Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fail because of forbidden licenses on dual licensed dependency with one license on whitelist and the other on blacklist #533

Open
TorstenKruse opened this issue Dec 5, 2023 · 0 comments

Comments

@TorstenKruse
Copy link

TorstenKruse commented Dec 5, 2023

We get the following error on our build.
The jakarta.annotation:jakarta.annotation-api is dual licensed with EPL 2.0 and GPL with classpath exception. We have EPL 2.0 on our blacklist and the other on a whitelist (customer requirement).

Why does it fail instead of using the whitelisted license?

Perhaps it matters that we have the full name of the GPL with cpe on our whitelist and the naming "GPL2 w/ CPE" which jakarta.annotation:jakarta.annotation-api uses is just an alias in the license merges file? As long as just one of dual license is on whitelist and the other license is not mentioned, it used to work. Only if the other is blacklisted, it break the build.

[WARNING] There are 1 forbidden licenses used:
[WARNING] License: 'Eclipse Public License Version 2.0' used by 1 dependencies:
-Jakarta Annotations API (jakarta.annotation:jakarta.annotation-api:1.3.5 - https://projects.eclipse.org/projects/ee4j.ca)
[ERROR] Failed to execute goal org.codehaus.mojo:license-maven-plugin:2.3.0:add-third-party (default-cli) on project xy-ng:
There are some forbidden licenses used, please check your dependencies.

@TorstenKruse TorstenKruse changed the title fail because of forbidden licenses on dual licensed dependency altough one license on whitelist fail because of forbidden licenses on dual licensed dependency with one license on whitelist and the other on blacklist Dec 5, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant