Debian Bug report logs - #692071
storymaps: includes non-free files (src/org/json/*)

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: "Francesco Poli \(wintermute\)" <invernomuto@paranoici.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: storymaps: includes non-free files (src/org/json/*)

Date: Thu, 01 Nov 2012 23:08:32 +0100

Package: storymaps
Version: 1.0-1
Severity: serious
Justification: Policy 2.2.1

Hello Javier,
it seems to me [1] that storymaps includes non-free files
(src/org/json/*) released under the JSON license [2].

[1] http://packages.debian.org/changelogs/pool/main/s/storymaps/current/copyright
[2] https://lists.debian.org/debian-legal/2010/03/msg00064.html

The package cannot be shipped in Debian main with these non-free
files.

The possible solutions I can think of are (in descending order of
desirability):

 (A) contact JSON copyright holder(s) and persuade them to re-license
     the files under DFSG-free and GPL-compatible terms (well, this
     seems unlikely, given the final answer mentioned in [2], but
     maybe another try could succeed?)
 
 (B) replace src/org/json/* files with a DFSG-free and GPL-compatible
     equivalent, if any is available (tools/jsmin.py from libv8, which
     is under a GPL-compatible 3-clause-BSD license, was mentioned [3]
     during the debian-legal discussion, but maybe it's a completely
     different thing...)

[3] https://lists.debian.org/debian-legal/2010/03/msg00071.html

 (C) remove src/org/json/* files by repacking the orig.tar.gz upstream
     source archive, as long as storymaps is able to still be
     significantly useful without those files...
 
 (D) move the package to the non-free archive


I hope a satisfying solution may be found.
Thanks for your time!

Bye.

Message #10 received at 692071@bugs.debian.org (full text, mbox, reply):

From: Javier Fernández-Sanguino Peña <jfs@computer.org>

To: "Francesco Poli (wintermute)" <invernomuto@paranoici.org>, 692071@bugs.debian.org

Subject: Re: Bug#692071: storymaps: includes non-free files (src/org/json/*)

Date: Sun, 4 Nov 2012 11:24:11 +0100

[Message part 1 (text/plain, inline)]

On Thu, Nov 01, 2012 at 11:08:32PM +0100, Francesco Poli (wintermute) wrote:
> Hello Javier,
> it seems to me [1] that storymaps includes non-free files
> (src/org/json/*) released under the JSON license [2].

Yes, it does.
>  (B) replace src/org/json/* files with a DFSG-free and GPL-compatible
>      equivalent, if any is available (tools/jsmin.py from libv8, which
>      is under a GPL-compatible 3-clause-BSD license, was mentioned [3]
>      during the debian-legal discussion, but maybe it's a completely
>      different thing...)

Searching a little bit I've found Gson, which is a JSON implementation for
Java using the Apache license. It is available here:
http://code.google.com/p/google-gson/

Doing a cursory review Gson provides a JSON array implementation in Java,
which is what Storymaps actually uses. So it could be an alternative for
replacing Douglas' JSON. 

I will try to test replacing it and see where that takes me.

>  (C) remove src/org/json/* files by repacking the orig.tar.gz upstream
>      source archive, as long as storymaps is able to still be
>      significantly useful without those files...

No, storymaps cannot work without the JSON implementation.

>  (D) move the package to the non-free archive

This is probably what I will do in the short-term, however, as modifying and
testing the code might take some time (if it works at all)

Regards

Javier

[signature.asc (application/pgp-signature, inline)]

Message #15 received at 692071@bugs.debian.org (full text, mbox, reply):

From: Francesco Poli <invernomuto@paranoici.org>

To: 692071@bugs.debian.org

Subject: Re: Bug#692071: storymaps: includes non-free files (src/org/json/*)

Date: Sun, 4 Nov 2012 11:46:55 +0100

[Message part 1 (text/plain, inline)]

On Sun, 4 Nov 2012 11:24:11 +0100 Javier Fernández-Sanguino Peña wrote:

> On Thu, Nov 01, 2012 at 11:08:32PM +0100, Francesco Poli (wintermute) wrote:
> > Hello Javier,
> > it seems to me [1] that storymaps includes non-free files
> > (src/org/json/*) released under the JSON license [2].
> 
> Yes, it does.
> >  (B) replace src/org/json/* files with a DFSG-free and GPL-compatible
> >      equivalent, if any is available (tools/jsmin.py from libv8, which
> >      is under a GPL-compatible 3-clause-BSD license, was mentioned [3]
> >      during the debian-legal discussion, but maybe it's a completely
> >      different thing...)
> 
> Searching a little bit I've found Gson, which is a JSON implementation for
> Java using the Apache license. It is available here:
> http://code.google.com/p/google-gson/

Good, the Apache License v2 is compatible with the GNU GPL v3 (though
not with the GNU GPL v2).
Google Gson should be fine for storymaps, as far as license
compatibility is concerned.

> 
> Doing a cursory review Gson provides a JSON array implementation in Java,
> which is what Storymaps actually uses. So it could be an alternative for
> replacing Douglas' JSON.
> 
> I will try to test replacing it and see where that takes me.

Great, good luck with this attempt!   :-)

[...]
> >  (D) move the package to the non-free archive
> 
> This is probably what I will do in the short-term, however, as modifying and
> testing the code might take some time (if it works at all)

On a second thought, are src/org/json/* files linked with the
GPL-licensed parts of the package?
I am asking because, if this is the case, I am afraid that even moving
the package to the non-free archive would not be enough to
(temporarily) fix the issue, since the package would be legally
undistributable...



-- 
 http://www.inventati.org/frx/frx-gpg-key-transition-2010.txt
 New GnuPG key, see the transition document!
..................................................... Francesco Poli .
 GnuPG key fpr == CA01 1147 9CD2 EFDF FB82  3925 3E1C 27E1 1F69 BFFE

[Message part 2 (application/pgp-signature, inline)]

Message #30 received at 692071-close@bugs.debian.org (full text, mbox, reply):

From: Javier Fernández-Sanguino Peña <jfs@debian.org>

To: 692071-close@bugs.debian.org

Subject: Bug#692071: fixed in storymaps 1.0+dfsg-2

Date: Mon, 20 Jan 2014 21:22:56 +0000

Source: storymaps
Source-Version: 1.0+dfsg-2

We believe that the bug you reported is fixed in the latest version of
storymaps, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 692071@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Javier Fernández-Sanguino Peña <jfs@debian.org> (supplier of updated storymaps package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Mon, 20 Jan 2014 20:03:57 +0100
Source: storymaps
Binary: storymaps
Architecture: source all
Version: 1.0+dfsg-2
Distribution: unstable
Urgency: medium
Maintainer: Javier Fernández-Sanguino Peña <jfs@debian.org>
Changed-By: Javier Fernández-Sanguino Peña <jfs@debian.org>
Description: 
 storymaps  - Free story planning and writing application for children
Closes: 691809 691810 692071
Changes: 
 storymaps (1.0+dfsg-2) unstable; urgency=medium
 .
   * Remove non-free JSON library (src/org/json/*) from the source.
     The license of this library is not free see:
     https://lists.debian.org/debian-legal/2010/03/msg00064.html
     (Closes: #692071)
   * debian/patches/use_google_gson: Patch to use Google's GSON library
     instead of the non-free JSON library. GSON is licensed with
     an Apache License v2, which is compatible with the GNU GPL v3 (though
     not with the GNU GPL v2).
 .
     In addition, source has been repacked to remove the JSON library
     too.
   * debian/copyright:
      - Remove references to JSON's "do not do evil" license since we do not
        distribute it anymore.
   * debian/copyright, debian/storymaps.sgml: Update Upstream's email address
   * Add Build-dependency on docbook-to-man, fixes FTBFS (Closes: #691809)
   * debian/control
      - Update Standards-Version, no changes needed
      - Add Build-Dep-Indep on libgoogle-gson-java to use Google's GSON
        library
      - Change VCS-Git to X-VCS-Git-Upstream
      - Change VCS-Browser to X-VCS-Browser-Upstream
      This is used to indicate where upstream's vcs is (Closes:  #691810)
      Note: In the future I should  push all of my changes (debian/) into
      upstream so I might change it back to 'VCS-Git', 'VCS-Browser'
   * debian/rules:
      - Remove files/directories created automatically when building
   * debian/patches/upstream_address_change: add a patch to update upstream
     email's address in all of the Java source files' copyright notice.
Checksums-Sha1: 
 236a1ed47d4fe20ddabe40fabe52d9a55d8bbaf4 1243 storymaps_1.0+dfsg-2.dsc
 e0b99b963ba4801ed353632a6a1ace256760be2e 49504712 storymaps_1.0+dfsg.orig.tar.gz
 0d18951153def65d916259f35aafd84713b80c23 24001 storymaps_1.0+dfsg-2.debian.tar.gz
 6c1e824b3567be70f7e4d144a50943ebc2927163 1448842 storymaps_1.0+dfsg-2_all.deb
Checksums-Sha256: 
 352b6687f2037e005605e94e39d1fa9b85f5ef3175e0e7abdf7c38c3f3e11c1a 1243 storymaps_1.0+dfsg-2.dsc
 c25259430f37de935841ac2d9c79c6b4f0dccfb62ff83b465bf248a25898f5e3 49504712 storymaps_1.0+dfsg.orig.tar.gz
 9081787a6a4df1d7faabe65d7a379fa57ed7e29acb9849e359a509d39e1f63ed 24001 storymaps_1.0+dfsg-2.debian.tar.gz
 ee4dba72f3563603e31c8d24332d3a3913d824e636d29e494b751abb313bb96b 1448842 storymaps_1.0+dfsg-2_all.deb
Files: 
 d8a0df038ef0da2e18e336a229caedab 1243 utils extra storymaps_1.0+dfsg-2.dsc
 cfff791b37e8512d1451e7c0e80f2d20 49504712 utils extra storymaps_1.0+dfsg.orig.tar.gz
 e29befbabb30eddc87fea7e0d240f7df 24001 utils extra storymaps_1.0+dfsg-2.debian.tar.gz
 7124458422901304f1375b40f8e7075c 1448842 utils extra storymaps_1.0+dfsg-2_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (GNU/Linux)

iD8DBQFS3YxBsandgtyBSwkRAsgUAJ9UcdEO5lrc8QQgOkhT0O1T3vLi6ACeJVPz
yRPWuy4AtN14RWudXgs5UK4=
=ECEk
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.