It is ASLv2. Please check maven: https://mvnrepository.com/artifact/com.twitter/libthrift/0.5.0-7
Sijie On Dec 18, 2017 7:47 AM, "Ivan Kelly" <iv...@apache.org> wrote: Also, I can't find the source for libthrift. It seems to be a twitter fork of the original apache libthrift, but there's nothing on twitter's github. It is presumably ASL, but there's nothing to confirm this. -Ivan On Mon, Dec 18, 2017 at 4:22 PM, Enrico Olivelli <eolive...@gmail.com> wrote: > 2017-12-18 16:20 GMT+01:00 Ivan Kelly <iv...@apache.org>: > >> -1 again I'm afraid. The JSR305 jar is unaccounted for. Source code is >> hard to track down, but it turn up at >> https://code.google.com/archive/p/jsr-305/source/default/source >> >> This jar is New BSD licensed, but also has some files under Creative >> commons Attribution License, though they don't mention this in their >> own LICENSE, which is strange and annoying. >> >> Do we even need this jar? >> > > No, I am fighting against JSR305 in these days in my projects, it is a > clone of javax.annotations and it is imported from findbugs/spotbugs > annotations > We can exclude it from the packaging > > > >> >> -Ivan >> >> On Mon, Dec 18, 2017 at 2:57 PM, Enrico Olivelli <eolive...@gmail.com> >> wrote: >> > 2017-12-18 2:00 GMT+01:00 Jia Zhai <zhai...@apache.org>: >> > >> >> Hi everyone, >> >> >> >> Please review and vote on the release candidate #2 for the version >> >> 4.6.0, as follows: >> >> [ ] +1, Approve the release >> >> [ ] -1, Do not approve the release (please provide specific comments) >> >> >> > >> > >> > +1 (non binding) >> > Run tests from source package >> > Checked signatures and md5/sha1 for staged artifacts >> > Run test from my projects >> > Run basic commands in the shell with a single machine cluster >> > Started bookie with Prometheus stats provider >> > >> > I noticed an ephemeral port opened by the bookie but I can't remember the >> > reason >> > >> > Thank you Jia >> > Enrico >> > >> > >> > >> >> >> >> This new release candidate mainly fixed the license issue. >> >> >> >> The complete staging area is available for your review, which includes: >> >> * Release notes [1] >> >> * The official Apache source and binary distributions to be deployed >> >> to dist.apache.org [2] >> >> * All artifacts to be deployed to the Maven Central Repository [3] >> >> * Source code tag "release-4.6.0" [4] with sha >> >> 0d6c21e0a88749c428749841db59cf53195e556c >> >> >> >> BookKeeper's KEYS file contains PGP keys we used to sign this >> >> release:https://dist.apache.org/repos/dist/release/bookkeeper/KEYS >> >> >> >> Please download these packages and review this release candidate: >> >> >> >> - Review release notes >> >> - Download the source package (verify md5, shasum, and asc) and follow >> the >> >> instructions to build and run the bookkeeper service. >> >> - Download the binary package (verify md5, shasum, and asc) and follow >> the >> >> instructions to run the bookkeeper service. >> >> - Review maven repo, release tag, licenses, and any other things you >> think >> >> it is important to a release. >> >> >> >> The vote will be open for at least 72 hours. It is adopted by majority >> >> approval, with at least 3 PMC affirmative votes. >> >> >> >> Thanks, >> >> Jia Zhai >> >> >> >> [1] *https://github.com/apache/bookkeeper/pull/759 >> >> <https://github.com/apache/bookkeeper/pull/759>* >> >> [2] *https://dist.apache.org/repos/dist/dev/bookkeeper/ >> >> bookkeeper-4.6.0-rc2/ >> >> <https://dist.apache.org/repos/dist/dev/bookkeeper/ >> bookkeeper-4.6.0-rc2/>* >> >> [3] >> >> https://repository.apache.org/content/repositories/ >> >> orgapachebookkeeper-1023/ >> >> [4] https://github.com/apache/bookkeeper/tree/release-4.6.0 >> >> >>