[ 
https://issues.apache.org/jira/browse/HADOOP-18086?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Akira Ajisaka updated HADOOP-18086:
-----------------------------------
    Priority: Major  (was: Blocker)

> Remove org.checkerframework.dataflow from hadoop-shaded-guava artifact (GNU 
> GPLv2 license)
> ------------------------------------------------------------------------------------------
>
>                 Key: HADOOP-18086
>                 URL: https://issues.apache.org/jira/browse/HADOOP-18086
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: build
>            Reporter: László Bodor
>            Priority: Major
>              Labels: release-blocker
>
> Please refer to TEZ-4378 for further details:
> {code}
>  jar tf 
> ./hadoop-yarn-project/hadoop-yarn/hadoop-yarn-applications/hadoop-yarn-applications-catalog/hadoop-yarn-applications-catalog-webapp/target/app/WEB-INF/lib/hadoop-shaded-guava-1.1.1.jar
>  | grep "dataflow"
> org/apache/hadoop/thirdparty/org/checkerframework/dataflow/
> org/apache/hadoop/thirdparty/org/checkerframework/dataflow/qual/
> org/apache/hadoop/thirdparty/org/checkerframework/dataflow/qual/Deterministic.class
> org/apache/hadoop/thirdparty/org/checkerframework/dataflow/qual/Pure$Kind.class
> org/apache/hadoop/thirdparty/org/checkerframework/dataflow/qual/Pure.class
> org/apache/hadoop/thirdparty/org/checkerframework/dataflow/qual/SideEffectFree.class
> org/apache/hadoop/thirdparty/org/checkerframework/dataflow/qual/TerminatesExecution.class
> {code}
>  I can see that checker-qual LICENSE.txt was removed in the scope of 
> HADOOP-17648, but it has nothing to do with the license itself, only for 
> [resolving a shading 
> error|https://github.com/apache/hadoop-thirdparty/pull/9#issuecomment-822398949]
> my understanding is that in the current way an Apache licensed package (guava 
> shaded jar) will contain a GPLv2 licensed software, which makes it a subject 
> of GPLv2, also triggers license violations in security tools (like BlackDuck)



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-issues-h...@hadoop.apache.org

Reply via email to