Reily Siegel schreef op do 03-02-2022 om 19:25 [-0500]:
> +(define-public clojure-com-cognitect-aws-endpoints
> +  (package
> +    (inherit clojure-com-cognitect-aws-api)
> +    (name "clojure-com-cognitect-aws-endpoints")
> +    (version "1.1.12.136")
> +    (source (origin
> +              (method url-fetch)
> +              ;; This JAR contains only data files.
> +              (uri (string-append "https://repo1.maven.org/maven2/"
> +                                  "com/cognitect/aws/endpoints/"
> +                                  version "/endpoints-"
> +                                  version "-sources.jar"))
> +              (sha256
> +               (base32
> +                "15irzbnr0gp5pf0nh9vws6kyzjsbqshiqm9b8frjgsnizvqw0jqj"))))
> +    [...]
> +    (license license:asl2.0)))

I downloaded the source code. The hash matches.
It does indeed appear to be pure data.
However, I don't see any indication of it being ASL2.0
-- <https://mvnrepository.com/artifact/com.cognitect.aws/endpoints>
says it's Apache 2.0, but that seems in conflict with 4.(a) of the
ASL2.0:

4. Redistribution.   You may reproduce and distribute copies [...],
provided that You meet the following conditions:

a. You must give any other recipients of the Work or Derivative Works a
copy of this License; and [...]

so the license information on Maven doesn't seem convincing evidence.

It might be ASL2.0 after all, but stronger evidence is needed.

Greetings,
Maxime.