough?

So, I trust this *is* MIT/Expat licensed, but if you look at the terms
they're granting us::

| Permission is hereby granted, free of charge, to any person obtaining a copy
| of this software and associated documentation files (the "Software"), to deal
| in the Software without restriction, including without limitation the rights
| to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
| copies of the Software, and to permit persons to whom the Software is
| furnished to do so, subject to the following conditions:
| 
| The above copyright notice and this permission notice shall be included in
| all copies or substantial portions of the Software.
| 
| THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
| IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
| FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
| AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
| LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
| OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
| THE SOFTWARE.

The critical bit here --

| The above copyright notice and this permission notice shall be included in
| all copies or substantial portions of the Software.

The source distribution is non-complient. They can do that since they
can't infringe on themselves. We would be infringing by distributed the
source tarball.

Just do a DFSG repack and include the license in it. That'll be great
and enough.

> Can I upload again the package? Or should I ask for a more
> clear statement from upstream (which by the way, I have met face to face,
> and I know how to ping him on Freenode...)?

Cheers,
  Paul

-- 
 .''`.  Paul Tagliamonte <paultag at debian.org>  |   Proud Debian Developer
: :'  : 4096R / 8F04 9AD8 2C92 066C 7352  D28A 7B58 5B30 807C 2A87
`. `'`  http://people.debian.org/~paultag
 `-     http://people.debian.org/~paultag/conduct-statement.txt
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 949 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/openstack-devel/attachments/20150502/6ba244e9/attachment.sig>