search

SPARQL-Anything / sparql.anything

SPARQL Anything is a system for Semantic Web re-engineering that allows users to ... query anything with SPARQL.
https://sparql-anything.cc/
Apache License 2.0
213 stars 11 forks source link

License Violation by using VTD-XML #483

Open jmkeil opened 3 months ago

jmkeil commented 3 months ago

The package io.github.sparql-anything.sparql-anything-xml uses com.ximpleware.vtd-xml as a dependency. As com.ximpleware.vtd-xml is licensed under GPL-2.0-or-later and io.github.sparql-anything.sparql-anything-xml is licensed under Apache 2.0, this use as dependency is not permitted, according to Apache License v2.0 and GPL Compatibility. Further, all upstream projects that use io.github.sparql-anything.sparql-anything-xml and that are not licensed under a GPL-2.0-or-later compatible license break that license, too. Please consider to switch to another XML library with a compatible license to resolve this issue. For example, com.fasterxml.jackson.core.jackson-core is licensed under Apache 2.0.

Disclaimer 1: I am not a lawyer, but just an IT person who is trying to not mess up with licenses. So do not take this as a legal advice.

Disclaimer 2: I did not systematically check all io.github.sparql-anything.* dependencies. So do not take this as an indication that other dependencies are free of licensing issues.

enridaga commented 3 months ago

Thanks for the input. Indeed, we should solve this.