[ 
https://issues.apache.org/jira/browse/HADOOP-12893?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15288105#comment-15288105
 ] 

Billie Rinaldi commented on HADOOP-12893:
-----------------------------------------

I took a look at the patch. Apache releases cannot contain any LGPL 
dependencies, so if any exist they must be removed before a release can be 
made. Going through the list of things that are stated to be LGPL in this patch:
* FindBugs-jsr305 looks like it might be BSD, but I'm not sure 
(https://github.com/findbugsproject/findbugs/blob/master/findbugs/licenses/LICENSE-jsr305.txt)
* Data Mapper for Jackson and Xml Compatibility extensions for Jackson are 
dual-licensed AL (http://wiki.fasterxml.com/JacksonDownload under "Licensing")
* Javassist is triple licensed MPL/LGPL/Apache 
(https://github.com/jboss-javassist/javassist/tree/rel_3_18_1_ga)

The following items I can't find bundled; can anyone else? If they aren't 
actually bundled, we don't need to mention them.
* logback could be licensed under EPL instead 
(http://logback.qos.ch/license.html)
* jdiff is LGPL and can't be bundled

I haven't looked in detail at the other additions in the patch, but we should 
make sure they are all bundled dependencies. I was wondering about the 
inclusion of mockito and junit, for example. Are those actually needed, or is 
it just a case of not specifying the test scope for those dependencies in some 
of the modules?

> Verify LICENSE.txt and NOTICE.txt
> ---------------------------------
>
>                 Key: HADOOP-12893
>                 URL: https://issues.apache.org/jira/browse/HADOOP-12893
>             Project: Hadoop Common
>          Issue Type: Bug
>    Affects Versions: 2.8.0, 2.7.3, 2.6.5, 3.0.0-alpha1
>            Reporter: Allen Wittenauer
>            Assignee: Xiao Chen
>            Priority: Blocker
>         Attachments: HADOOP-12893.01.patch
>
>
> We have many bundled dependencies in both the source and the binary artifacts 
> that are not in LICENSE.txt and NOTICE.txt.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-issues-h...@hadoop.apache.org

Reply via email to