Please reread the link you posted:

"Which Files Must Contain An ASF License Text?¶

Every source file must contain the appropriate ASF License text or boilerplate 
notice."


You don't verify the source of a binary because it's not a source. This is the 
same as not being able to verify the license of a png or jpeg via a license 
header - because those binary formats don't have any.
But we can verify the license of the file. Romain wrote those files and there 
is a proper NOTICE and LICENSE file in the jars. 

It's not perfect that we have those files in the source zip, but it is legally 
perfectly fine.

LieGrue,
strub


> Am 02.01.2017 um 23:38 schrieb John D. Ament <john.d.am...@gmail.com>:
> 
> Unfortunately that means users have no way of verifying the license [1]
> 
> 
> 
> [1]: http://www.apache.org/dev/release.html#which-files-contain-license
> 
> 
> On Mon, Jan 2, 2017 at 5:30 PM Mark Struberg <strub...@yahoo.de.invalid>
> wrote:
> 
>> Not really elegant, but the class is really more like a real resource.
>> It's also in SVN:
>> 
>> https://svn.apache.org/repos/asf/openwebbeans/meecrowave/tags/meecrowave-0.2.0/meecrowave-core/src/test/resources/org/superbiz/app-res/
>> 
>> In any case thanks for the review!
>> 
>> LieGrue,
>> strub
>> 
>> 
>>> Am 02.01.2017 um 23:00 schrieb Romain Manni-Bucau <rmannibu...@gmail.com
>>> :
>>> 
>>> This is part of the way a few (1 or 2) tests are written. This is
>> intended
>>> for now.
>>> 
>>> Le 2 janv. 2017 22:11, "John D. Ament" <johndam...@apache.org> a écrit :
>>> 
>>> You have two binaries in the source release:
>>> 
>>> ./meecrowave-core/src/test/resources/org/superbiz/app-
>>> res/OtherEndpoint.class
>>> 
>> ./meecrowave-core/src/test/resources/org/superbiz/app-res/OtherFilter.class
>>> 
>>> The allowable ASF binaries are usually graphics, not class files (which
>> are
>>> usually compiled java source files).  These both appear to be compiled
>>> source files.
>>> 
>>> John
>>> 
>>> On Mon, Jan 2, 2017 at 12:08 PM Mark Struberg <strub...@yahoo.de.invalid
>>> 
>>> wrote:
>>> 
>>>> Hi all!
>>>> 
>>>> It's time to do our very first Meecrowave release!
>>>> And since we already use it in some production systems we upped the
>>>> version from 0.0.1 to 0.2.0.
>>>> 
>>>> Here is the staging repo
>>>> 
>>>> https://repository.apache.org/content/repositories/
>>> orgapacheopenwebbeans-1021/
>>>> 
>>>> And here comes the source release zip:
>>>> 
>>>> https://repository.apache.org/content/repositories/
>>> orgapacheopenwebbeans-1021/org/apache/meecrowave/meecrowave/0.2.0/
>>>> 
>>>> My gpg key can be found at
>>>> https://svn.apache.org/repos/asf/openwebbeans/trunk/KEYS
>>>> 
>>>> So what is Apache Meecrowave (tm)?
>>>> 
>>>> Meecrowave is a lightweight bundle of
>>>> 
>>>> * Servlet-4.0 (Apache Tomcat 9.0.0.M15)
>>>> * CDI-1.2 (Apache OpenWebBeans-1.7.1)
>>>> * JAX-RS (Apache CXF-3.1.9)
>>>> * JSON-P-1.0 (Apache Johnzon-1.0.0)
>>>> 
>>>> And all that within only 9MB!
>>>> 
>>>> Want to test it?
>>>> Just download
>>>> 
>>>> https://repository.apache.org/content/repositories/
>>> orgapacheopenwebbeans-1021/org/apache/meecrowave/meecrowave-core/0.2.0/
>>> meecrowave-core-0.2.0-runner.jar
>>>> (sha1
>>>> <https://repository.apache.org/content/repositories/
>>> orgapacheopenwebbeans-1021/org/apache/meecrowave/meecrowave-core/0.2.0/
>>> meecrowave-core-0.2.0-runner.jar(sha1>:
>>>> 042a2b4344c494cff378f072423ed8bb4a2ea93a)
>>>> and type
>>>> 
>>>> For running an existing.war file:
>>>> java -jar meecrowave-core-0.2.0-runner.jar existing.war
>>>> 
>>>> For running an existing-fat.jar file:
>>>> java -jar meecrowave-core-0.2.0-runner.jar existing-fat.jar
>>>> 
>>>> Meecrowave can do a lot more.
>>>> We will host and imporove the docs at
>>>> http://openwebbeans.apache.org/meecrowave/
>>>> 
>>>> 
>>>> Please VOTE:
>>>> [+1] great, let's ship it
>>>> [+0] meh, don't care
>>>> [-1] stop there is a ${blocker}
>>>> 
>>>> The VOTE is open for 72h.
>>>> 
>>>> 
>>>> txs and LieGrue,
>>>> strub
>>>> 
>>>> PS: thanks to Romain for pushing this!
>> 
>> 

Reply via email to