License text issue

[GoogleCodeExporter]

Manoj,

Can you see the email text below and let me know if you can fix the license 
text issue:

=============================

  When we spoke I was only concerned about the Rhino files, but now I notice that there are also files taken from other sources.  

  The SFDC-WSC project on Google Code (hereinafter “Manoj’s project”)  ships as a Jar file (wsc-19.jar), with no documentation.   On Google code, the license for Manoj’s project is listed as BSD.

  If you open the jar file of Manoj’s project, you find two class trees – one rooted at com.sforce, and one rooted at org.mozilla.   I noticed that the org.mozilla tree is identical to the Rhino project (which is under dual GPL/MPL license) and in fact some Rhino copyright notices are preserved within the jar file.

   If you browse Manoj’s source code on Google Code, you’ll find the following license text at http://code.google.com/p/sfdc-wsc/source/browse/trunk/wsc19/dist/wsc_license.html

End User License Agreement
Force.com WSC version 18.0

Except as described below, the         wsc          jar files are Copyright (c) 
2005-2009, salesforce.com, inc. All rights reserved.

Redistribution and use in source and binary forms, with or without 
modification, are permitted provided that the       following conditions are 
met:
 <ul>     
 <li>Redistributions of source code must retain the above copyright notice, this list of conditions and the following          disclaimer.      </li>       
<li>Redistributions in binary form must reproduce the above copyright notice, 
this list of conditions and the          following disclaimer in the 
documentation and/or other materials provided with the distribution.      </li> 

<li>Neither the name of salesforce.com, inc. nor the names of its contributors 
may be used to endorse or promote           products derived from this software 
without specific prior written permission.      </li>   
</ul>     
<p>THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" 
AND ANY EXPRESS OR IMPLIED WARRANTIES,       INCLUDING, BUT NOT LIMITED TO, THE 
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE  
     DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE 
LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,       SPECIAL, EXEMPLARY, OR 
CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE 
GOODS OR       SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 
INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,       WHETHER IN 
CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING 
IN ANY WAY OUT OF THE USE       OF THIS SOFTWARE, EVEN IF ADVISED OF THE 
POSSIBILITY OF SUCH DAMAGE.</p>   

<p>The following Third Party components are licensed as follows:</p>      

 Xml Pull Parser 

MXParser.java
MXSerializer.java     
XmlPullParser.java 
XmlPullParserException.java

Your use of the Xml Pull Parser code is subject to the terms and conditions of 
the       Indiana University Extreme! Lab Software License, Version 1.2, 
available at      http://extreme.indiana.edu/license.txt 

--
Rhino: JavaScript for Java

js-1.7R2.jar

<p>Your use of the Rhino code is subject to the terms and conditions of the 
Mozilla Public License, available at <A          
HREF="http://www.mozilla.org/MPL/">http://www.mozilla.org/MPL/</A 
<http://www.mozilla.org/MPL/%3c/A> 

FindBugs

annotations.jar

Your use of the FindBugs code is subject to the terms and conditions of the GNU 
Lesser General Public License,       available at <A 
HREF="http://www.gnu.org/licenses/lgpl.html">http://www.gnu.org/licenses/lgpl.ht
ml</A></p>     </body>   </html>   

Most of these third-party licenses have requirements like “Redistributions in 
binary form must reproduce the above copyright notice, this list of conditions 
and the          following disclaimer in the documentation and/or other 
materials provided with the distribution. ” – and I can’t find any 
qualifying notice in Manoj’s binary distribution.   

Those are technicalities, Manoj could fix them by adding a proper notice file 
to his distribution.  

There’s a somewhat worse problem in the case of FindBugs, which is LGPL – 
our legal team gets a bit nervous around the LGPL.  However, annotations code 
should not be necessary to include in the binary distribution, and I’ve just 
about convinced myself that there is no FindBugs code present in the binary 
distribution of Manoj’s project. Please ask Manoj to verify.

Manoj’s license text is not entirely accurate:  in the current distribution, 
the *contents* of js-1.7R2.jar (I think – could be a slightly different 
version) are present, but not in the form of a jar file.  Also, most of the XML 
Pull Parser code that he’s using is in the public domain – MXParser is 
under Indiana license but not the other files, which come from xmlpull.org.  
(However, there is some reason to think that Salesforce.com then modified the 
files – there’s a package.html which purports to apply salesforce.com’s 
BSD license to all the XML Pull Parser code.)  The more accurately Manoj can 
describe the origin and license of the code, the easier time our legal team 
will have.

Original issue reported on code.google.com by hghazo...@gmail.com on 23 Sep 2010 at 9:12

[GoogleCodeExporter]

Is there any chance the license text file can be included in the jar file? 

Original comment by hghazo...@gmail.com on 24 Sep 2010 at 9:16

[GoogleCodeExporter]

I will add the license file to the jar file in the next version. I will be 
updating version 20 jar file soon.

Original comment by manoj.ch...@gmail.com on 24 Sep 2010 at 9:26

[GoogleCodeExporter]

Fixed in version 20.

Original comment by manoj.ch...@gmail.com on 29 Sep 2010 at 6:34

• Changed state: Fixed