Hi Phillip. I also don't want to enter a legal battle, and I certainly don't speak for the rest of the Arch Linux team. However, it appears to me that there's plenty going on here: 1) The distribution website is the first hit if you google libccmio-2.6.1-.tar.gz, I wonder if your searches are being directed to the AUR given your previous search history (i.e., filter-bubble). 2) It appears that the copyright owner is Adapco, not siemens. IIUC Siemens bought Adapco on 2016. Did you guys forget to update the copyright notice or is this an old tarball that was distributed before? 3) It appears this is hosted on a US .gov website, under a portal for distribution of scientific code. I'm sure would like to know if they are distributed copyrighted information. I can't seem to find a disclaimer noting they are able to distribute this tarball. 4) It also appears the tarball is distributing GPL-licensed code, which makes me wonder if this tarball itself is in violation of the GPL license (or was, and that's why the tarball is publicly available now). Either way, I do agree that deleting the package until this matter is settled is a reasonable way forward. Thanks, -Santiago. On Tue, Jun 25, 2019 at 02:53:36PM +0000, Jones, Philip via aur-general wrote:
Jerome
I appreciate that the package (https://aur.archlinux.org/packages/libccmio/) is not hosted on the site but if you Google " libccmio-2.6.1.tar.gz" it is the top hit.
The source has a copyright that states “The unauthorized use, distribution, or duplication of this program is prohibited.”
I don’t want to enter into a legal argument if the link is distribution or not, all I ask is that the listing be removed as a matter of courtesy. The material is clearly not designed to be publicly distributed.
Philip
----------------- Siemens Industry Software Limited is a limited company registered in England and Wales. Registered number: 3476850. Registered office: Faraday House, Sir William Siemens Square, Frimley, Surrey, GU16 8QD.