svn commit: r422505 - head/archivers/snappy-java

[David Chisnall]

On 21 Sep 2016, at 14:19, John Marino <freebsd.contact at marino.st> wrote:
> 
> It looks like that, unlike FreeBSD, they keep a copy of distribution tarballs that they use.  It's not a cache, but a primary repository.

It’s probably worth noting that for anything that is either GPLv2 (modified or unmodified) or GPLv3 and has patches applied, we are required to keep the sources for anything that we distribute in binary form (we must be able to provide, on written request, for a nominal sum, a copy of the sources up to three years after providing the binary).  If our cache is not providing these guarantees, then we should stop producing packages from any ports with these licenses - I know of at least one Linux distro that has had legal problems as a result of this.

David

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3698 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/svn-ports-head/attachments/20160921/6e3b6664/attachment.bin>