[ 
https://issues.apache.org/jira/browse/TAMAYA-144?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15990046#comment-15990046
 ] 

Oliver B. Fischer commented on TAMAYA-144:
------------------------------------------

I just  read the requirements of the ASF for {{LICENSE}} and {{NOTICE}}.  It is 
a quite time consuming process to check all dependencies for each release 
manually and to update the {{LICENSE}} and {{NOTICE}} file if needed.

> Ensure correct licensing for binary distribution
> ------------------------------------------------
>
>                 Key: TAMAYA-144
>                 URL: https://issues.apache.org/jira/browse/TAMAYA-144
>             Project: Tamaya
>          Issue Type: Bug
>          Components: API, Docs, Extensions
>    Affects Versions: 0.2-incubating
>            Reporter: Anatole Tresch
>            Assignee: Oliver B. Fischer
>              Labels: build, tamaya-required-03
>             Fix For: 0.3-incubating
>
>   Original Estimate: 24h
>  Remaining Estimate: 24h
>
> The binary LICENSE and NOTICE needs a little work [1], could you please fix 
> this for the next release.
> - LICENSE is missing MIT licensed Asciidoctor and CodeRay (used in docs)
> - The final jar contains a number of 3rd party licensed software that is not 
> mentioned in LICENSE/NOTICE. This includes Dropwizard (Apache license with 
> NOTICE file), Jackson Core, Databind and Annotations (Apache), Gogole Common 
> libs, Joda Time (Apache with NOTICE), Jackson Afterburner (Apache?), slf4j 
> (MIT), Logbock (EPL or GNU), Hibinate Validator (Apache), Glassfish (CDDL), 
> Sun Expression Language Reference Implementation (CDDL), snakeyaml (Apache), 
> Apache Commons, Jetty (Apache with NOTICE), Jersey (CDDL), H2K (CDDL), 
> Javassist (MPL or GPL), Metrics (Apache), argparse4j (MIT), Arquillian 
> (Apache?), Shrink-wrap (Apache?), JBoss Modules (Apache), JBoss logging 
> (Apache).
> Most of this is Apache licensed, but there a few NOTICE files that may effect 
> your NOTICE [3] and there a couple of MIT licensed file. The CDDL / MPL 
> license software which need to treated carefully. [4]
> I may of missed a couple and you may want to double check the JBoss logging 
> as at one point it was GPL not Apache licensed.
> Thanks,
> Justin
> 1. http://www.apache.org/dev/licensing-howto.html#binary
> 2. ./modules/server/lib/tamaya-server-0.2-incubating.jar
> 3. http://www.apache.org/dev/licensing-howto.html#alv2-dep
> 4. http://www.apache.org/legal/resolved.html#category-b



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Reply via email to