Skip to content

The jcl-over-slf4j Maven releases contain the wrong license file #465

@jonasschmittsag

Description

@jonasschmittsag

While gathering license and copyright notices for an Open-Source release of our software, our legal team brought to our attention that we included the wrong license for org.slf4j:jcl-over-slf4j:2.0.13 .

We generated our thirdparty license listing with the Mojohaus License Plugin, which searches for license files in the JAR files of dependencies and if not available, uses the license indicator from the POM file. In the case of jcl-over-slf4j, the POM file indicates a Apache 2.0 license, which can also be found in the GitHub repo, but the JAR file downloaded from the Maven Repository includes a LICENSE.txt containing the MIT License of slf4j.

To help users of the library avoid including the wrong license notice, please consider including a LICENSE.txt containing the correct license text in the Maven Repository JAR files.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions