Packaging Request #1991
[bisq] Supposed entirely libre/free bitcoin trading platform
0%
Description
I have researched in bisq and found out that the Git repo is doing funny stuff with downloading external things in the build script, however the 0.8.0 source release does not do this which leads to my conclusion that the source release bundles these external libraries and is thus GNU GPL compatible.
Log (expiring in 24 hours): https://pastebin.com/sPX2ejc1
This is the Git repo building script.
Files
Related issues
History
Updated by freemor over 5 years ago
Contnts of pastebin so they do not expire and so people don't have to deal with CloudFlare.
<pipp8> `ani`, bisq is awesome. <`ani`> pipp8: how so? it's proprietary. <pipp8> `ani`, AGPL <`ani`> pipp8: no, not entirely. <`ani`> it downloads proprietary dependencies in the build script. <pipp8> `ani`, which? <`ani`> I can check. <pipp8> `ani`, yes please, tell me because I love bisq but I didn't know it was using proprietary dep <`ani`> there are some but I'm having trouble finding the .class stuff. <`ani`> org.bitcoinj.core I find. no source code included. <`ani`> no that one has sources. <`ani`> hmm. <`ani`> there are two .jar files in build/libs. <`ani`> maybe they are contained there. <`ani`> I'm compiling a new folder now. <`ani`> I swear that it downloaded stuff before. <`ani`> maybe it was the Git repo that did it. <`ani`> it seems fine now with 0.8.0, no external downloads. <pipp8> it cannot be gpl if there are proprietary deps. <pipp8> so it is good. <`ani`> you sure? there are gpl windows projects, lots of them. <pipp8> `ani`, mmm pretty sure proprietary deps cannot be distribuited with the code. <`ani`> that's why there are scripts. <`ani`> I get the downloads now, will paste soon. <`ani`> although I see the light if 0.8.0 fetches nothing. <`ani`> then it probably is GPL or similar dependencies.
Updated by freemor over 5 years ago
- File Bisq-build.txt Bisq-build.txt added
Not sure what you were looking at. For me a build of Bisq still pulls an insane amount of stuff. I certainly don't have time right now to check all those licenses.. Perhaps a script could be written.
see: Bisq-build.txt
Updated by freemor over 5 years ago
Considering
grep -c -i google Bisq-build.txt
returns 84, is this something the OP really wants
Updated by freemor over 5 years ago
Adding a file with just the google related depends greped out, as that is probably a good place to start looking for bad things
Updated by freemor over 5 years ago
looking at the depends that get pulled this thing clearly interacts strongly with Google. Therefore, I think a Libre version would need to be created before inclusion in Parabola. Am I correct on this?
Updated by ani over 5 years ago
If you build the 0.8.0 source release, what output do you get?
Updated by freemor over 5 years ago
if you take a look at the Bisq-build.txt you'll see I'm building 0.8.0
Updated by ani over 5 years ago
Just looking at "google cloud storage", it is included in a proprietary tool from Google called "Google Cloud Platform" and seems to be a proprietary API according to Wikipedia.
Updated by ani over 5 years ago
Yeah you're building 0.8.0, from Git. When I built the release I got no prints about any external downloads which leads me to be extra careful now if it downloads all of this stuff silently in the release.
Updated by freemor over 5 years ago
- Status changed from open to not-a-bug
Marking this as invald due to the Google Cloud, Third party pulls, Licensing nightmare it would be.
Updated by bill-auger over 1 year ago
- Related to Packaging Request #1481: [bisq] add to PCR added