There is a current thread on general called Release Verification Checklist that is relevant here.
On Thu, Dec 5, 2013 at 9:32 AM, Kevin Minder <[email protected]>wrote: > Hi Everyone, > Here is what I think we should do to resolve this. I have both a short > term and long term goal in mind. > > Short term we need to review and enhance this. > https://cwiki.apache.org/confluence/display/KNOX/Dependencies > We need to review it to make sure it is still correct for 0.3.1. > We need to enhance it to capture exactly what should be in the LICENSE and > NOTICE files for each of these dependencies. > I think we should enlist sebb (Sebastian Bazley?) while we have his > attention in this effort. > > Long term I think we should propose some form of the result for this to be > maintained by Apache. It is very inefficient that each projects needs to > independently rediscover the right answer for this. There should just be a > list. If you use this JAR you need "this" in LICENSE and "that" in NOTICE. > > Kevin. > > -- > CONFIDENTIALITY NOTICE > NOTICE: This message is intended for the use of the individual or entity > to which it is addressed and may contain information that is confidential, > privileged and exempt from disclosure under applicable law. If the reader > of this message is not the intended recipient, you are hereby notified that > any printing, copying, dissemination, distribution, disclosure or > forwarding of this communication is strictly prohibited. If you have > received this communication in error, please contact the sender immediately > and delete it from your system. Thank You. >
