[MNG-8042] The license for 'apache-maven-3.9.6/lib/httpclient-4.5.14.jar' is not correct

[jira-importer]

Jan Lahoda opened MNG-8042 and commented

Inside the Maven distribution 3.9.6:

https://dlcdn.apache.org/maven/maven-3/3.9.6/binaries/apache-maven-3.9.6-bin.tar.gz

There is file: 'apache-maven-3.9.6/lib/httpclient-4.5.14.jar', and the adjacent license is only Apache 2.0. That is not quite correct, the file contains 'mozilla/public-suffix-list.txt', which is under MPL 2.0.

It would be nice if the license could be fixed in the distribution.

---

Affects: 3.9.6

Issue Links:

• HTTPCLIENT-2317 The license in the httpclient5 artifact on Maven central is not correct.
  ("is caused by")

[jira-importer]

Tamas Cservenak commented

I don't quite understand the linked "caused by" issue: how can be this Maven issue, that is about httpclient4, be caused by incorrect license in httpclient5?

[jira-importer]

Jan Lahoda commented

The situation is the same for:

https://repo1.maven.org/maven2/org/apache/httpcomponents/httpclient/4.5.14/httpclient-4.5.14.jar

which is the one used by Maven. I just didn't list all the version affected by this (many more may be affected as well, but checking all versions seems a bit unnecessary to me).

 

(I've updated the linked bug to also include 4.5.14.)

[jira-importer]

Michael Osipov commented

Tamas Cservenak, I think it is about https://www.mozilla.org/en-US/MPL/2.0/ 3.1 and 3.3. We should include the license.