Uploaded image for project: 'Tika'
  1. Tika
  2. TIKA-3204

License incompliance with xmp-core 6.1.10

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Blocker
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 1.25
    • Component/s: None
    • Labels:
      None

      Description

      Apache Tika 1.24.1 (and probably also oder versions) has a dependency to xmp-core 6.1.10. Usage of this dependency is incompliant with its license, because distribution of xmp-core is strictly forbidden by Adobe unless you have written permission to do so.

      \xmpcore-6.1.10.jar\META-INF\LICENSE

      ADOBE CONFIDENTIAL
      __________________

      Copyright 2011-2016 Adobe Systems Incorporated
      All Rights Reserved.

      NOTICE: All information contained herein is, and remains
      the property of Adobe Systems Incorporated and its suppliers,
      if any. The intellectual and technical concepts contained
      herein are proprietary to Adobe Systems Incorporated and its
      suppliers and may be covered by U.S. and Foreign Patents,
      patents in process, and are protected by trade secret or copyright law.
      Dissemination of this information or reproduction of this material
      is strictly forbidden unless prior written permission is obtained
      from Adobe Systems Incorporated.

       

      Here is how it comes into tika:

      \tika-1.24.1-src.zip\tika-1.24.1\tika-xmp\pom.xml

      <dependency>
      <groupId>org.tallison.xmp</groupId>
      <artifactId>xmpcore-shaded</artifactId>
      <version>6.1.10</version>
      </dependency>

       

      \xmpcore-shaded-6.1.10-sources.jar\META-INF\maven\org.tallison.xmp\xmpcore-shaded\pom.xml

      <dependency>
      <groupId>com.adobe.xmp</groupId>
      <artifactId>xmpcore</artifactId>
      <version>6.1.10</version>
      </dependency>

       

      In the header of the java files in the sources of xmp-core 6.1.10 is the following statement:
      // =================================================================================================
      // ADOBE SYSTEMS INCORPORATED
      // Copyright 2006 Adobe Systems Incorporated
      // All Rights Reserved
      //
      // NOTICE: Adobe permits you to use, modify, and distribute this file in accordance with the terms
      // of the Adobe license agreement accompanying it.
      // =================================================================================================

      This statement in the header refers to the ADOBE CONFIDENTIAL license agreement shown above.

      There is a reference to a BSD license in mavenrepository.com, but when you follow this link, you get directed to a website where the BSD license is shown together with a link to the source code of xmp-core 5.1.3 only.

      https://mvnrepository.com/artifact/com.adobe.xmp/xmpcore/6.1.10
      https://www.adobe.com/devnet/xmp/library/eula-xmp-library-java.html

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              christianseipel Christian Seipel
            • Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: