GPL/MIT licensing issue

[juliastats]

GPL/MIT licensing issue

[JeffBezanson]

If a package has a GPL dependency, it needs to use a "GPL-compatible" license. The MIT license is one. Then the combined bundle, when distributed, is automatically GPL. To inform users of that situation, in julia we're now using a file THIRDPARTY.md to list the licenses of dependencies.

[nalimilan]

1. I'd say it would be reasonable to make PRs to packages that depend on Rmath to add a THIRDPARTY.md file and a reference to it in LICENSE.md. Though of course it will be very hard to be exhaustive given that these are quite fundamental packages that are used indirectly by many packages (and new ones are added all the time).
2. Progress is going on at JuliaStats/StatsFuns.jl#113 but this is a large undertaking.

[ararslan]

https://github.com/JuliaMath/FFTW.jl#license provides a good explanation of a mostly analogous situation. The package itself doesn't have to be licensed under GPL, as it's not a derived or combined work.

[rcurtin]

Thanks for the link! That roughly matches my understanding of what the license implies, so good to know I am not totally off base in my thinking. :)

But, in this case, this nuance and implications of using this package aren't adequately communicated in all downstream packages---meaning that people who build things against downstream packages are unaware that they could be violating the GPL if they distribute their packages only in accordance with, e.g., the MIT license. What can be done to fix that?

[rcurtin]

Thanks for the response. The THIRDPARTY.md solution seems reasonable, but it doesn't seem like it's been applied to all the reverse dependencies of this package.

1. Would it be reasonable to go through that reverse dependencies list and make sure that this GPL dependency is noted in each of those repositories, be it via a THIRDPARTY.md file or a note in the README? It is very easy to miss this issue when building software.

2. I see that there has been some discussion about replacing the GPL-ed functions wrapped here before: discourse, JuliaStats/StatsFuns.jl#13, JuliaStats/StatsFuns.jl#46. Does anyone know what the status of that effort is? If I (or someone else) was able to help out with that effort, would someone be able to bring me (or others) up to speed on what needs to be done to get it merged?

Basically we would really like to use GLM.jl and maybe some other packages that have dependencies on Rmath, but the GPL compatibility issue is a bit of a blocker for us. :)