License clarification
Reading https://github.com/aws-amplify/aws-sdk-android/blob/main/LICENSE.txt says:
The AWS SDK for Android is generally licensed under the Apache 2.0 License, with the Amazon Cognito Identity Provider aws-android-sdk-cognitoidentityprovider subcomponent being licensed under the Amazon Software License, and the Amazon Lex subcomponent under the path aws-android-sdk-deepsense/src/main/jni/ under the AWS Customer Agreement (https://aws.amazon.com/agreement/ ).
Which sounds fine, but looking at the maven repo, eg. https://mvnrepository.com/artifact/com.amazonaws/aws-android-sdk-auth-core/2.75.2
I see License: Amazon
Looking at the POM file: https://repo1.maven.org/maven2/com/amazonaws/aws-android-sdk-auth-core/2.75.2/aws-android-sdk-auth-core-2.75.2.pom we see Amazon Software License
Can we get some clarification?
Hi @licaon-kter I see what you mean. I'll get back to you with an answer shortly.
ref: https://gitlab.com/fdroid/fdroid-suss/-/merge_requests/23/diffs
For F-Droid we can't include apps that depend on non-FOSS licensed code.
@licaon-kter We've updated the the license name in the POM file to Apache 2.0. The change will be reflected our next release.
Ok, so looking again at https://mvnrepository.com/artifact/com.amazonaws/aws-android-sdk-auth-core/2.77.0 it's Apache 2.0 :+1:
now, reading again
the Amazon Cognito Identity Provider aws-android-sdk-cognitoidentityprovider subcomponent being licensed under the Amazon Software License
and looking at https://mvnrepository.com/artifact/com.amazonaws/aws-android-sdk-cognitoidentityprovider/2.77.0 we have the opposite issue, this is marked as Apache 2.0 when it should not, right?
We'll update the License.txt file to match. See https://github.com/aws-amplify/aws-sdk-android/pull/3634
The license has been updated in the SDK 2.77.1 release.
This issue is now closed. Comments on closed issues are hard for our team to see. If you need more assistance, please open a new issue that references this one.