taskSavannah Administration - Tasks: task #13308, Submission of SlashNerd

 
 

task #13308: Submission of SlashNerd

Submitter:  taj <lockfile2>
Submitted:  Mon 25 Aug 2014 12:08:19 AM UTC
   
 
Should Start On:  Mon 25 Aug 2014 12:00:00 AM UTC Should be Finished on:  Thu 04 Sep 2014 12:00:00 AM UTC
Category:  Project Approval Priority:  * 5 - Normal
Status:  Cancelled Privacy:  Public
Assigned to:  None Open/Closed:  Closed
* Mandatory Fields

Add a New Comment Rich Markup
   

Jump to the original submission

Thu 11 Jan 2024 03:58:05 PM UTC, comment #19: 

I'm sorry, we failed to evaluate this package that time; if you are still interested, please re-submit.

Ineiev <ineiev>
Site Administrator
Mon 29 Sep 2014 09:38:08 PM UTC, comment #18: 

I had some trouble uploading the files (from the feeback I got after submitting).

The latest source code revisions of all mentioned packages can be located at these URLs:
 - https://sourceforge.net/projects/localmtasendmail/
 - https://sourceforge.net/projects/freeslash/
 - https://sourceforge.net/projects/freeslashcode/

taj <lockfile2>
Mon 29 Sep 2014 09:19:56 PM UTC, comment #17: 

I have corrected some issues in the packages (FreeSlash, FreeSlashcode, and LocalMTA-Sendmail).

1 - All capable text files have COPYING/LICENSE information posted at the top (or bottom of the files for .pod, Changes/ChangeLog files).

2 - Binary files, such as PDF, PS, GIF, and PNG files are marked by a COPYING.readme file in the same directory. There are some text files (custom Template Toolkit data files under GPLv2) which are sensitive to changes. Thus, the COPYING.readme lists each and every file as to their COPYING terms.

The revised packages are posted via the "UPLOAD" dialog.

taj <lockfile2>
Fri 26 Sep 2014 02:03:56 AM UTC, comment #16: 

UPDATE: I have been busy with a few projects here and there. I will upload latest revision very soon.

-- taj

taj <lockfile2>
Thu 18 Sep 2014 10:23:41 PM UTC, comment #15: 

hi taj - the principle is that all original files, and ideally all the derived files, have a clear copyright/license notice. Including Makefile.am, ChangeLog, and so on.

it is fine to put notes in accompanying README's instead of the file itself, when comments are not possible/convenient/whatever.

It is fine to have a single line "This file is public domain" for simple files like example snippets and AUTHORS, or use the GNU "all-permissive" license, or whatever.  It is fine to put the notice at the end of the ChangeLog file instead of the beginning, since it would be a big drag to have it at the beginning.

(For the record, there is more extensive discussion of all these things in the GNU maintainers' information, gnu.org/prep/maintain, if you are interested.  It boils down to what I just wrote   .)

Best,
Karl

Karl Berry <karl>
Site Administrator
Wed 17 Sep 2014 11:52:24 PM UTC, comment #14: 

UPDATE: I finised the re-write (and test && commit) of Slash::Password, copyright and license information (GPLv2) is included.

I have some questions about the remainder of work in order to get FreeSlash and Freeslashcode hosted on savanna.nongnu.org.

I was told that all files are to be tagged with copyright and license information.

Does that include build system files such as Makefile.am's? I have some text data files for the program, and they are VERY sensitive to modification and some of these template files cannot withstand comments, such as the Template Toolkit files.

Normally, Template Toolkit templates are commentable, but the code that sub-classed Template.pm, and the data file it uses to provide items are not commentable. And there are cases where the data will be output to the client's browser and corrupt webpage.

How do I tag these troublesome project files with copyright and licensing information? Can I just put a README file in the directory and add information therein about COPY and LICENSE? Can I skip adding `copy and license' info on files like AUTHORS, Changelog, or included example files (i.e, 'snippet-httpd.conf' or 'foo-data.txt') etc.?

taj <lockfile2>
Sat 13 Sep 2014 01:34:33 AM UTC, comment #13: 

Yes that is me, taj <beowulf21 AT yandex.com>. Due to "UNIX" traditions, that is my initials and system login username.

taj <lockfile2>
Fri 12 Sep 2014 10:50:41 PM UTC, comment #12: 

Hi Troye - as you say, there is no problem with reimplementing a given interface.  Just be sure that you really do reimplement it from scratch, e.g., it is best not to start by copying the original files and modifying, but rather really start with a blank editor.

BTW, I guess you are the same heretofore-anonymous person who just worked on the savane build stuff?  Just wondering.

Thanks,
K

Karl Berry <karl>
Site Administrator
Fri 12 Sep 2014 10:46:04 PM UTC, comment #11: 

I will re-write code in the Slash::Password module, and keep the interface (because the application needs that).

I read that interfaces are non copyright-able. A Judge ruled on the Oracle-Google Java/Android case over the Java API being used in Davlik, and Google was not liable for copyright and/or license sanctions in the ruling.

So it should be okay for me keep the inteface for use in SlashNerd. Does this seem okay?

taj <lockfile2>
Fri 12 Sep 2014 10:34:16 PM UTC, comment #10: 

looking at the LICENSE file inside the dbix-password tarball (seems the license is not stated on the cpan page, which seems weird and wrong), i see:

5. Products derived from this software may not be called "DBIx::Password".

Based on the analyses of LPPL and IPAFONT (on gnu.org/licenses/license-list.html) I believe such renaming clauses are incompatible with the GPL, and therefore are not acceptable for hosting on Savannah.  Sorry ... maybe you could see if the author would be willing to drop that clause?  (The rest of the license is ok.) 

Best,
Karl

Karl Berry <karl>
Site Administrator
Thu 11 Sep 2014 11:19:17 PM UTC, comment #9: 

Hello Troye,

The evaluation is taking some time because of the large code base.

The "LocalMTA-Sendmail" seems fine.

In the "FreeSlashCode" package, there are many perl files and template files
with do not have copyright or license statements.
Please add a copyright and license statement to all source code files.

Regarding the licensing issues, I still need to verify what's acceptable.
I do not yet know if the license of "DBIx-Password" is considered free due to the restrictions the author added.

Regards,
 - Assaf.

Assaf Gordon <agn>
Site Administrator
Tue 02 Sep 2014 08:16:41 PM UTC, comment #8: 

Mr. Assaf Gordon, I have a correction to add to the FreeSlash distribution that I submitted.

Upon later review, I found out that a module I forked (DBIx::Password) is under a non-GPL software license. It is a custom license, sort of MIT/BSD style, but I do not think it is non-freesoftware.

The latest revision to fix license issue (version 2.002008_02):
https://sourceforge.net/projects/freeslash/

Here is the "LICENSE" statement of the author, Brian Aker:
https://metacpan.org/source/KROW/DBIx-Password-1.9/LICENSE

For module his module, which I forked Slash::Password from:
https://metacpan.org/release/DBIx-Password

I complied with the license by including the license at the top of Slash::Password (lib/Slash/Password.pm) module.

I meets all 4 "base rights" for software freedom. Let me know what you think.

-- Troye Johnson

taj <lockfile2>
Mon 01 Sep 2014 11:28:42 PM UTC, comment #7: 

Please let me know what you think about any concerns or changes to be made.

-- Troye Johnson

taj <lockfile2>
Mon 01 Sep 2014 11:26:41 PM UTC, comment #6: 

FreeSlash (Perl distribution):
http://sourceforge.net/projects/freeslash

FreeSlashcode (SQL schema, module handlers, images, etc):
http://sourceforge.net/projects/freeslashcode

LocalMTA-Sendmail (Perl distribution):
http://sourceforge.net/projects/localmtasendmail

I sent an email to SourceForge admins to remove the old SlashNerd and Slashnerdcode packages. Apparently, users cannot remove their own packages. SF administration has to be contacted to do that.

(file #32014)

taj <lockfile2>
Mon 01 Sep 2014 09:38:33 PM UTC, comment #5: 

Hello,

This sounds like a good plan.

When the new tarballs are ready,
please post them here and we'll continue with the evaluation.

Regards,
 -Assaf

Assaf Gordon <agn>
Site Administrator
Mon 25 Aug 2014 11:41:21 PM UTC, comment #4: 

What actions do I take to resolve my outstanding issues?

[ For # 1 ]

I created two new projects on SF (FreeSlash and FreeSlashcode). No projects exist with that name currently. I hope to use those project names on savannah.nongnu.org -- if approved. This will remove ambiguity with the original submission.

[ For #2 ]

I created a project on SF for LocalMTA-Sendmail. I will put my copyright (yours truly) and license information (GPL) and submit an update tarball to the SF--so others can clearly see that it is Freesoftware.

[ For #3 ]

I will put copyright (same as other files) and license information in files that do not have them.


[ For #4 ]

Since the original authors already released the packages (Slash and Slashcode) as GPL, and I have a GPL copy, then that means the version I realease is supposed to be GPL also.

Does that seem okay?

taj <lockfile2>
Mon 25 Aug 2014 11:16:54 PM UTC, comment #3: 

The largest issue in the previous list is issue #4.

slash and slashcode packages were both released as GPL. Slash (a Perl distribution) was in the same tarball as slashcode.

It was too cumbersome (high debug times, and new management style) to manage .pm files w/ Autotools. Most people expect Perl module distributions to come from CPAN or in a distribution talball (i.e, Makefile.PL).

I used GNU Autotools to install the slashcode stuff. In short, I split slashcode package into two packages: Slash-* for the Perl module distribution, and slashcode-* for all other files that are not Perl module files (such as SQL schema files, Perl CGI programs, documentation, and typical package stuff).

taj <lockfile2>
Mon 25 Aug 2014 10:58:37 PM UTC, comment #2: 

Thank you for reviewing my submission.

Here is my status update. I am currently working on getting these done.

1) I will change the name of he project.

2) I wrote LocalMTA::Sendmail--I will put IP and license information on it. I will make a separate project out of it on SF. I have not yet created an account to post modules on CPAN.

3) The files in the Slash-* and slashcode-* tarballs are under the same license as the other stuff--GPL. The old developers released everything in the package as GPL, and it states it on their old website: slashcode.com

4) OSDN was bought by a few companies and changed ownership a few times. This is really the only murky issue. It has already been released as GPL. Can they un-GPL something legally? That is what I have to find out.

taj <lockfile2>
Mon 25 Aug 2014 05:01:52 AM UTC, comment #1: 

Hello Troye,

Thank you for submitting new projects to GNU Savannah.
This refers to both of your recent submissions.

GNU Savannah has several requirements for hosting projects:
https://savannah.gnu.org/register/requirements.php
http://savannah.gnu.org/maintenance/HowToGetYourProjectApprovedQuickly/

To comply with them, few items needs to be addressed.

First,
To avoid possible confusions, perhaps it would be advisable to modify the project's name.
I do not know what is the relation of this project to the "Slash dot" website code (a fork?)
but the Slahdot website is up and running, and possibly even giving its source code as "Slash Code".

Second,
One requirement is a perl module named "LocalMTA::SendMail".
This module is not on CPAN, and a tarball is available on the link you've provided.
However, this module does not contain an copyright or license statement - and so it is a problem to consider it Free Software.
Project hosted on GNU Savannah must not depend on nonfree software.

Third,
Some files in both tarballs do no have a copyright or license information.
Few examples are files in:
 ./slashcode-2.2.8-alpha/themes/slashcode/tasks
 ./Slash-2.002008_01/lib/Slash/

Fouth,
The copyright information in these files is a bit murky.
Many files carry a copyright of "1997-2001" by OSDN (I assume OSDN has since changed many names and owners).
Have these files not been changed since 2001 ?
If they have (and some definitely have been changed), then there's an issue of who changed them and what is the copyright.



Please, let us know when these issues are addressed and we could continue with the evaluation.

Regards,
 - Assaf

Assaf Gordon <agn>
Site Administrator
Mon 25 Aug 2014 12:08:19 AM UTC, original submission:  

A new project has been registered at Savannah
This project account will remain inactive until a site admin approves or discards the registration.


Registration Administration


While this item will be useful to track the registration process, approving or discarding the registration must be done using the specific Group Administration page, accessible only to site administrators, effectively logged as site administrators (superuser):



Registration Details


  • Name: SlashNerd
  • System Name:  slashnerd
  • Type: non-GNU software and documentation
  • License: GNU General Public License v2 or later (Some Perl modules dependencies are under Perl's software distribution license.)





Description:

slashnerd is an API for web applications. It has all the fixins, storage, cookies, and authentication. It is 100% free software.



Other Software Required:


  • MySQL database (or MySQL clones like MariaDB)


 mysql.com

  • Apache/mod_perlv2


 httpd.apache.org

 perl.apache.org

  • Slashnerdcode


 https://sourceforge.net/projects/slashnerdcode

  • A bunch of Perl modules on CPAN (complete list, what is requested in INSTALL instructions)


 http://cpan.org

 Net::Cmd

 Digest::MD5

 MD5 Compress::Zlib

 Archive::Tar

 File::Spec

 Storable

 MIME::Base64

 URI Net::FTP

 HTML::Tagset

 HTML::Parser

 HTML::HeadParser

 LWP MIME::Types

 HTML::Element

 Font::AFM

 HTML::FormatText

 HTML::TokeParser

 HTML::ElementTable

 HTML::CalendarMonth

 HTML::PopupTreeSelect

 Mail::Sendmail

 Mail::Address

 Email::Valid

 Getopt::Long

 Image::Size

 Time::HiRes

 Date::Parse

 Date::Manip

 Bit::Vector

 Date::Calc

 Time::ParseDate

 Schedule::Cron

 XML::Parser

 Test::Manifest

 XML::RSS

 XML::Simple

 DBI Data::ShowTable

 AppConfig

 Template

 LWP::UserAgent

 Lingua::Stem

 URI::Find

 Config::General

 Set::IntSpan

 Text::Iconv

 Data::JavaScript::Anon



Other Comments:

This is the API that ran Slashdot.com back in the early 2000s. I fixed it up, and now it is installable, but it needs a code review to fix up the code base, add stability, and more importantly, squash security bugs.


Tarball URL:

https://sourceforge.net/projects/slashnerd/


taj <lockfile2>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

Attached Files
file #32014:  LocalMTA-Sendmail-0.04.tar.gz added by lockfile2 (11KiB - application/x-gzip - I wrote this Perl distribution so the Freeslashcode application can send emails. The module it used to use to send emails is badly written (Mail::Sendmail on CPAN), and has not seen use for about a decade.)
file #31975:  freeslashcode-2.2.8-alpha.tar.gz added by lockfile2 (642KiB - application/x-gzip - These are the latest versions of what I initially submitted. I added copyright and license data to the packages that were missing earlier. The source for LocalMTA-Sendmail is included, and copyright and license information added--was previously missing.)
file #31976:  LocalMTA-Sendmail-0.02.tar.gz added by lockfile2 (11KiB - application/x-gzip - These are the latest versions of what I initially submitted. I added copyright and license data to the packages that were missing earlier. The source for LocalMTA-Sendmail is included, and copyright and license information added--was previously missing.)
file #31974:  FreeSlash-2.002008_01.tar.gz added by lockfile2 (206KiB - application/x-gzip - These are the latest versions of what I initially submitted. I added copyright and license data to the packages that were missing earlier. The source for LocalMTA-Sendmail is included, and copyright and license information added--was previously missing.)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by ineiev (Posted a comment)
  • -email is unavailable- added by _289157 (Voted in favor of this item)
  • -email is unavailable- added by karl (Posted a comment)
  • -email is unavailable- added by agn (Posted a comment)
  • -email is unavailable- added by lockfile2 (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 10 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2024-01-11 ineiev StatusWait reply Cancelled
        Assigned toagn None
        Open/ClosedOpen Closed
    2022-01-05 _289157 Carbon-Copy- Added fontdevelopment
    2014-09-01 lockfile2 Attached File- Added LocalMTA-Sendmail-0.04.tar.gz, #32014
    2014-08-27 lockfile2 Attached File- Added FreeSlash-2.002008_01.tar.gz, #31974
        Attached File- Added freeslashcode-2.2.8-alpha.tar.gz, #31975
        Attached File- Added LocalMTA-Sendmail-0.02.tar.gz, #31976
    2014-08-25 agn StatusNone Wait reply
        Assigned toNone agn

    Back to the top

    Powered by Savane 3.13-f8d8.
    Corresponding source code