With following changes, I could reduce number of dependencies with 'No license specified'
1. sbt.version up from 0.13.9 to 0.13.11 in project/build.properties 2. sbt-dependency-graph version up from 0.8.0 to 0.8.2 in project/plugins.sbt 3. remove .ivy2 directory and download all dependencies again. Final dependencies with No license specified by sbt-dependency-graph plugin. [info] No license specified [info] org.apache.s2graph:s2core_2.11:0.1.0 -> Apache 2.0, category-a [info] commons-beanutils:commons-beanutils:1.7.0 -> Apache, category-a [info] javax.servlet.jsp:jsp-api:2.1 -> CDDL or GPL 2.0, category-x [info] org.codehaus.jettison:jettison:1.1 -> Apache 2.0, category-a [info] asm:asm:3.1 -> BSD, category-a [info] org.apache.zookeeper:zookeeper:3.4.6 -> Apache 2.0, category-a [info] javax.servlet:servlet-api:2.5 -> CDDL or GPL 2.0, category-x http://www.apache.org/legal/resolved.html#category-a [info] Apache 2 [info] org.joda:joda-convert:1.7 [info] joda-time:joda-time:2.5 [info] [info] Apache License [info] org.apache.httpcomponents:httpclient:4.2.5 [info] org.apache.httpcomponents:httpcore:4.2.4 [info] commons-httpclient:commons-httpclient:3.1 [info] [info] Apache License 2.0 [info] com.yammer.metrics:metrics-core:2.2.0 [info] [info] Apache License Version 2 [info] org.mortbay.jetty:jetty-sslengine:6.1.26 [info] [info] Apache License Version 2.0 [info] org.mortbay.jetty:jsp-api-2.1:6.1.14 [info] [info] Apache License, Version 2.0 [info] com.github.danielwegener:logback-kafka-appender:0.0.4 [info] org.scalikejdbc:scalikejdbc_2.11:2.1.4 [info] org.scalikejdbc:scalikejdbc-interpolation_2.11:2.1.4 [info] org.scalikejdbc:scalikejdbc-interpolation-macro_2.11:2.1.4 [info] org.scalikejdbc:scalikejdbc-core_2.11:2.1.4 [info] io.netty:netty:3.6.2.Final [info] net.java.dev.jets3t:jets3t:0.9.0 [info] com.jamesmurty.utils:java-xmlbuilder:0.4 [info] io.netty:netty-all:4.0.23.Final [info] com.github.stephenc.findbugs:findbugs-annotations:1.3.9-1 [info] com.typesafe.akka:akka-actor_2.11:2.3.4 [info] com.typesafe:config:1.2.1 [info] [info] Apache Software License - Version 2.0 [info] org.mortbay.jetty:jetty:6.1.26 [info] org.mortbay.jetty:jetty-util:6.1.26 [info] [info] Apache-2.0 [info] com.typesafe.play:play-json_2.11:2.3.10 [info] com.typesafe.play:play-datacommons_2.11:2.3.10 [info] com.typesafe.play:play-functional_2.11:2.3.10 [info] com.typesafe.play:play-iteratees_2.11:2.3.10 [info] [info] BSD [info] com.jcraft:jsch:0.1.42 [info] com.thoughtworks.paranamer:paranamer:2.3 [info] org.scala-stm:scala-stm_2.11:0.7 [info] [info] BSD 3-Clause [info] org.scala-lang:scala-reflect:2.11.4 [info] [info] BSD 3-clause [info] org.scala-lang.modules:scala-parser-combinators_2.11:1.0.4 [info] [info] MIT License [info] org.slf4j:slf4j-api:1.7.7 [info] org.jruby.joni:joni:2.1.2 [info] org.jruby.jcodings:jcodings:1.0.8 [info] [info] New BSD License [info] org.hamcrest:hamcrest-core:1.3 [info] [info] New BSD license [info] com.google.protobuf:protobuf-java:2.5.0 [info] [info] The Apache Software License, Version 2.0 [info] org.apache.kafka:kafka-clients:0.8.2.1 [info] commons-dbcp:commons-dbcp:1.4 [info] commons-pool:commons-pool:1.6 [info] org.xerial.snappy:snappy-java:1.1.1.6 [info] net.jpountz.lz4:lz4:1.2.0 [info] org.apache.hbase:hbase-hadoop2-compat:1.0.1 [info] org.apache.hadoop:hadoop-mapreduce-client-core:2.5.1 [info] org.apache.hadoop:hadoop-yarn-common:2.5.1 [info] com.google.inject.extensions:guice-servlet:3.0 [info] com.google.inject:guice:3.0 [info] org.sonatype.sisu.inject:cglib:2.2.1-v20090111 [info] org.codehaus.jackson:jackson-xc:1.9.13 [info] org.codehaus.jackson:jackson-jaxrs:1.9.13 [info] org.apache.hadoop:hadoop-yarn-api:2.5.1 [info] org.apache.hadoop:hadoop-common:2.5.1 [info] org.apache.hadoop:hadoop-auth:2.5.1 [info] org.apache.directory.server:apacheds-kerberos-codec:2.0.0-M15 [info] org.apache.directory.api:api-util:1.0.0-M20 [info] org.apache.directory.api:api-asn1-api:1.0.0-M20 [info] org.apache.directory.server:apacheds-i18n:2.0.0-M15 [info] org.apache.avro:avro:1.7.4 [info] org.apache.commons:commons-compress:1.4.1 [info] javax.inject:javax.inject:1 [info] org.codehaus.jackson:jackson-mapper-asl:1.9.13 [info] org.codehaus.jackson:jackson-core-asl:1.9.13 [info] commons-configuration:commons-configuration:1.6 [info] commons-beanutils:commons-beanutils-core:1.8.0 [info] commons-digester:commons-digester:1.8 [info] commons-net:commons-net:3.1 [info] org.apache.commons:commons-math3:3.1.1 [info] org.apache.hadoop:hadoop-annotations:2.5.1 [info] org.apache.hbase:hbase-server:1.0.1 [info] com.lmax:disruptor:3.3.0 [info] tomcat:jasper-runtime:5.5.23 [info] commons-el:commons-el:1.0 [info] tomcat:jasper-compiler:5.5.23 [info] commons-cli:commons-cli:1.2 [info] org.apache.hbase:hbase-prefix-tree:1.0.1 [info] org.apache.hbase:hbase-hadoop-compat:1.0.1 [info] org.apache.commons:commons-math:2.2 [info] org.apache.hbase:hbase-client:1.0.1 [info] org.apache.hbase:hbase-protocol:1.0.1 [info] org.apache.hbase:hbase-common:1.0.1 [info] org.apache.htrace:htrace-core:3.1.0-incubating [info] commons-io:commons-io:2.4 [info] commons-collections:commons-collections:3.2.1 [info] commons-lang:commons-lang:2.6 [info] commons-codec:commons-codec:1.9 [info] commons-logging:commons-logging:1.2 [info] org.apache.hbase:hbase-annotations:1.0.1 [info] log4j:log4j:1.2.17 [info] com.google.guava:guava:12.0.1 [info] com.google.code.findbugs:jsr305:1.3.9 [info] com.fasterxml.jackson.core:jackson-databind:2.3.2 [info] com.fasterxml.jackson.core:jackson-core:2.3.2 [info] com.fasterxml.jackson.core:jackson-annotations:2.3.2 [info] [info] The BSD License [info] xmlenc:xmlenc:0.52 http://www.apache.org/legal/resolved.html#category-b [info] CDDL 1.0 [info] org.mortbay.jetty:jsp-2.1:6.1.14 [info] org.mortbay.jetty:servlet-api-2.5:6.1.14 [info] [info] CDDL 1.1 [info] com.sun.jersey.contribs:jersey-guice:1.9 [info] com.sun.jersey:jersey-json:1.9 [info] com.sun.xml.bind:jaxb-impl:2.2.3-1 [info] javax.xml.bind:jaxb-api:2.2.2 [info] com.sun.jersey:jersey-server:1.9 [info] com.sun.jersey:jersey-core:1.9 [info] [info] Common Development and Distribution License (CDDL) v1.0 [info] javax.activation:activation:1.1 [info] [info] Common Public License Version 1.0 [info] junit:junit:4.11 [info] [info] Eclipse Public License - v 1.0 [info] ch.qos.logback:logback-classic:1.1.2 [info] ch.qos.logback:logback-core:1.1.2 [info] [info] MPL 2.0 or EPL 1.0 [info] com.h2database:h2:1.4.192 [info] [info] Mozilla Public License Version 1.1 [info] org.jamon:jamon-runtime:2.3.1 [info] [info] Public Domain [info] aopalliance:aopalliance:1.0 [info] org.tukaani:xz:1.0 http://www.apache.org/legal/resolved.html#category-x [info] GNU General Public Library [info] javax.xml.stream:stax-api:1.0-2 [info] [info] The GNU General Public License, Version 2 [info] mysql:mysql-connector-java:5.1.28 In summary I think dependencies with "cateogory-x" have following dependency tree. 1. javax.xml.stream:stax-api:1.0-2 comes from org.apache.hbase:hbase-hadoop2-compat:1.2.1 -> org.apache.hadoop:hadoop-common:2.5.1 -> com.sun.jersey:jersey-json:1.9 -> com.sun.xml.bind:jaxb-impl:2.2.3-1 -> javax.xml.bind:jaxb-api:2.2.2 2. javax.servlet.jsp:jsp-api:2.1 comes from org.apache.hbase:hbase-hadoop2-compat:1.0.1 3. javax.servlet:servlet-api:2.5 comes from org.apache.hadoop:hadoop-yarn-common:2.5.1 4. mysql:mysql-connector-java:5.1.28. 5. also we have custom patched asynchbase(LGPL v2.1). this Asynchbase jar is unmanaged(it is on s2core/lib directory). 1,2,3 comes from haddop and hbase so I guess it is ok. however 4 should be removed and ask user to download third party dependencies. Also 5 should be addressed as well. we should ask user to download 4,5 or we should change s2graph not to use 4,5. I am thinking about provide script download thirdparty dependencies on package. what do you guys think? Also I will take a look around on other incubator project releases especially whats included in LICENSE, NOTICE, DISCLAIMER and follow up with our LICENSE, NOTICE, DISCLAIMER. Please advice me if anyone has concerns. Best Regards. DOYUNG YOON On Tue, Jul 5, 2016 at 12:15 AM DO YUNG YOON <sho...@gmail.com> wrote: > Hi folks. > > I was working on creating LICENSE file for our release and following is > what I have got from `sbt dependencyLicenseInfo` on branch-0.1.0. > > I am not sure why bunch of jar are specified as `No license specified`. > Any help on figure out this? > I am following below references to decide which dependencies are ok to be > included. > > http://www.apache.org/legal/resolved.html#category-a > > [info] Apache 2 > [info] com.typesafe.netty:netty-http-pipelining:1.1.2 > [info] com.typesafe.play:twirl-api_2.11:1.0.2 > [info] org.joda:joda-convert:1.7 > [info] joda-time:joda-time:2.5 > [info] > [info] Apache License > [info] commons-httpclient:commons-httpclient:3.1 > [info] > [info] Apache License 2.0 > [info] com.ning:async-http-client:1.8.15 > [info] > [info] Apache License Version 2 > [info] org.mortbay.jetty:jetty-sslengine:6.1.26 > [info] > [info] Apache License, Version 2.0 > [info] com.typesafe.akka:akka-slf4j_2.11:2.3.4 > [info] io.netty:netty:3.9.9.Final > [info] com.github.danielwegener:logback-kafka-appender:0.0.4 > [info] org.scalikejdbc:scalikejdbc_2.11:2.1.4 > [info] org.scalikejdbc:scalikejdbc-interpolation_2.11:2.1.4 > [info] org.scalikejdbc:scalikejdbc-interpolation-macro_2.11:2.1.4 > [info] org.scalikejdbc:scalikejdbc-core_2.11:2.1.4 > [info] net.java.dev.jets3t:jets3t:0.9.0 > [info] com.jamesmurty.utils:java-xmlbuilder:0.4 > [info] com.github.stephenc.findbugs:findbugs-annotations:1.3.9-1 > [info] com.typesafe.akka:akka-actor_2.11:2.3.4 > [info] com.typesafe:config:1.2.1 > [info] > [info] Apache-2.0 > [info] com.typesafe.play:filters-helpers_2.11:2.3.10 > [info] com.typesafe.play:play-ws_2.11:2.3.10 > [info] com.typesafe.play:play_2.11:2.3.10 > [info] com.typesafe.play:build-link:2.3.10 > [info] com.typesafe.play:play-exceptions:2.3.10 > [info] com.typesafe.play:play-json_2.11:2.3.10 > [info] com.typesafe.play:play-datacommons_2.11:2.3.10 > [info] com.typesafe.play:play-functional_2.11:2.3.10 > [info] com.typesafe.play:play-iteratees_2.11:2.3.10 > [info] > [info] BSD > [info] com.jcraft:jsch:0.1.42 > [info] org.scala-stm:scala-stm_2.11:0.7 > [info] > [info] BSD 3-Clause > [info] org.scala-lang:scala-reflect:2.11.4 > [info] > [info] BSD 3-clause > [info] org.scala-lang.modules:scala-xml_2.11:1.0.2 > [info] org.scala-lang.modules:scala-parser-combinators_2.11:1.0.4 > [info] > [info] MIT > [info] redis.clients:jedis:2.6.0 > [info] > [info] MIT License > [info] org.jruby.joni:joni:2.1.2 > [info] org.jruby.jcodings:jcodings:1.0.8 > [info] > [info] Eclipse Public License - v 1.0 > [info] ch.qos.logback:logback-classic:1.1.2 > [info] ch.qos.logback:logback-core:1.1.2 > [info] > [info] New BSD license > [info] com.google.protobuf:protobuf-java:2.5.0 > [info] > [info] The Apache License, Version 2.0 > [info] org.spark-project.spark:unused:1.0.0 > [info] > [info] The Apache Software License, Version 2.0 > [info] com.google.code.findbugs:jsr305:3.0.0 > [info] com.google.code.gson:gson:2.2.4 > [info] xerces:xercesImpl:2.11.0 > [info] xml-apis:xml-apis:1.4.01 > [info] org.apache.kafka:kafka_2.11:0.8.2.1 > [info] com.101tec:zkclient:0.3 > [info] org.apache.kafka:kafka-clients:0.8.2.1 > [info] org.xerial.snappy:snappy-java:1.1.1.6 > [info] net.jpountz.lz4:lz4:1.2.0 > [info] org.sonatype.sisu.inject:cglib:2.2.1-v20090111 > [info] org.codehaus.jackson:jackson-xc:1.9.13 > [info] org.codehaus.jackson:jackson-jaxrs:1.9.13 > [info] javax.inject:javax.inject:1 > [info] org.codehaus.jackson:jackson-mapper-asl:1.9.13 > [info] org.codehaus.jackson:jackson-core-asl:1.9.13 > [info] commons-configuration:commons-configuration:1.6 > [info] commons-digester:commons-digester:1.8 > [info] com.lmax:disruptor:3.3.0 > [info] commons-el:commons-el:1.0 > [info] log4j:log4j:1.2.17 > [info] > [info] The BSD License > [info] xmlenc:xmlenc:0.52 > > http://www.apache.org/legal/resolved.html#category-b > > [info] CDDL 1.0 > [info] org.mortbay.jetty:jsp-2.1:6.1.14 > [info] org.mortbay.jetty:servlet-api-2.5:6.1.14 > [info] > [info] CDDL 1.1 > [info] com.sun.xml.bind:jaxb-impl:2.2.3-1 > [info] javax.xml.bind:jaxb-api:2.2.2 > [info] > [info] Common Development and Distribution License (CDDL) v1.0 > [info] javax.activation:activation:1.1 > [info] > [info] Common Public License Version 1.0 > [info] junit:junit:4.11 > [info] > [info] MPL 1.1 > [info] org.javassist:javassist:3.18.2-GA > [info] > [info] MPL 2.0 or EPL 1.0 > [info] com.h2database:h2:1.4.192 > [info] > [info] Public Domain > [info] aopalliance:aopalliance:1.0 > [info] org.tukaani:xz:1.0 > > http://www.apache.org/legal/resolved.html#category-x > > [info] GNU General Public Library > [info] javax.xml.stream:stax-api:1.0-2 > [info] > [info] The GNU General Public License, Version 2 > [info] mysql:mysql-connector-java:5.1.28 > > > No license specified > > [info] org.apache.s2graph:s2graph_2.11:0.1.0 > [info] org.apache.s2graph:s2counter-loader_2.11:0.1.0 > [info] org.apache.s2graph:s2spark_2.11:0.1.0 > [info] org.apache.s2graph:s2loader_2.11:0.1.0 > [info] org.apache.hadoop:hadoop-distcp:2.7.0 > [info] org.apache.httpcomponents:fluent-hc:4.2.5 > [info] org.apache.spark:spark-streaming-kafka_2.11:1.4.1 > [info] org.apache.s2graph:s2rest_netty_2.11:0.1.0 > [info] io.netty:netty-all:4.0.33.Final > [info] org.apache.s2graph:s2rest_play_2.11:0.1.0 > [info] org.apache.s2graph:s2counter-core_2.11:0.1.0 > [info] org.apache.commons:commons-pool2:2.0 > [info] org.apache.hadoop:hadoop-hdfs:2.7.0 > [info] org.fusesource.leveldbjni:leveldbjni-all:1.8 > [info] commons-daemon:commons-daemon:1.0.13 > [info] org.apache.hadoop:hadoop-common:2.7.0 > [info] org.apache.curator:curator-recipes:2.7.1 > [info] org.apache.hadoop:hadoop-auth:2.7.0 > [info] org.apache.curator:curator-framework:2.7.1 > [info] org.apache.curator:curator-client:2.7.1 > [info] org.slf4j:slf4j-api:1.7.10 > [info] org.apache.hadoop:hadoop-annotations:2.7.0 > [info] oauth.signpost:signpost-commonshttp4:1.2.1.2 > [info] oauth.signpost:signpost-core:1.2.1.2 > [info] javax.transaction:jta:1.1 > [info] org.slf4j:jcl-over-slf4j:1.7.6 > [info] org.apache.commons:commons-lang3:3.1 > [info] org.apache.s2graph:s2core_2.11:0.1.0 > [info] commons-dbcp:commons-dbcp:1.4 > [info] commons-pool:commons-pool:1.6 > [info] org.apache.hbase:hbase-hadoop2-compat:1.0.1 > [info] org.apache.hadoop:hadoop-mapreduce-client-core:2.5.1 > [info] org.apache.hadoop:hadoop-yarn-common:2.5.1 > [info] com.sun.jersey.contribs:jersey-guice:1.9 > [info] com.google.inject.extensions:guice-servlet:3.0 > [info] com.google.inject:guice:3.0 > [info] org.apache.hadoop:hadoop-yarn-api:2.5.1 > [info] org.apache.directory.server:apacheds-kerberos-codec:2.0.0-M15 > [info] org.apache.directory.api:api-util:1.0.0-M20 > [info] org.apache.directory.api:api-asn1-api:1.0.0-M20 > [info] org.apache.directory.server:apacheds-i18n:2.0.0-M15 > [info] org.apache.httpcomponents:httpclient:4.2.5 > [info] org.apache.httpcomponents:httpcore:4.2.4 > [info] org.apache.avro:avro:1.7.4 > [info] org.apache.commons:commons-compress:1.4.1 > [info] com.thoughtworks.paranamer:paranamer:2.3 > [info] commons-beanutils:commons-beanutils-core:1.8.0 > [info] commons-beanutils:commons-beanutils:1.7.0 > [info] javax.servlet.jsp:jsp-api:2.1 > [info] com.sun.jersey:jersey-json:1.9 > [info] org.codehaus.jettison:jettison:1.1 > [info] commons-net:commons-net:3.1 > [info] org.apache.commons:commons-math3:3.1.1 > [info] org.apache.hbase:hbase-server:1.0.1 > [info] org.jamon:jamon-runtime:2.3.1 > [info] tomcat:jasper-runtime:5.5.23 > [info] tomcat:jasper-compiler:5.5.23 > [info] org.mortbay.jetty:jsp-api-2.1:6.1.14 > [info] org.mortbay.jetty:jetty:6.1.26 > [info] commons-cli:commons-cli:1.2 > [info] com.sun.jersey:jersey-server:1.9 > [info] asm:asm:3.1 > [info] com.sun.jersey:jersey-core:1.9 > [info] com.yammer.metrics:metrics-core:2.2.0 > [info] org.apache.hbase:hbase-prefix-tree:1.0.1 > [info] org.apache.hbase:hbase-hadoop-compat:1.0.1 > [info] org.apache.commons:commons-math:2.2 > [info] org.apache.hbase:hbase-client:1.0.1 > [info] org.apache.zookeeper:zookeeper:3.4.6 > [info] org.apache.hbase:hbase-protocol:1.0.1 > [info] org.apache.hbase:hbase-common:1.0.1 > [info] org.apache.htrace:htrace-core:3.1.0-incubating > [info] org.mortbay.jetty:jetty-util:6.1.26 > [info] commons-io:commons-io:2.4 > [info] commons-collections:commons-collections:3.2.1 > [info] commons-lang:commons-lang:2.6 > [info] commons-codec:commons-codec:1.9 > [info] commons-logging:commons-logging:1.2 > [info] org.apache.hbase:hbase-annotations:1.0.1 > [info] com.google.guava:guava:12.0.1 > [info] com.fasterxml.jackson.core:jackson-databind:2.3.2 > [info] com.fasterxml.jackson.core:jackson-core:2.3.2 > [info] com.fasterxml.jackson.core:jackson-annotations:2.3.2 > [info] org.hamcrest:hamcrest-core:1.3 > [info] org.slf4j:jul-to-slf4j:1.7.6 > [info] javax.servlet:servlet-api:2.5 > > > So we need to discuss how we are going to handle these catogory-a, > category-b, category-x licenses on our LICENSE, NOTICE files. > > P.S. I am going to update `No license specified` list into one of > category-a, category-b, category-x tomorrow. > >
