zecfoundation
/
zcashd
mirror of https://github.com/ZcashFoundation/zcashd.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Clarify that patches to a dependency are under the same license as that dependency. 

The relevant licenses are:

* bdb: BDB (variant of Gnu Affero GPL)
* libevent: BSD-3-clause
* libsodium: ISC
* tl_expected: CC0-1.0
* zeromq: LGPL-3+ with ZeroMQ exception

In the case of zeromq, this is an explicit condition of the license --
specifically its static linking exception, which we rely on:
"If you modify this library, you must extend this exception to your
version of the library."

In all cases, patches are necessarily derived (even if only trivially)
from the code they are patching. We technically could relicense to MIT
in some cases, but using the original license for patches we've written
is a courtesy that makes it easier for upstream to adopt the patch, even
if we don't specifically file a PR.

native_cctools is also patched, but Debian copyright policy does not
require `contrib/debian/copyright` to mention this dependency, because
it is only part of the build process and its contents do not get compiled
into the resulting build:
https://www.debian.org/doc/debian-policy/ch-archive.html#s-pkgcopyright

In all cases I checked that we have the right to distribute the patch
under the relevant license (i.e. it doesn't depend on any incompatible
third-party contributions). Reviewers should satisfy themselves of this.

Signed-off-by: Daira Hopwood <daira@jacaranda.org>
This commit is contained in:
Daira Hopwood 2023-02-06 15:17:51 +00:00
parent feec543abf
commit 1156e43992
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
contrib/debian/copyright
View File

@ -108,6 +108,7 @@ Copyright: 2014-2015, Brian Davis
License: BSD-3-clause-Tobias-Klein
Files: depends/sources/libsodium-*.tar.gz
depends/patches/libsodium/*
Copyright: 2013-2022 Frank Denis
License: ISC
@ -122,6 +123,7 @@ Comment: This entry is specifically for the libc++ library. The libc++ Authors
are listed in https://github.com/llvm/llvm-project/blob/main/libcxx/CREDITS.TXT .
Files: depends/sources/db-*.tar.gz
depends/patches/bdb/*
Copyright: 1990, 2016 Oracle and/or its affiliates;
1990, 1993, 1994, 1995 The Regents of the University of California;
1995, 1996 The President and Fellows of Harvard University;
@ -129,6 +131,7 @@ Copyright: 1990, 2016 Oracle and/or its affiliates;
License: BDB
Files: depends/sources/libevent-*.tar.gz
depends/patches/libevent/*
Copyright: 2000-2007 Niels Provos <provos@citi.umich.edu>
2007-2012 Niels Provos and Nick Mathewson
2000 Dug Song <dugsong@monkey.org>
@ -141,6 +144,7 @@ Copyright: 2000-2007 Niels Provos <provos@citi.umich.edu>
License: BSD-3-clause
Files: depends/sources/zeromq-*.tar.gz
depends/patches/zeromq/*
Copyright: 1994, 1995, 1996, 1999, 2000, 2001, 2002, 2004, 2005, 2006, 2007 Free Software Foundation, Inc.
2007-2014 iMatix Corporation
2009-2011 250bpm s.r.o.
@ -161,6 +165,7 @@ Copyright: 2006 Nemanja Trifunovic
License: Boost-Software-License-1.0
Files: depends/sources/tl-expected-*.tar.gz
depends/patches/tl_expected/*
Copyright: 2017-2021 Sy Brand <simonrbrand@gmail.com> (@TartanLlama), 2022 The Zcash developers
License: CC0-1.0
Comment: Other contributors are Simon Truscott (@bobbleclank), Kévin Alexandre Boissonneault (@KABoissonneault),