Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-69164

Katalon utils library is improperly licensed

    XMLWordPrintable

Details

    Description

      Katalon plugin bundles Katalon utils:

      https://github.com/jenkinsci/katalon-plugin/blob/4d1d9a53b0212051eedf39d9742afb307647a752/pom.xml#L88-L92

      Katalon utils is licensed under a non-free license:

      https://github.com/katalon-studio/utils/blob/b0839905e41b065f3c3c697bef7eb5e8ab4fd060/pom.xml#L41-L47

      All software published by the Jenkins project must be licensed under an OSI approved open source license. This applies to all bundled libraries as well. Docs at https://www.jenkins.io/doc/developer/publishing/preparation/#license

      Attachments

        Issue Links

          Activity

            danielbeck Daniel Beck added a comment -

            Due to this issue, we have suspended distribution of this plugin in https://github.com/jenkins-infra/update-center2/pull/626

            danielbeck Daniel Beck added a comment - Due to this issue, we have suspended distribution of this plugin in https://github.com/jenkins-infra/update-center2/pull/626
            duyluonganh duy luong added a comment - - edited

            Hi danielbeck and Jenkins team,

            I am Duy Luong, Technical Lead of Katalon team which is the plugin owner. On behalf of Katalon team, we are aware of this issue and updated our plugin to follow Jenkins plugin development standard.

            We changed katalon-utils license to MIT in the new version v1.0.16: https://github.com/katalon-studio/utils and publish new version v1.0.31 of Katalon Jenkins plugin to use the free license of katalon-utils: https://github.com/jenkinsci/katalon-plugin/pull/25.

            Please help to review the update.

            Kind regards,

            Duy

             

            duyluonganh duy luong added a comment - - edited Hi danielbeck and Jenkins team, I am Duy Luong, Technical Lead of Katalon team which is the plugin owner. On behalf of Katalon team, we are aware of this issue and updated our plugin to follow Jenkins plugin development standard. We changed katalon-utils license to MIT in the new version v1.0.16: https://github.com/katalon-studio/utils  and publish new version v1.0.31 of Katalon Jenkins plugin to use the free license of katalon-utils: https://github.com/jenkinsci/katalon-plugin/pull/25. Please help to review the update. Kind regards, Duy  
            duyluonganh duy luong added a comment -

            Move ticket to Review phase and assign to danielbeck to notify the changes.

            Please kindly review our update.

            Best regards,

            Duy

            duyluonganh duy luong added a comment - Move ticket to Review phase and assign to danielbeck to notify the changes. Please kindly review our update. Best regards, Duy
            danielbeck Daniel Beck added a comment -

            The pom.xml wasn't fixed to state "MIT License" and the URL is a mutable reference. Nothing prevents you from replacing the license file contents again to be a non-free license.

            I recommend you change the pom.xml so it's unambiguously MIT: https://github.com/jenkinsci/archetypes/blob/58c6d717a6cb9d77b3399a7fb392f3377a4e8f63/hello-world/src/main/resources/archetype-resources/pom.xml#L19-L20

            danielbeck Daniel Beck added a comment - The pom.xml wasn't fixed to state "MIT License" and the URL is a mutable reference. Nothing prevents you from replacing the license file contents again to be a non-free license. I recommend you change the pom.xml so it's unambiguously MIT: https://github.com/jenkinsci/archetypes/blob/58c6d717a6cb9d77b3399a7fb392f3377a4e8f63/hello-world/src/main/resources/archetype-resources/pom.xml#L19-L20
            duyluonganh duy luong added a comment -

            danielbeck, Thanks for your recommendation.

            We've updated license information of utils in the pom.xml: https://github.com/katalon-studio/utils/blob/master/pom.xml#L41

            in v1.0.17

            We also uploaded new version of Katalon plugin v1.0.32 to use utils v1.0.17: https://github.com/jenkinsci/katalon-plugin/releases/tag/1.0.32

            Please help to review this again.

             

            duyluonganh duy luong added a comment - danielbeck , Thanks for your recommendation. We've updated license information of utils in the pom.xml: https://github.com/katalon-studio/utils/blob/master/pom.xml#L41 in v1.0.17 We also uploaded new version of Katalon plugin v1.0.32 to use utils v1.0.17: https://github.com/jenkinsci/katalon-plugin/releases/tag/1.0.32 Please help to review this again.  
            danielbeck Daniel Beck added a comment -

            duyluonganh I pinged you and your co-maintainer from the SECURITY Jira project.

            We're only restoring distribution of plugins if they have no unresolved security vulnerabilities. Please review the issues assigned to you there and carefully read the instructions.

            danielbeck Daniel Beck added a comment - duyluonganh I pinged you and your co-maintainer from the SECURITY Jira project. We're only restoring distribution of plugins if they have no unresolved security vulnerabilities. Please review the issues assigned to you there and carefully read the instructions.
            duyluonganh duy luong added a comment -

            danielbeck  Thanks for your update.

            We are aware of those security vulnerabilities and planing to resolve them all:

            https://issues.jenkins.io/browse/SECURITY-2844?jql=project%20%3D%20SECURITY%20AND%20status%20in%20(Untriaged%2C%20Open)%20AND%20text%20~%20katalon

            duyluonganh duy luong added a comment - danielbeck   Thanks for your update. We are aware of those security vulnerabilities and planing to resolve them all: https://issues.jenkins.io/browse/SECURITY-2844?jql=project%20%3D%20SECURITY%20AND%20status%20in%20(Untriaged%2C%20Open)%20AND%20text%20~%20katalon

            People

              danielbeck Daniel Beck
              danielbeck Daniel Beck
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated: