[LEGAL-230] Is binary dependency on Xerial's Snappy-Java library acceptable for ASF projects?

• Type: Question
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Assignee: Unassigned
• Reporter: Joe Witt
• Created: 21/Jan/16 16:54
• Updated: 25/Feb/16 17:37
• Resolved: 23/Feb/16 03:13

Description

Hello

Several ASF projects such as NiFi, Hadoop, Spark, Kafka, and apparently others have a direct or transitive dependency on Xerial's Snappy Java library.

That library can be found here:
https://github.com/xerial/snappy-java

It's license shows that it is ASLv2.
https://github.com/xerial/snappy-java/blob/develop/LICENSE

However, upon reviewing its NOTICE I find reference to it depending on a statically linked library used under the GNU Runtime Exception.
https://github.com/xerial/snappy-java/blob/develop/NOTICE

In reviewing the ASF Category-X guidance here:
http://www.apache.org/legal/resolved.html#category-x

It appears that usage of libraries under the GNU special exceptions are not allowed.

Can someone please help guide whether usage of Xerial's Snappy Java is acceptable or not acceptable in Apache projects?

Issue Links

• is depended upon by: NIFI-1419 Use of Snappy-Java questionable according to ASF licensing guidelines