Skip to content

build(deps): Properly document Javassist MPL 1.1 triple-licensing#19586

Open
ashwintumma23 wants to merge 1 commit into
apache:masterfrom
ashwintumma23:fix-javassist-mpl11-license
Open

build(deps): Properly document Javassist MPL 1.1 triple-licensing#19586
ashwintumma23 wants to merge 1 commit into
apache:masterfrom
ashwintumma23:fix-javassist-mpl11-license

Conversation

@ashwintumma23

@ashwintumma23 ashwintumma23 commented Jun 16, 2026

Copy link
Copy Markdown
Contributor

Description

Properly document Javassist's triple-licensing (MPL 1.1, LGPL 2.1, Apache License 2.0) in the license metadata. Apache Druid uses Javassist
under the Apache License 2.0 terms, which is permitted by the triple-licensing.

This fixes the "Unsupported license: MPL 1.1" error in the license checker by:

  1. Adding MPL 1.1 as a recognized license in check-licenses.py
  2. Updating the Javassist entry in licenses.yaml to declare MPL 1.1 as its primary license (as reported by Maven POM)
  3. Adding a notice explaining the triple-licensing and that Druid uses Apache 2.0 terms

Addresses review feedback from FrankChen021 to properly canonicalize MPL 1.1 to its own license name rather than hiding it by mapping to
Apache 2.0.

Release note

Not applicable - license metadata only, no functional changes.

This PR has:

  • been self-reviewed.
  • using the concurrency checklist (Remove this item if the
    PR doesn't have any relation to concurrency.)
  • added documentation for new or modified features or behaviors.
  • a release note entry in the PR description.
  • added Javadocs for most classes and all non-trivial methods. Linked related entities via Javadoc links.
  • added or updated version, license, or notice information in licenses.yaml
  • added comments explaining the "why" and the intent of the code wherever would not be obvious for an unfamiliar reader.
  • added unit tests or modified existing tests to cover new code paths, ensuring the threshold for code
    coverage
    is met.
  • added integration tests.
  • been tested in a test Druid cluster.

Key changed/added classes in this PR

  • distribution/bin/check-licenses.py - Added MPL 1.1 license recognition
  • licenses.yaml - Updated Javassist license metadata with triple-licensing notice

Use this description in the PR form! All checkboxes are appropriately marked based on what this PR actually does (license metadata only).

Javassist is triple-licensed under MPL 1.1, LGPL 2.1, and Apache License 2.0.
Apache Druid uses it under Apache 2.0 terms.

Changes:
1. Add MPL 1.1 as a recognized license in check-licenses.py
2. Update Javassist entry in licenses.yaml to declare MPL 1.1 as its
   primary license with a notice explaining the triple-licensing and that
   we use it under Apache 2.0 terms

This addresses review feedback to properly canonicalize MPL 1.1 to its
own license name rather than hiding it by mapping to Apache 2.0.

Addresses: Review comment from FrankChen021 on PR apache#19566
@ashwintumma23 ashwintumma23 changed the title Properly document Javassist MPL 1.1 triple-licensing build(deps): Properly document Javassist MPL 1.1 triple-licensing Jun 16, 2026

@FrankChen021 FrankChen021 left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have reviewed the code for correctness, edge cases, concurrency, and integration risks; no issues found.

Reviewed 2 of 2 changed files.


This is an automated review by Codex GPT-5.5

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants