[jira] [Created] (FLINK-22555) LGPL-2.1 files in flink-python jars

[Shang Yuanchun (Jira)]

Henri Yandell created FLINK-22555:
-------------------------------------

             Summary: LGPL-2.1 files in flink-python jars
                 Key: FLINK-22555
                 URL: https://issues.apache.org/jira/browse/FLINK-22555
             Project: Flink
          Issue Type: Bug
          Components: API / Python
            Reporter: Henri Yandell


Looking at, for example, [https://repo1.maven.org/maven2/org/apache/flink/flink-python_2.11/1.13.0/] the jar file contains three LGPL-2.1 source files:
 * flink-python_2.11-1.13.0/META-INF/maven/org.jboss.modules/jboss-modules/pom.xml
 * flink-python_2.11-1.13.0/schema/module-1_1.xsd
 * flink-python_2.11-1.13.0/schema/module-1_0.xsd

There's nothing in the DEPENDENCIES or licenses directory on the topic. It looks like Netty brings in the LGPL-2.1 JBoss dependency (depending on the Apache-2.0 JBoss Marshalling, which depends on the LGPL-2.1 JBoss Modules).

The xsd files are also appear to be coming from JBoss Modules. Given Apache's position on LGPL-2.1 dependency inclusion in ASF projects, this seems like an issue.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)