search

vt-middleware / ldaptive

A simple, extensible Java API for interacting with LDAP servers
56 stars 26 forks source link

Licensing is unclear #201

Closed hyandell closed 3 years ago

hyandell commented 3 years ago

Hi vt-middleware,

The licensing is stated on the site to be:

"This project is dual licensed under both the LGPL and Apache 2."

Can you confirm that you mean that the license is "LGPL (any version) OR Apache-2.0"? There is considerable debate in the industry as to whether the phrase dual-licensed means OR or AND, so I want to make sure I am understanding your intentions correctly. I didn't see a previous issue on this topic of what dual-licensed means, but my apologies if I missed one.

dfish3r commented 3 years ago

We mean you can choose one or the other, but not both. I think I'll add that text to license page if you think it's clear enough. (This question does come up from time to time.)

hyandell commented 3 years ago

Thank you @dfish3r

That's clear enough for me :)

In SPDX terms, it would be (Apache-2.0 OR LGPL-2.0-or-later). I'm seeing SPDX ids being used more often. They don't have an 'any version' notion that matches the bit in the text about "no-version=all-versions", but as long as the FSF don't release something before 2.0 then the or later is the same :)

dfish3r commented 3 years ago

Thanks @hyandell . License page updated.