Third-party content (source code, binary artifacts like libraries, documentation, etc.) is anything that was not submitted directly to Jasig or that is not covered under an ICLA, CCLA, or SGLA. Jasig projects can use third-party content as long as the project is in compliance with the license under which the content is acquired, and as long as use of the third-party content does not violate Jasig's own licensing and policies.

In order to keep Jasig projects available under the terms of the Apache Software License, Jasig follows the guidelines of the Apache Software Foundation regarding inclusion of third-party content in its projects. These guidelines consist of three major categories of third-party licenses that dictate whether and how the third party content can be included.

Category A List

This is the Apache Software Foundation "Category A" list. Third-party content obtained under these licenses may be included directly with Jasig projects.

• Apache License 2.0
• Apache Software License 1.1. Including variants:
  • PHP License 3.01
• BSD (without advertising clause). Including variants:
  • DOM4J License
• MIT/X11
• University of Illinois/NCSA
• W3C Software License
• X.Net
• zlib/libpng
• FSF autoconf license
• DejaVu Fonts (Bitstream Vera/Arev licenses)
• Academic Free License 3.0
• Service+Component+Architecture+Specifications
• OOXML XSD ECMA License
• Microsoft Public License (MsPL)
• Creative Commons Attribution (CC-A)
• Creative Commons Copyright-Only Dedication
• Python Software Foundation License
• Adobe Postcript(R) AFM files

Many of these licenses have specific attribution terms that need to be adhered to, for example CC-A, often by adding them to the NOTICE file. Ensure you are doing this when including these works.

Category B List

This is the Apache Software Foundation "Category B" list. Third-party content obtained under these licenses may be only be included with Jasig projects in its unmodified binary form. This is because these are "Weak Copyleft" licenses that do not cause Jasig projects to become derivative works unless the third-party content is modified.

• CDDL 1.0
• CPL 1.0
• EPL 1.0
• IPL 1.0
• MPL 1.0 and MPL 1.1
• SPL 1.0
• Open Software License 3.0
• Erlang Public License

There should be an explicit entry in the NOTICE file for any inclusions under these licenses. That entry should name the third-party content that is included, who it is provided by, and the license under which it is provided.

Category X List

This is the Apache Software Foundation "Category X" list. Third-party content obtained under these licenses should not be included in Jasig projects. If it is needed, users should obtain it themselves and combine it with the Jasig project, but Jasig itself should not redistribute content obtained under these licenses.

• Binary Code License (BCL)
• Special exceptions to the GNU GPL (e.g. GNU Classpath)
• GNU GPL 1, 2, 3
• GNU LGPL 2, 2.1, 3
• Affero GPL 3
• NPL 1.0/NPL 1.1
• QPL
• Sleepycat License
• Microsoft Limited Public License

If a project is compelled to redistribute third-party content obtained under one of the licenses, the inclusion will have to be approved by the Project Steering Committee and by the Jasig Board of Directors. This will limit the conditions under which the Jasig project can be redistributed since it will be considered a derivative work of the content in question, and restrictions will follow from that. It may well not be in the best interests of the project to limit possible adoption on this way.

Other Licenses

...