Possible copyright/license violations.

[RobertZenz]

Introduction

Since we've had time to review most of the code we've come to the conclusion that this plugin is possibly violating the copyright/license of two other projects:

• jd-eclipse, an Eclipse plugin which allows to embed/use JD in Eclipse.
• freeplugins, various plugins for Eclipse.

There might be more, but these are the two that stood out to us, I'll explain both in detail.

jd-eclipse

jd-eclipse is (even few a lot smaller) quite similar to structure and naming and there is a very high likely hood that ECD was originally based upon this code. I could not find irrefutable evidence that this is the case, but it sure smells like it. I've tried contacting the original author of jd-eclipse to request their opinion, but so far I've not heard back from them.

jd-eclipse is licensed under GPLv3, which, if this is the case, e relicense of ECD would be required.

freeplugins

To be honest, I could not find a lot of information on these, so I'm a little bit lost. Some of the code in the source.attach plugin is copied verbatim from these projects.

freeplugins might be licensed under Apache 2.0, the project itself does not carry information, but the Marketplace entry does.

Request for help

I request the help from anyone who has the time and will to have a look at this, please review the code and if you find something that might come from a different project, notify us in this issue. We should resolve these situations as soon as possible.

Additionally, if somebody has the possibility to contact the authors of jd-eclipse and freeplugins directly, please do so and notify them of this, their input is required here.

[leibnitz27]

You should certainly provide attribution / include component licenses / backlinks in documentation. For example, CFR (I'm the author, so I can at least speak for that one :) ) is provided under the MIT license, which at least asks for attribution.

[RobertZenz]

@leibnitz27 Very good call, we should definitely also mention the embedded and used decompilers and their licenses, even when they are "just" binaries and not source code.

[RobertZenz]

I've already opened jd-eclipse#24 in the [jd-eclipse]((https://github.com/java-decompiler/jd-eclipse) project, but anyone who has the possibility to contact the author directly, please do so.

[pbi-qfs]

It looks like this is the author-clone of the google repo of free-plugins: https://github.com/tha2015/free-plugins
The license is: Apache 2 (https://github.com/tha2015/free-plugins/blob/master/org.freejava.javasourceattacher.feature/feature.xml)