Differences between revisions 14 and 15
Revision 14 as of 2017-03-03 12:13:13
Size: 3124
Editor: KaichungYan
Comment: Mention the latest maintained Androd implementation of JSON
Revision 15 as of 2017-12-07 15:15:23
Size: 3228
Editor: ?MarkusKoschany
Comment: FSF also lists the JSON license as a non-free license
Deletions are marked like this. Additions are marked like this.
Line 9: Line 9:
This license is considered non-free by Debian, [[http://www.gnu.org/licenses/license-list.html#JSON|GNU Project]], [[http://fedoraproject.org/wiki/Licensing:Main#Bad_Licenses|Fedora]], [[http://wonko.com/post/jsmin-isnt-welcome-on-google-code|Google]], [[https://bugzilla.redhat.com/show_bug.cgi?id=455507|Red Hat legal]] This license is considered non-free by Debian, [[http://www.gnu.org/licenses/license-list.html#JSON|GNU Project]], [[http://fedoraproject.org/wiki/Licensing:Main#Bad_Licenses|Fedora]], [[http://wonko.com/post/jsmin-isnt-welcome-on-google-code|Google]], [[https://bugzilla.redhat.com/show_bug.cgi?id=455507|Red Hat legal]], [[https://www.gnu.org/licenses/license-list.en.html#NonFreeSoftwareLicenses|Free Software Foundation]]

JSON non free license

The problem

JSON package is licenced under a MIT license but with an additional infamous clause:

The Software shall be used for Good, not Evil.

This license is considered non-free by Debian, GNU Project, Fedora, Google, Red Hat legal, Free Software Foundation

The author Douglas Crockford is well aware of the harm he's doing but numerous request from different projects and parties could not change his mind.

How can I check

Lintian will help, see #692616.

Check the file for double licensing.

How to solve

  • Reimplement the code - done by the android team (see below)
  • Ask for relicensing upstream - tried, not possible

I started a petition to ask Crockford to change his license, please sign it: https://www.change.org/petitions/douglas-crockford-remove-the-not-evil-clause-from-your-license-because-it-is-evil-itself

alternative json implementations for java

There are many json implementations in Java, but which one is the best to replace json.org?

Other upstream software which had or has this bug

Debian bugs on json.org usage: list

Maven artifacts depending on json.org mvnrepository

I found this bug

Please report this bug by adding to the bug header the following usertag and severity:

severity: serious
user: debian-qa@lists.debian.org
usertags: json-evil-license

See usertags documentation for more information about usertags.