spotify: bundling and license issues.

[Jonathan Dieter]

On Tue, 2012-11-06 at 14:25 +0100, Alec Leamas wrote:
> Im considering to package the Spotify client  [1]:  This is a binary 
> without sources  aimed for  the nonfree section. Two issues are not 
> immediately clear to me:
> 
> -Package  has a frightening  attachment of included licenses [2]. Do I 
> need to sort out all of these in the License: tag?! Or is there a 
> loophole to just use "Re-distributable, no changes permitted" , which is 
> the overall conditions from Spotify?
> 
> - To make things work, I need to bundle some old libs (libssl, 
> libcrypto) since I can't relink the  spotify binary blob.  Is this OK; 
> given that these libs are private and not visible to other packages?
> 
> Anyone,  out there?
> 
> --alec
> 
> 
> [1] http://community.spotify.com/t5/Desktop-Linux/bd-p/spotifylinux
> [2] http://leamas.fedorapeople.org/licenses.xhtml

I sure wouldn't mind seeing this.  Not sure what advice to give you on
licensing, but I wouldn't see the bundling as a deal-breaker as long as
you were willing to keep an eye on vulnerabilities in the bundled libs.

If the list's consensus is to go for it, I'd be happy to review it.

Jonathan