Also, it looks like helix-core has same issue (though my guess is test scope makes it not matter):
[INFO] ------------------------------------------------------------------------ [INFO] Building Apache Helix :: Core 0.7.2-SNAPSHOT [INFO] ------------------------------------------------------------------------ [INFO] [INFO] --- maven-dependency-plugin:2.8:tree (default-cli) @ helix-core --- [INFO] org.apache.helix:helix-core:bundle:0.7.2-SNAPSHOT [INFO] +- log4j:log4j:jar:1.2.15:compile [INFO] +- org.apache.zookeeper:zookeeper:jar:3.3.4:compile [INFO] | \- jline:jline:jar:0.9.94:compile [INFO] +- org.codehaus.jackson:jackson-core-asl:jar:1.8.5:compile [INFO] +- org.codehaus.jackson:jackson-mapper-asl:jar:1.8.5:compile [INFO] +- commons-io:commons-io:jar:2.2:compile [INFO] +- commons-cli:commons-cli:jar:1.2:compile [INFO] +- com.github.sgroschupf:zkclient:jar:0.1:compile [INFO] +- org.testng:testng:jar:6.0.1:test *[INFO] | +- org.beanshell:bsh:jar:2.0b4:test* [INFO] | \- com.beust:jcommander:jar:1.12:test [INFO] +- org.mockito:mockito-all:jar:1.9.5:test [INFO] +- org.apache.commons:commons-math:jar:2.1:compile [INFO] +- commons-codec:commons-codec:jar:1.6:compile [INFO] +- com.google.guava:guava:jar:15.0:compile [INFO] \- org.yaml:snakeyaml:jar:1.12:compile On Sun, Apr 12, 2015 at 7:53 PM, Greg Brandt <[email protected]> wrote: > org.beanshell.bsh is being pulled in by testng: > > [INFO] \- org.testng:testng:jar:6.0.1:provided > [INFO] +- junit:junit:jar:4.11:test > [INFO] | \- org.hamcrest:hamcrest-core:jar:1.3:test > [INFO] +- org.beanshell:bsh:jar:2.0b4:provided > [INFO] \- com.beust:jcommander:jar:1.12:provided > > For better or worse, there are no tests for helix-ui (yet), but if we > change the scope of org.testng:testng to test, does that solve the problem? > > -Greg > > On Sun, Apr 12, 2015 at 7:50 PM, Kanak Biscuitwala <[email protected]> > wrote: > >> Taking a quick look, the only dependency that is LGPL and isn't >> dual-license with Apache, Eclipse, or similar is org.beanshell.bsh. Is this >> dependency critical? If not, we can just add a Maven exclusion. >> >> ________________________________ >> > From: [email protected] >> > Date: Sun, 12 Apr 2015 19:40:44 -0700 >> > Subject: Re: helix-ui dependency >> > To: [email protected] >> > >> > I've attached licenses.xml result of running "mvn >> > license:download-licenses -f helix-ui/pom.xml" >> > >> > There are some with LGPL, so helix-ui is not in accordance with >> > https://www.apache.org/legal/resolved.html#category-x >> > >> > It may make sense to move helix-ui to contributors/helix-ui. >> > >> > -Greg >> > >> > On Sun, Apr 12, 2015 at 6:57 PM, kishore g >> > <[email protected]<mailto:[email protected]>> wrote: >> > Helix-ui module has the following dependencies (close to 100). >> > >> > Are the licenses are compatible. Also do we need all these jars, can we >> > eclude the ones we don't need? >> > >> > validation-api-1.1.0.Final.jar >> > javax.servlet-api-3.1.0.jar >> > javax.ws.rs-api-2.0.1.jar >> > javax.annotation-api-1.2.jar >> > dropwizard-core-0.8.0.jar >> > dropwizard-util-0.8.0.jar >> > jackson-annotations-2.5.0.jar >> > guava-18.0.jar >> > jsr305-3.0.0.jar >> > joda-time-2.7.jar >> > dropwizard-jackson-0.8.0.jar >> > jackson-core-2.5.1.jar >> > jackson-databind-2.5.1.jar >> > jackson-datatype-jdk7-2.5.1.jar >> > jackson-datatype-guava-2.5.1.jar >> > jackson-module-afterburner-2.5.1.jar >> > jackson-datatype-joda-2.5.1.jar >> > slf4j-api-1.7.10.jar >> > logback-classic-1.1.2.jar >> > logback-core-1.1.2.jar >> > dropwizard-validation-0.8.0.jar >> > hibernate-validator-5.1.3.Final.jar >> > jboss-logging-3.1.3.GA.jar >> > classmate-1.0.0.jar >> > javax.el-3.0.0.jar >> > dropwizard-configuration-0.8.0.jar >> > jackson-dataformat-yaml-2.5.1.jar >> > snakeyaml-1.12.jar >> > commons-lang3-3.3.2.jar >> > dropwizard-logging-0.8.0.jar >> > metrics-logback-3.1.0.jar >> > metrics-core-3.1.0.jar >> > jul-to-slf4j-1.7.10.jar >> > log4j-over-slf4j-1.7.10.jar >> > jcl-over-slf4j-1.7.10.jar >> > jetty-util-9.2.9.v20150224.jar >> > dropwizard-metrics-0.8.0.jar >> > dropwizard-lifecycle-0.8.0.jar >> > jetty-server-9.2.9.v20150224.jar >> > jetty-http-9.2.9.v20150224.jar >> > jetty-io-9.2.9.v20150224.jar >> > dropwizard-jersey-0.8.0.jar >> > jersey-server-2.16.jar >> > jersey-common-2.16.jar >> > jersey-guava-2.16.jar >> > hk2-api-2.4.0-b09.jar >> > hk2-utils-2.4.0-b09.jar >> > aopalliance-repackaged-2.4.0-b09.jar >> > javax.inject-2.4.0-b09.jar >> > hk2-locator-2.4.0-b09.jar >> > javassist-3.18.1-GA.jar >> > osgi-resource-locator-1.0.1.jar >> > jersey-client-2.16.jar >> > jersey-media-jaxb-2.16.jar >> > jersey-metainf-services-2.16.jar >> > metrics-jersey2-3.1.0.jar >> > metrics-annotation-3.1.0.jar >> > jackson-jaxrs-json-provider-2.5.1.jar >> > jackson-jaxrs-base-2.5.1.jar >> > jackson-module-jaxb-annotations-2.5.1.jar >> > jersey-container-servlet-2.16.jar >> > jersey-container-servlet-core-2.16.jar >> > jetty-webapp-9.2.9.v20150224.jar >> > jetty-xml-9.2.9.v20150224.jar >> > jetty-servlet-9.2.9.v20150224.jar >> > jetty-security-9.2.9.v20150224.jar >> > jetty-continuation-9.2.9.v20150224.jar >> > dropwizard-servlets-0.8.0.jar >> > dropwizard-jetty-0.8.0.jar >> > metrics-jetty9-3.1.0.jar >> > jetty-servlets-9.2.9.v20150224.jar >> > metrics-jvm-3.1.0.jar >> > metrics-servlets-3.1.0.jar >> > metrics-healthchecks-3.1.0.jar >> > metrics-json-3.1.0.jar >> > argparse4j-0.4.4.jar >> > jetty-setuid-java-1.0.2.jar >> > dropwizard-assets-0.8.0.jar >> > dropwizard-views-freemarker-0.8.0.jar >> > dropwizard-views-0.8.0.jar >> > freemarker-2.3.21.jar >> > zookeeper-3.3.4.jar >> > jline-0.9.94.jar >> > jackson-core-asl-1.8.5.jar >> > jackson-mapper-asl-1.8.5.jar >> > commons-io-2.2.jar >> > commons-cli-1.2.jar >> > zkclient-0.1.jar >> > commons-math-2.1.jar >> > commons-codec-1.6.jar >> > testng-6.0.1.jar >> > junit-4.11.jar >> > hamcrest-core-1.3.jar >> > bsh-2.0b4.jar >> > jcommander-1.12.jar >> > >> >> > >
