<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Feb 15, 2017, at 11:58 AM, Karan, Cem F CIV USARMY RDECOM ARL (US) <<a href="mailto:cem.f.karan.civ@mail.mil" class="">cem.f.karan.civ@mail.mil</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">Does OSI have a license compatibility chart for the various approved licenses? <br class="">Something similar to <a href="https://www.gnu.org/licenses/license-list.html" class="">https://www.gnu.org/licenses/license-list.html</a> ? Our <br class="">researchers are pulling in code from all kinds of sources, and we want to keep <br class="">them out of legal hot water, and a compatibility chart would be helpful for <br class="">this.<br class=""></div></div></blockquote><div><br class=""></div><div><br class=""></div><div>Hi Cem,</div><div><br class=""></div><div>There are a variety out on the web but nothing officially sanctioned because the devil is in the details when you talk about compatibility. It depends heavily on whether you are integrating, modifying, or simply using (unmodified) the 3rd party code. Creating a combined work is not necessarily the same as creating a derivative work is not the same as just linking against something. There are different compatibility concerns with each. </div></div><br class=""><div class="">For example, I can create an LGPL program that uses an Apache 2.0 library just fine, and distribute it as a combined work without too much concern. I can also create an Apache 2.0 program that links to an LGPL library, but I’d have to be more careful with how the LGPL library is linked (assuming there is no link exception granted) and used — no muddling of the code waters or my program becomes LGPL too. It’s a fair bit more complex with the strongly protective / viral licenses.</div><div class=""><br class=""></div><div class="">The attached image by Dr. David Wheeler (renowned Mil-OSS security researcher) is a reasonable starting point that you can find readily around the web in various forms. The flow diagram is basically describing code compatibility in the most general terms, about how/where code can migrate and/or be relicensed. E.g., I can’t take an MIT code and distribute it as public domain; but I can take a public domain code and distribute it as MIT. Note it’s NOT referring to simple usage or linking, otherwise it might falsely lead you to think you can’t link against an Apache 2.0 library in a GPLv2 work.</div><div class=""><br class=""></div><div class="">Cheers!</div><div class="">Sean</div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><img alt="License compatibility chart" apple-inline="yes" id="5C83DCC4-C246-48B7-AAE1-356CAA06BD53" src="cid:4DD97797-C85A-479F-ABA0-E097B6F34EF3" class=""></div><div class=""><br class=""></div><div class=""><br class=""></div></body></html>