Projects that rely on BOSL exceptions should say that they do

[daira]

This is important licensing information since it affects how those projects can be forked.

• zcash_script depends on orchard via zcash_primitives:
  • https://github.com/ZcashFoundation/zcash_script/blob/c9fbc441efd78593ba6a9828be45baf2d6469757/Cargo.toml#L57-L58
  • Projects that rely on BOSL exceptions should say that they do zcash_script#36
• zcash_chain depends on orchard directly and via zcash_primitives and zcash_note_encryption:

  • zebra/zebra-chain/Cargo.toml

    Lines 52 to 56 in 97fb85d

    	orchard = "0.2.0"
    	equihash = "0.1.0"
    	zcash_note_encryption = "0.1"
    	zcash_primitives = { version = "0.7.0", features = ["transparent-inputs"] }

• zcash_consensus directly and via zcash_proofs and other Zebra crates:

  • zebra/zebra-consensus/Cargo.toml

    Lines 37 to 48 in 97fb85d

    	orchard = "0.2.0"
    	# TODO: replace with upstream librustzcash when these changes are merged (#3037)
    	# Currently pointing to `download-sprout-params` branch.
    	zcash_proofs = { git = "https://github.com/ZcashFoundation/librustzcash.git", rev = "4567a37ceccbd506a58aaaded39ba14c952c1510", features = ["local-prover", "multicore", "download-params"] }
    	tower-fallback = { path = "../tower-fallback/" }
    	tower-batch = { path = "../tower-batch/" }
    	zebra-chain = { path = "../zebra-chain" }
    	zebra-state = { path = "../zebra-state" }
    	zebra-script = { path = "../zebra-script" }

• zebra_network via zebra_chain:

  • zebra/zebra-network/Cargo.toml

    Line 50 in 97fb85d

    zebra-chain = { path = "../zebra-chain" }

• zebra_node_services via zebra_chain:

  • zebra/zebra-node-services/Cargo.toml

    Line 10 in 97fb85d

    zebra-chain = { path = "../zebra-chain" }

• zebra_rpc via zebra_chain and zebra_state:

  • zebra/zebra-rpc/Cargo.toml

    Lines 54 to 55 in 97fb85d

    	zebra-chain = { path = "../zebra-chain", features = ["proptest-impl"] }
    	zebra-state = { path = "../zebra-state", features = ["proptest-impl"] }

• zebra_state via zebra_chain:

  • zebra/zebra-state/Cargo.toml

    Line 35 in 97fb85d

    zebra-chain = { path = "../zebra-chain" }

• zebrad via all of the above:

  • zebra/zebrad/Cargo.toml

    Lines 71 to 76 in 97fb85d

    	zebra-chain = { path = "../zebra-chain" }
    	zebra-consensus = { path = "../zebra-consensus/" }
    	zebra-network = { path = "../zebra-network" }
    	zebra-node-services = { path = "../zebra-node-services" }
    	zebra-rpc = { path = "../zebra-rpc" }
    	zebra-state = { path = "../zebra-state" }

A copy of the notice is needed for each potentially reusable crate or component.

Suggested wording is:

Downstream code forks should note that the code in this repository depends on
the 'orchard' crate, which is licensed under the Bootstrap Open Source License.
A license exception is provided allowing some derived works that are linked or
combined with the 'orchard' crate to be copied or distributed under the original
licenses (in this case MIT / Apache 2.0), provided that the included portions of
the 'orchard' code remain subject to BOSL.
See https://github.com/zcash/orchard/blob/main/COPYING for details of which
derived works can make use of this exception.

See also:

• https://forum.zcashcommunity.com/t/bosl-or-mit-orchard/41439/118
• Projects that rely on BOSL exceptions should say that they do zcash/zcash#5931 (similar issue for zcashd)
• Projects that rely on BOSL exceptions should say that they do zcash/librustzcash#577 (PR for librustzcash)

[daira]

The orchard crate has now been relicensed to MIT OR Apache 2.0: zcash/orchard#405. Strictly speaking, this issue is still valid until Zebra depends on an orchard release that includes the relicensing, i.e. 0.7.0: zcash/orchard#407

[mpguerra]

this would have been resolved by #8201 but we're waiting for zcash_primitives to be upgraded to orchard 0.7.0

[mpguerra]

depends-on: #8541 and #8540

[mpguerra]

I think we can close this now as zebra no longer depends on BOSL licensed versions of any crates.