[dev] non-DFSG compliant licenses used in Ansel

Mike Gabriel mike.gabriel at das-netzwerkteam.de
Wed May 27 04:49:11 UTC 2020


Hi Michael,

On  Di 26 Mai 2020 22:24:34 CEST, Michael J Rubinsky wrote:

> Quoting Mike Gabriel <mike.gabriel at das-netzwerkteam.de>:
>
>> Dear upstream developers,
>>
>> I have just received notice (and did not spot this myself) from  
>> Debian's ftpmasters, that the files js/lightbox.js and  
>> js/slideshow.js are licensed under non-DFSG [DFSG] licenses  
>> (CC-BY-2.5 and CC-BY-SA-2.0).
>>
>> As those files contain code from other projects, I assume  
>> relicensing is not an option. The CC >= 3.0 licenses are DFSG  
>> compliant.
>>
>> Alternatively, would it make sense to drop these non-free  
>> lightbox.js and slideshow.js files and replace them by similar  
>> implementations? Instead of lightbox.js, we have jquery-colorbox,  
>> jquery-fancybox, or slimbox.js already available in Debian. Search  
>> the web for slideshow.js also give various results these days.
>>
>> For now, I cannot get Ansel back into Debian, if this does not get  
>> adjusted upstream. Would it help, if I got one of my staff persons  
>> to work on this? Could someone test, review, approve the proposed  
>> code changes?
>
> I'll have to investigate this when I have time.  IIRC, I modified  
> both lightbox.js and slideshow.js quite a bit to remove dependencies  
> on
> other js libraries.

Ok...

> Using some other implementation may work, but we don't have the  
> bandwidth right now to do any major refactoring. Also, keep in mind,  
> we do not use any jquery solutions in the non-mobile versions of  
> Horde 5.x applications.

Right, then jquery based replacements won't help.

> I know the current lightbox 2.x is licensed under the MIT license,  
> so it's possible we can get an ok form the author to change it.

That would be helpful, indeed.

> I can't find any current original source online at all for the  
> portion of the slideshow.js file that was licensed under  
> CC-BY-SA-2.0..

Would a replacement be the proper way to go here, then? As said, one  
of my staff persons is quite fluent in Javascripting and such and he  
might be able to come up with a replacement (using some other  
slideshow.js and adapting that for Ansel. Shall I have him work on that?

Mike
-- 

DAS-NETZWERKTEAM
c\o Technik- und Ökologiezentrum Eckernförde
Mike Gabriel, Marienthaler Str. 17, 24340 Eckernförde
mobile: +49 (1520) 1976 148
landline: +49 (4351) 850 8940

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22  0782 9AF4 6B30 2577 1B31
mail: mike.gabriel at das-netzwerkteam.de, http://das-netzwerkteam.de

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 851 bytes
Desc: Digitale PGP-Signatur
URL: <https://lists.horde.org/archives/dev/attachments/20200527/9805b276/attachment.sig>


More information about the dev mailing list