Vaadin 7.2: json-android license

Vaadin 6 / 7 / 8
1

The license.html file in Vaadin 7.2 still says the license for “JSON” is Apache 2.0. I believe this is stale from 7.1. First, the package is now “json-android” (or “android-json”, depending on whether you believe the jar or the build file). Second, I am unable to find the base source for that component showing an Apache license. The terms for the Android SDK (which is where the build file points to) require acceptance of the license agreement and is a separate license: https://developer.android.com/sdk/terms.html

Could you please clarify the original source of the library so we can verify the license?

EDIT: spelling fix

2

/bump

My company won’t be able to use 7.2 until this is resolved.

3

Hi Rob,

Opening up the sources jar at
https://github.com/vaadin/vaadin-deps/tree/master/shared/json
and looking at the class headers show they are under Apache 2.0. I would believe the source files over any conflicting information elsewhere.

I don’t know about the origin about the jar, I’ll ask the author of the update and get back to you.

4

Hi,

The Android license page at
https://source.android.com/source/licenses.html
 states that

The preferred license for the Android Open Source Project is the Apache Software License, Version 2.0 ("Apache 2.0"), and the majority of the Android software is licensed with Apache 2.0. While the project will strive to adhere to the preferred license, there may be exceptions that will be handled on a case-by-case basis. For example, the Linux kernel patches are under the GPLv2 license with system exceptions, which can be found on kernel.org. The actual Android SDK sources are available by following the instructions at
https://source.android.com/source/downloading.html

The JSON files which have been repackaged as json-android/android-json are all made available as Apache 2 (as indicated in the pom file). The original files can be found in the Git repository at
https://android.googlesource.com/platform/libcore

The org.json library in Vaadin 7.1 is actually not Apache 2 but licensed under the special
JSON license

5

Ok, thanks for the info.