3rd party license declarations

Author: ecrum19

Dockerfile

@@ -1,5 +1,9 @@
+ARG RMLSTREAMER_VERSION=2.5.0
+
 FROM eclipse-temurin:11-jre AS build-hdt-cpp
 
+ARG RMLSTREAMER_VERSION
+
 RUN apt-get update \
   && apt-get install -y --no-install-recommends \
     autoconf \
@@ -14,18 +18,25 @@ RUN apt-get update \
   && rm -rf /var/lib/apt/lists/*
 
 WORKDIR /opt
-RUN git clone --depth 1 https://github.com/rdfhdt/hdt-cpp.git
+RUN git clone --depth 1 https://github.com/rdfhdt/hdt-cpp.git \
+  && (git clone --branch "v${RMLSTREAMER_VERSION}" --depth 1 https://github.com/RMLio/RMLStreamer.git /opt/RMLStreamer \
+      || git clone --branch "${RMLSTREAMER_VERSION}" --depth 1 https://github.com/RMLio/RMLStreamer.git /opt/RMLStreamer \
+      || git clone --depth 1 https://github.com/RMLio/RMLStreamer.git /opt/RMLStreamer)
 
 WORKDIR /opt/hdt-cpp
 RUN ./autogen.sh \
   && ./configure \
   && make -j"$(nproc)" \
   && make install
 
+RUN mkdir -p /opt/third_party_licenses \
+  && cp /opt/hdt-cpp/libhdt/COPYRIGHT /opt/third_party_licenses/HDT-CPP.COPYRIGHT \
+  && cp /opt/RMLStreamer/LICENSE /opt/third_party_licenses/RMLStreamer.LICENSE
+
 
 FROM eclipse-temurin:11-jre
 
-ARG RMLSTREAMER_VERSION=2.5.0
+ARG RMLSTREAMER_VERSION
 
 RUN apt-get update \
   && apt-get install -y --no-install-recommends \
@@ -51,6 +62,8 @@ COPY --from=build-hdt-cpp /usr/local/bin/rdf2hdt /usr/local/bin/rdf2hdt
 COPY --from=build-hdt-cpp /usr/local/bin/hdt2rdf /usr/local/bin/hdt2rdf
 COPY --from=build-hdt-cpp /usr/local/lib/libcds* /usr/local/lib/
 COPY --from=build-hdt-cpp /usr/local/lib/libhdt* /usr/local/lib/
+COPY --from=build-hdt-cpp /opt/third_party_licenses/ /usr/share/licenses/vcf-rdfizer/
+COPY THIRD_PARTY_NOTICES.md /usr/share/licenses/vcf-rdfizer/THIRD_PARTY_NOTICES.md
 COPY src/*.sh /opt/vcf-rdfizer/
 
 RUN chmod +x /opt/vcf-rdfizer/*.sh \

README.md

@@ -136,6 +136,19 @@ vcf-rdfizer --help
 
 Note: these installs provide the Python wrapper CLI. Docker is still required at runtime.
 
+## Third-Party Licensing
+
+This project depends on:
+- `RMLStreamer`: <https://github.com/RMLio/RMLStreamer>
+- `HDT-cpp`: <https://github.com/rdfhdt/hdt-cpp>
+
+License/compliance handling:
+- Python/Conda package (`vcf-rdfizer`) ships the wrapper only.
+- Docker image ships third-party runtime tools and includes copied license files under:
+  - `/usr/share/licenses/vcf-rdfizer/`
+- Repository notice file:
+  - `THIRD_PARTY_NOTICES.md`
+
 Outputs:
 - `./tsv` for TSV intermediates
 - `./out` for RDF output

THIRD_PARTY_NOTICES.md

@@ -0,0 +1,28 @@
+# Third-Party Notices
+
+VCF-RDFizer (this repository) is released under the MIT License (see `LICENSE`).
+
+The Docker image also includes third-party software. Their licenses remain with
+their respective authors and apply to those components.
+
+## Included in Docker image
+
+1. `HDT-cpp`
+- Repository: <https://github.com/rdfhdt/hdt-cpp>
+- Usage in this project: RDF (`.nt`) to HDT conversion (`rdf2hdt`, `hdt2rdf`)
+- Upstream license statement: LGPL (see upstream project documentation and `libhdt/COPYRIGHT`)
+- License files copied into image:
+  - `/usr/share/licenses/vcf-rdfizer/HDT-CPP.COPYRIGHT`
+
+2. `RMLStreamer`
+- Repository: <https://github.com/RMLio/RMLStreamer>
+- Usage in this project: TSV-to-RDF conversion
+- Upstream license: MIT
+- License files copied into image:
+  - `/usr/share/licenses/vcf-rdfizer/RMLStreamer.LICENSE`
+
+## Notes for package users
+
+- The `pip` and `conda` packages install the Python wrapper CLI only.
+- The third-party binaries above are bundled in the Docker image, not in the
+  Python/conda package payload.

conda-recipe/README.md

@@ -30,3 +30,9 @@ After the initial feedstock is created:
 
 `vcf-rdfizer` uses Docker for actual conversion/compression execution.
 Conda installs the wrapper CLI; users still need Docker installed and running.
+
+## License scope reminder
+
+The conda package distributes the Python wrapper only.
+Third-party runtime tools used by the Docker image (for example HDT-cpp and
+RMLStreamer) are documented in `THIRD_PARTY_NOTICES.md`.

conda-recipe/meta.yaml

@@ -7,7 +7,7 @@ package:
 
 source:
   url: https://github.com/ecrum19/VCF-RDFizer/archive/refs/tags/v{{ version }}.tar.gz
-  sha256: REPLACE_WITH_RELEASE_TARBALL_SHA256
+  sha256: 958fd83c06aed34c9ef8f338f90fea07f4422017e6c45dead4dd3a1f1fee0ecc
 
 build:
   noarch: python
@@ -35,10 +35,12 @@ about:
   home: https://github.com/ecrum19/VCF-RDFizer
   summary: Docker-first VCF to RDF conversion wrapper with compression and decompression modes
   license: MIT
+  license_family: MIT
   license_file: LICENSE
   description: |
     VCF-RDFizer provides a Python CLI wrapper around a Dockerized VCF to RDF conversion pipeline.
     It requires a working Docker installation at runtime for conversion/compression commands.
+  doc_url: https://github.com/ecrum19/VCF-RDFizer/blob/main/README.md
 
 extra:
   recipe-maintainers: