Date: Sat, 8 Sep 2018 19:11:52 -0600 From: Adam Weinberger <adamw@adamw.org> To: yuri@freebsd.org Cc: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: Re: svn commit: r479263 - in head/science: . namd namd/files Message-ID: <CAP7rwci_GspMmTNrU5y-e3i609%2BCOjwWtosT4_H2MFcYsqzb3Q@mail.gmail.com> In-Reply-To: <bf8482a4-65db-a501-1907-03e581bf8069@freebsd.org> References: <201809082328.w88NSLVF073775@repo.freebsd.org> <CAP7rwcgq5EpuEggex2vG369-0Cz4O9GbRPQNpbUUQ6VB15HH4Q@mail.gmail.com> <bf8482a4-65db-a501-1907-03e581bf8069@freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Sep 8, 2018 at 6:56 PM Yuri <yuri@freebsd.org> wrote: > > On 9/8/18 5:15 PM, Adam Weinberger wrote: > > Upstream requires that people register to download the software, and > > the license seems to forbid any distribution on our part: > > > > "Licensee may redistribute without restriction works with up to 1/2 of > > their non-comment source code derived from at most 1/10 of the > > non-comment source code developed by Illinois and contained in the > > Software" > > "Licensee agrees to provide the Software only to any other person or > > entity who has registered with Illinois" > > "Commercial use of the Software, or derivative works based thereon, > > REQUIRES A COMMERCIAL LICENSE." > > > > I don't think it's a good idea for this port to remain in the tree. > > > Hi Adam, > > > Thanks for pointing this out. > > > Their license says that redistribution is allowed only to entities who > have registered with Illinois. > > But their website also directs people to the source code without > registration. > > Their git server is open, and build instructions are provided in open > access: > > https://www.ks.uiuc.edu/Research/namd/2.12/notes.html#compiling (no need > to register or click "Ok"). > > > The existence of a port doesn't imply redistribution. > > > The appropriate remedy may be to change license for local build only: > > LICENSE_PERMS=no-auto-accept no-dist-mirror no-pkg-mirror > > If people build locally, this isn't technically a redistribution. Such > port is a mere reinterpretation of their instructions that are in open > access and don't require registration or accepting a license. I'm not sure that that's sufficient, because if they require registration to download the release versions of code as a bundle, then circumventing it from a public git server might not be sufficiently different. If you'd like to reach out to upstream and ask them whether it's permissible for FreeBSD to distribute a script to recreate released source code bundles without registration, then that would probably be the best way to protect ourselves. In the meantime though, the ports need to be removed until we're sure it's safe for us to have it. It's clear you put a lot of work into making those ports work, but we have to take the conservative path here, which unfortunately means removing the ports until we know it's safe. # Adam -- Adam Weinberger adamw@adamw.org https://www.adamw.org
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAP7rwci_GspMmTNrU5y-e3i609%2BCOjwWtosT4_H2MFcYsqzb3Q>