Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 694356 - www-apps/gitea: incomplete LICENSE
Summary: www-apps/gitea: incomplete LICENSE
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Pierre-Olivier Mercier
URL:
Whiteboard:
Keywords: PullRequest
: 695308 (view as bug list)
Depends on:
Blocks: 694792
  Show dependency tree
 
Reported: 2019-09-14 12:46 UTC by Michał Górny
Modified: 2020-04-17 09:05 UTC (History)
4 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2019-09-14 12:46:11 UTC
LICENSE="MIT"

This correctly indicates the license of gitea itself.  However, the package bundles a number of modules that use more restrictive licenses and statically links them to the executable.

FWICS, the additional licenses are various BSD variants, Apache-2.0 and MPL-2.0, all of them more restrictive than MIT.  Unless I'm mistaken, this means that the built executable would effectively have to be licensed under the terms of most restrictive of those licenses.  That would probably be MPL-2.0 but I'm not sure.

Furthermore, github.com/couchbase/goutils/LICENSE.md looks like an EULA to me.  Unless I'm mistaken, none of the licenses are strong copyleft like LGPL, so it should be fine to include it.  However, you probably need to add it to licenses/, to @EULA group and to LICENSE variable, and users will have to explicitly accept it before installing gitea.

@licenses, could you verify my interpretation?
Comment 1 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2019-09-14 12:46:31 UTC
Copy of the license in question: https://github.com/go-gitea/gitea/blob/master/vendor/github.com/couchbase/goutils/LICENSE.md
Comment 2 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2019-10-18 05:53:32 UTC
*** Bug 695308 has been marked as a duplicate of this bug. ***
Comment 3 Ulrich Müller gentoo-dev 2019-12-07 18:06:47 UTC
(In reply to Michał Górny from comment #1)
> Copy of the license in question:
> https://github.com/go-gitea/gitea/blob/master/vendor/github.com/couchbase/
> goutils/LICENSE.md

This is non-free:
- Clause 1 doesn't grant freedom 3 (no right to distribute modified versions).
- By the paragraph following clause 1, only distribution of object code is allowed (no freedom 1, access to source code).
- Clause 2 forbids reverse engineering.

However, it isn't the typical language used in an EULA, so I don't believe that it belongs in that group.
Comment 4 Pierre-Olivier Mercier 2020-04-17 09:05:04 UTC
The situation with the license for the goutils from couchbase has been clarified and moved to Apache-2.0:

https://github.com/couchbase/goutils/commit/b49639060d85b267c5bdb7d4e3246d4ccca94e79

Gitea already fetched the change some time ago by xdch47.

All license related stuff have been addressed in https://github.com/gentoo/gentoo/pull/13906. The LICENSE field in the ebuild is now:

LICENSE="Apache-2.0 BSD BSD-2 ISC MIT MPL-2.0"