...
In order to keep Jasig projects available under the terms of the Apache Software License, Jasig follows the guidelines of the Apache Software Foundation regarding inclusion of third-party content in its projects. These guidelines consist of three major categories of third-party licenses that dictate whether and how the third party content can be included.
Category A List
This is the Apache Software Foundation "Category A" list. Third-party content obtained under these licenses may be included directly with Jasig projects.
...
Many of these licenses have specific attribution terms that need to be adhered to, for example CC-A, often by adding them to the NOTICE file. Ensure you are doing this when including these works.
Category B List
This is the Apache Software Foundation "Category B" list. Third-party content obtained under these licenses may be only be included with Jasig projects in its unmodified binary form. This is because these are "Weak Copyleft" licenses that do not cause Jasig projects to become derivative works unless the third-party content is modified.
...
There should be an explicit entry in the NOTICE file for any inclusions under these licenses. That entry should name the third-party content that is included, who it is provided by, and the license under which it is provided.
Category X List
This is the Apache Software Foundation "Category X" list. Third-party content obtained under these licenses should not be included in Jasig projects. If it is needed, users should obtain it themselves and combine it with the Jasig project, but Jasig itself should not redistribute content obtained under these licenses.
...
If a project is compelled to redistribute third-party content obtained under one of the licenses, the inclusion will have to be approved by the Project Steering Committee and by the Jasig Board of Directors. This will limit the conditions under which the Jasig project can be redistributed since it will be considered a derivative work of the content in question, and restrictions will follow from that. It may well not be in the best interests of the project to limit possible adoption on this way.
Other Licenses
Inclusion of third-party content obtained under a license not listed above will have to be approved by the Project Steering Committee and by the Jasig Board of Directors. The groups will need to determine which general Category (A, B, or X) the license falls into, and make its decisions accordingly.