OSNews

One of the first things many already noted - myself included - was that the offending class library was not in the Harmony source tree, which should mean it didn't come from Harmony. However, the header and some of the language suggested otherwise, but in fact really didn't, as Apache's statement explains.

"Even though the code in question has an Apache license, it is not part of Harmony. PolicyNodeImpl.java is simply not a Harmony class," the ASF states, "Verifying that something is from the Apache Software Foundation is very easy to do: our sources are all posted online. So it is sad when people don't take that step."

Of course, we did take that step, but people still weren't convinced, mostly because of the language at the beginning of the file. Via email, ASF member Geir Magnusson Jr. explained this in more detail.

"I realize the code is under the org.apache.harmony package and has the Apache License on it, but putting things in org.apache.* namespace when testing Java in the org.apache.* package generally is a technical necessity, and anyone is free to license software under the Apache License," Geir explains, "In fact, we encourage it :)."

So, that's that, then. Despite claims made all over the place - including on OSNews, made by me - the class in question does not, and did not come, from the Apache Harmony project. My apologies for taking part in spreading the confusion.