On Tue, Dec 1, 2015 at 1:18 PM, Andy <andy...@gmx.de> wrote: > xbean-asm-shaded is dual licensed with an Apache 2.0 license, but I also > find the following references to the ASM license: > > \assembly\openejb-standalone\src\main\resources\LICENSE > \examples\LICENSE > \itests\openejb-itests-app\src\main\application\META-INF\LICENSE > \tomee\apache-tomee\src\main\resources\META-INF\LICENSE > \tomee\tomee-plume-webapp\src\main\resources\META-INF\LICENSE > \tomee\tomee-plus-webapp\src\main\resources\META-INF\LICENSE > \tomee\tomee-webapp\src\main\resources\META-INF\LICENSE > \utils\openejb-provisionning\src\main\legal\LICENSE >
It was actually a missing NOTICE: This product includes software developed at OW2 Consortium (http://asm.ow2.org/) Its not in the TomEE+ binary at the very least. > > Joda time is Apache 2.0: http://joda-time.sourceforge.net/license.html - > We are not shipping a 'Derivative Work' so the NOTICE mention is not > 'required', just courteous. We'll add it to the next release. > > Not sure what you mean with java-support OWasp? > The java-support jar is this library: https://git.shibboleth.net/view/?p=java-support.git;a=summary I had to dig around, but I think that this notice should be present: https://git.shibboleth.net/view/?p=java-support.git;a=blob_plain;f=doc/NOTICE.txt;hb=HEAD Jon -- Jonathan Gallimore http://twitter.com/jongallimore http://www.tomitribe.com
