Hi Felix, I believe that dependencies that are not bundled in the release are not required. Which would be all the dependencies listed in the two package.json files.
https://infra.apache.org/licensing-howto.html#bundled-vs-non-bundled For agensGraphRepository.js, the project AgensGraph is distributed under the Apache 2.0 license https://github.com/bitnine-oss/agensgraph/blob/master/LICENSE. No bundled bits are included in the release. A scan of the United Statement Patent and Trademark database yields no relevant results. We should remove the reference to bitnine/agviewer and either remove the section or construct a docker image under the apache name. On Thu, Dec 30, 2021 at 7:29 PM Felix Cheung <felixcheun...@hotmail.com> wrote: > lots of dependencies - are these licenses reviewed and handled in the > LICENSE file? > > https://github.com/apache/incubator-age-viewer/blob/main/backend/package.json > > https://github.com/apache/incubator-age-viewer/blob/main/frontend/package.jso\ > > this requires a component - again could be a LICENSE check, if it is > required for execution (at runtime) we should check license of that too. > Also what is the trademark on the “AgensGraph” name? > > https://github.com/apache/incubator-age-viewer/blob/main/backend/src/models/agensgraph/agensGraphRepository.js > '@bitnine-oss/ag-driver'); > > The > https://github.com/apache/incubator-age-viewer/blob/main/README.md > references to bitnine/agviewer > ________________________________ > From: Eya Badal <e...@apache.org> > Sent: Thursday, December 30, 2021 6:44:11 AM > To: dev@age.apache.org <dev@age.apache.org> > Subject: Re: [VOTE] Release Apache AGE Viewer (incubating) 1.0.0-rc0 > > Looks good to me > +1 > > I checked the following: > > - Signature and hash - check. > - DISCLAIMER - check. > - LICENSE and NOTICE - check. > - No unexpected binary files - check. > - incubating in name - check. > > Best, > Eya > > On 2021/12/23 00:58:26 Alex Kwak wrote: > > Dear Apache AGE Community, > > > > This is an official vote for the Apache AGE Viewer release v1.0.0-rc0 > that we have been working toward it. > > > > To learn more about Apache AGE, please see http://age.apache.org/ > > > > Functionalities included and addressed in this release: > > - Graph visualization for AGE. > > - Extends edge and vertex point by point. > > > > > > The vote is open now and until December 25th at 5:00 PM PST and passes > if a majority +1 votes are cast, with a minimum of 3 +1 votes. > > > > [ ] +1 Release this package as Apache AGE 0.6.0 > > [ ] 0 I won't get in the way > > [ ] -1 Do not release this package because ... > > > > > > The git tag to be discussed and voted upon > > https://github.com/apache/incubator-age-viewer/releases/tag/v1.0.0 > > > > The git commit hash: > > commit 2c55b2302875449565674aa039517734cf338031 > > > > The release files, including signatures, digests, etc. can be found at: > > > https://dist.apache.org/repos/dist/dev/incubator/age/viewer/apache-age-viewer-1.0.0-incubating-rc0/ > > > > The SHA512 Checksum for these artifacts is: > > > 8fa45254bba973678243a78321869aaf88c746b55168d4401931c5d6e87192c80d581d97e927c8b87098aaacba8d6f77bf1ca225e864c49117f5cb1887c699d0 > > > > Release artifacts are signed with the following key: > > https://downloads.apache.org/incubator/age/KEYS > > > > The fingerprint of key to sign release artifacts: > > 0E7F 408D 8C6A 1952 329C B379 D471 FDCE 5F5C 5B82 > > > > For more information about the contents of this release, see: > > https://github.com/apache/incubator-age-viewer/releases/tag/v1.0.0 > > > > > > > > Best regards, > > Alex Kwak > > >
