I just did a "mvn site" and here are the licenses found. Which of these licenses should be in a THIRD-PARTY.txt file and where would I find an example of such file that I can use as a template. Or should the information go into the http://svn.apache.org/repos/asf/incubator/esme/trunk/NOTICE.txt file?
BSD style: Hamcrest All, Hamcrest Core Public Domain: ParaNamer Core Apache 2: Apache Derby Database Engine and Embedded JDBC Driver, Compass, Joda time, Lucene Core, Lucene Snowball, OpenID4Java Consumer, OpenID4Java no dependencies, Unnamed - com.twitter:json:jar:1.1.2, Unnamed - com.twitter:ostrich:jar:1.1.16, Unnamed - net.lag:configgy:jar:1.5.3 Unknown: Unnamed - com.twitter:xrayspecs:pom:1.0.7, Unnamed - org.jboss.netty:netty:pom:3.1.5.GA, Unnamed - org.scala-tools:vscaladoc:pom:1.1-md-3, asm, cglib Apache License, Version 2.0: Lift Actor, Lift Common, Lift Json, Lift Mapper, Lift OpenID, Lift TestKit, Lift Util, Lift WebKit, Lift Widgets The Apache Software License, Version 2.0: Apache Enterprise Social Messaging Experiment (ESME), Codec, Commons FileUpload, Commons Logging, Lang, Log4j, Neko HTML, Unnamed - xml-apis:xml-apis:jar:1.3.03, Xerces2 Java Parser Scala License: Unnamed - com.twitter:json:jar:1.1.2 BSD-like: Unnamed - org.scala-lang:scala-compiler:jar:2.7.7, Unnamed - org.scala-lang:scala-library:jar:2.7.7 MIT license: Objenesis Apache License: HttpClient The H2 License, Version 1.0: H2 Database Engine Common Public License Version 1.0: JUnit MIT License: JCL 1.1.1 implemented over SLF4J, SLF4J API Module, SLF4J LOG4J-12 Binding, specs The MIT License: Mockito Common Development and Distribution License (CDDL) v1.0: JavaBeans Activation Framework (JAF), JavaMail API Apache License Version 2.0: Jetty Server, Jetty Utilities, Servlet Specification API On Tue, Sep 28, 2010 at 12:15 PM, Bertrand Delacretaz <[email protected]> wrote: > On Fri, Sep 24, 2010 at 6:22 PM, Richard Hirsch <[email protected]> wrote: >> ...The candidate can be found at http://people.apache.org/~rhirsch/esme/... > > Doing "mvn dependency:tree" on the pom.xml found in the release > archive lists a number of dependencies which licenses are not obvious > to me (output enclosed below). > > Do we have a list somewhere of those third-party libraries and their > licenses, to verify that they are ok? > > Best would IMO be a THIRD-PARTY.txt file in svn, that developers can > keep up to date. > > Sorry to be picky on that release, but I'm hoping that it's the last > one before graduating, soon ;-) > > -Bertrand > > > mvn output: > > [INFO] [dependency:tree {execution: default-cli}] > [INFO] org.apache.esme:esme-server:war:apache-esme-1.1-incubating > [INFO] +- org.scala-lang:scala-library:jar:2.7.7:compile > [INFO] +- org.openid4java:openid4java-nodeps:jar:0.9.5:compile > [INFO] | \- commons-logging:commons-logging:jar:1.1.1:compile > [INFO] +- net.liftweb:lift-util:jar:2.0:compile > [INFO] | +- javax.mail:mail:jar:1.4.1:compile > [INFO] | | \- javax.activation:activation:jar:1.1:compile > [INFO] | +- commons-codec:commons-codec:jar:1.3:compile > [INFO] | +- joda-time:joda-time:jar:1.6:compile > [INFO] | \- org.slf4j:slf4j-log4j12:jar:1.5.11:compile > [INFO] +- net.liftweb:lift-webkit:jar:2.0:compile > [INFO] | \- commons-fileupload:commons-fileupload:jar:1.2.1:compile > [INFO] +- net.liftweb:lift-widgets:jar:2.0:compile > [INFO] +- net.liftweb:lift-mapper:jar:2.0:compile > [INFO] | \- com.h2database:h2:jar:1.2.134:runtime > [INFO] +- net.liftweb:lift-testkit:jar:2.0:test (scope not updated to runtime) > [INFO] +- net.liftweb:lift-openid:jar:2.0:compile > [INFO] | +- org.openid4java:openid4java-consumer:jar:0.9.5:compile > [INFO] | | \- net.sourceforge.nekohtml:nekohtml:jar:1.9.7:compile > [INFO] | | \- xerces:xercesImpl:jar:2.8.1:compile > [INFO] | | \- xml-apis:xml-apis:jar:1.3.03:compile > [INFO] | \- org.slf4j:jcl-over-slf4j:jar:1.5.11:runtime > [INFO] +- net.liftweb:lift-actor:jar:2.0:compile > [INFO] +- net.liftweb:lift-json:jar:2.0:compile > [INFO] | \- com.thoughtworks.paranamer:paranamer:jar:2.0:compile > [INFO] +- net.liftweb:lift-common:jar:2.0:compile > [INFO] +- org.compass-project:compass:jar:2.1.1:compile > [INFO] +- org.apache.lucene:lucene-core:jar:2.4.0:compile > [INFO] +- commons-httpclient:commons-httpclient:jar:3.1:compile > [INFO] +- org.apache.derby:derby:jar:10.5.3.0_1:compile > [INFO] +- junit:junit:jar:4.4:test > [INFO] +- org.mortbay.jetty:jetty:jar:6.1.16:test > [INFO] | +- org.mortbay.jetty:jetty-util:jar:6.1.16:test > [INFO] | \- org.mortbay.jetty:servlet-api:jar:2.5-20081211:test > [INFO] +- org.scala-lang:scala-compiler:jar:2.7.7:compile > [INFO] +- org.apache.lucene:lucene-snowball:jar:2.4.0:compile > [INFO] +- log4j:log4j:jar:1.2.14:compile > [INFO] +- org.slf4j:slf4j-api:jar:1.5.11:compile > [INFO] +- net.lag:configgy:jar:1.5.3:compile > [INFO] | \- org.scala-tools:vscaladoc:jar:1.1-md-3:compile > [INFO] +- com.twitter:ostrich:jar:1.1.16:compile > [INFO] | +- cglib:cglib:jar:2.1_3:compile > [INFO] | +- commons-lang:commons-lang:jar:2.2:compile > [INFO] | +- org.objenesis:objenesis:jar:1.1:compile > [INFO] | +- org.mockito:mockito-core:jar:1.8.1:compile > [INFO] | | \- org.hamcrest:hamcrest-core:jar:1.1:compile > [INFO] | +- com.twitter:json:jar:1.1.2:compile > [INFO] | +- asm:asm:jar:1.5.3:compile > [INFO] | +- org.jboss.netty:netty:jar:3.1.5.GA:compile > [INFO] | +- com.twitter:xrayspecs:jar:1.0.7:compile > [INFO] | \- org.hamcrest:hamcrest-all:jar:1.1:compile > [INFO] \- org.scala-tools.testing:specs:jar:1.6.1:test (scope not > updated to compile) >
