search

aws-amplify / aws-sdk-android

AWS SDK for Android. For more information, see our web site:
https://docs.amplify.aws
Other
1.03k stars 549 forks source link

License clarification #3605

Closed licaon-kter closed 4 days ago

licaon-kter commented 4 months ago

Reading https://github.com/aws-amplify/aws-sdk-android/blob/main/LICENSE.txt says:

The AWS SDK for Android is generally licensed under the Apache 2.0 License, with the Amazon Cognito Identity Provider aws-android-sdk-cognitoidentityprovider subcomponent being licensed under the Amazon Software License, and the Amazon Lex subcomponent under the path aws-android-sdk-deepsense/src/main/jni/ under the AWS Customer Agreement (https://aws.amazon.com/agreement/ ).

Which sounds fine, but looking at the maven repo, eg. https://mvnrepository.com/artifact/com.amazonaws/aws-android-sdk-auth-core/2.75.2

I see License: Amazon

Looking at the POM file: https://repo1.maven.org/maven2/com/amazonaws/aws-android-sdk-auth-core/2.75.2/aws-android-sdk-auth-core-2.75.2.pom we see Amazon Software License

Can we get some clarification?

tylerjroach commented 4 months ago

Hi @licaon-kter I see what you mean. I'll get back to you with an answer shortly.

licaon-kter commented 4 months ago

ref: https://gitlab.com/fdroid/fdroid-suss/-/merge_requests/23/diffs

For F-Droid we can't include apps that depend on non-FOSS licensed code.

phantumcode commented 4 months ago

@licaon-kter We've updated the the license name in the POM file to Apache 2.0. The change will be reflected our next release.

licaon-kter commented 2 months ago

Ok, so looking again at https://mvnrepository.com/artifact/com.amazonaws/aws-android-sdk-auth-core/2.77.0 it's Apache 2.0 :+1:

now, reading again

the Amazon Cognito Identity Provider aws-android-sdk-cognitoidentityprovider subcomponent being licensed under the Amazon Software License

and looking at https://mvnrepository.com/artifact/com.amazonaws/aws-android-sdk-cognitoidentityprovider/2.77.0 we have the opposite issue, this is marked as Apache 2.0 when it should not, right?

phantumcode commented 2 months ago

We'll update the License.txt file to match. See https://github.com/aws-amplify/aws-sdk-android/pull/3634

mattcreaser commented 4 days ago

The license has been updated in the SDK 2.77.1 release.

github-actions[bot] commented 4 days ago

This issue is now closed. Comments on closed issues are hard for our team to see. If you need more assistance, please open a new issue that references this one.