Missing MPL notice and source redist for publicsuffix data

From what I can see an older version of https://publicsuffix.org/list/public_suffix_list.dat is bundled in https://github.com/square/okhttp/tree/2f4b90050e739f2310a1e1a26634124dd3b618e2/okhttp/src/main/resources/okhttp3/internal/publicsuffix … but there is no indication anywhere that this is using an MPL-license. This is not Apache-licensed for sure (as your code is at https://github.com/square/okhttp/blob/2f4b90050e739f2310a1e1a26634124dd3b618e2/okhttp/src/main/java/okhttp3/internal/publicsuffix/PublicSuffixDatabase.java )

IMHO, somehow, somewhere I think that the original notice from https://publicsuffix.org/list/public_suffix_list.dat should be included in the JARs at the minimum and that the source for the list data should be made available for redistribution since the license is MPL…

// This Source Code Form is subject to the terms of the Mozilla Public
// License, v. 2.0. If a copy of the MPL was not distributed with this
// file, You can obtain one at https://mozilla.org/MPL/2.0/.

See https://github.com/publicsuffix/list/blob/master/LICENSE#L170 for details.

[swankjesse]

@pombredanne thanks for flagging this. Lemme know if I’ve missed anything! #4657

[JakeWharton]

I’m just relaying how the Maven pom works. We didn’t invent this system. If this is unsuitable for some reason, please open a separate issue.

On Fri, Apr 5, 2019 at 5:29 AM Philippe Ombredanne [e-mail] wrote:

@JakeWharton https://github.com/JakeWharton re:

traverse the hierarchy of parent poms

This feels like a rather fragmented path to get the information. This also means that at runtime (where only a JAR and no parent POM is around), there is no license information available inside the JAR

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/square/okhttp/issues/4569#issuecomment-480210470, or mute the thread https://github.com/notifications/unsubscribe-auth/AAEEEbzGK3k_atjXvV9XJhV-v6aNymInks5vdxdjgaJpZM4aLXOa .