The binary distribution includes the needed licenses, but they are concatenated in a single file LICENSE.txt. For the binary distribution, only slf4j and bouncy castle are included, the other dependencies are mostly test dependencies or optional (and not included in the binary distribution). That seems a common practice too.
For the source distribution, my understanding is that the LICENSE/NOTICE files need only to cover the files included in the distribution (same as the binary distributions), not everything that is needed during the build, else we'd need all files for various maven plugins and transitive dependencies. So my feeling is that it is correct, but I could be wrong. Guillaume 2014-10-22 8:03 GMT+02:00 Emmanuel Lécharny <[email protected]>: > Le 21/10/14 11:28, Guillaume Nodet a écrit : > > I'd like to call a vote on releasing Apache SSHD 0.13.0 > > Please review and vote > > Hi Guillaume, > > I just built from the source with no problem. > > However, I checked the NOTICE and LICENSE files, and it seems you have > no reference to many dependencies used in the project : > > - jzlib > - BC > - SLF4J > - jsch > - junit > - jpam > - ganymed-ssh2 > - jgit > > I think we need to have a LICENSE.<xyz>.txt file per dependency, and a > reference to these licence files in NOTICE. > > wdyt ? > >
