MIT License vs. using Sources from JDK

[ssproessig-thales]

Hi everybody, we are trying to use https://github.com/mebjas/html5-qrcode in one of our customers' internal projects. This projects claims to be under Apache 2.0 License and is using zxing-js, which claims MIT License.

But running the sources through a license analysis tool it was found to contain GPL 2 code, which is a clear no-go for us, unfortunately.

Digging deeper one can see that you use JDK classes as e.g. OutputStream and translated them using ./autotransform with regexps to TypeScript.

Have you any reliable clarification that this is a way to integrate GPL 2 code without becoming GPL 2 yourself, going up to mebjas/html5-qrcode and users of this library?

Thank you for any input! Sören

[jonbe242]

Related is also how the project has handled the migration from Apache licensed Java code (license still referred in TS code) to the MIT license. See for example https://opensource.stackexchange.com/questions/9077/relicensing-from-apache-2-0-to-apache-or-mit.

[jonbe242]

@odahcam, can you help out here?

[werthdavid]

Trying to give some background here. The project came up because I was looking for a possibility to scan QR-codes in angular. I then came accross https://github.com/aleris/zxing-typescript which is from my understanding a rule-based transformation of the ZXing Java code to Typescript. Because I couldn't link the sources at the time I copied the sources in my project and made a small Angular component (--> ngx-scanner). Later odahcam came along and started developing. As a refactoring step, ZXing-JS org was created and the code was moved from ngx-scanner to this library project. From the stack-overflow question above I think it was falsely rebranded with MIT license, it should be Apache 2.0 instead. I thereforce changed the license.

[github-actions[bot]]

Stale issue message