Licensing and Dependency Compliance for Hibernate ORM 5.6.15 Final

Hibernate ORM
1

Hi Hibernate Team,

I’m using Hibernate ORM 5.6.15 Final in my software, which I plan to distribute under an EULA. Since Hibernate is licensed under LGPL V2.1, I understand I must comply with its terms.

However, I have a few questions regarding dependency compliance:

  1. Do I need to comply with the licenses of all third-party libraries that Hibernate depends on?
  • If so, is there an official or recommended list of dependencies and their respective licenses for Hibernate ORM 5.6.15?
  1. Why doesn’t Hibernate include the licenses of its dependencies in its release package?
  • Wouldn’t it simplify compliance for users if a bundled list of licenses or notices were included?

Any guidance or best practices for ensuring compliance when distributing Hibernate and its dependencies would be greatly appreciated.

Thank you!

Best regards,
Swapnil Nagtilak

2

If you need legal advice, please ask a lawyer. We only distribute Hibernate ORM and we do that under the LGPL license, so we include that. We’re not in control of the versions of dependencies that you download, so Hibernate ORM can’t bundle licenses of transitive dependencies.

If you want a full bundle that just works and has all this figured out, please use Quarkus or JBoss EAP/Wildfly.