On 26 June 2012 13:28, seba.wag...@gmail.com <seba.wag...@gmail.com> wrote: > Thanks for the feedback and review so far! > > About correct attribution of ASF JARs > Do they need a reference in the LICENSE file at all ?
The recipient of the package needs to be able to quickly find the license associated with all jars, so I would say yes. > Must the name of the JAR file be _exactly_ mentioned in the LICENSE file? > For example: > http://svn.apache.org/viewvc/incubator/openmeetings/tags/2.0RC2/LICENSE?view=markup > Line: 206 > "For GlassFish components / activation.jar" > => Do we need to write "activation-jar-1.1.jar" instead of "activation.jar" > ? Yes, because licenses may change between versions. > or Line 327 instead of "For SLF4J:" "slf4j-api-1.6.4.jar" > > Thanks, > Sebastian > > 2012/6/26 sebb <seb...@gmail.com> > >> On 26 June 2012 12:43, seba.wag...@gmail.com <seba.wag...@gmail.com> >> wrote: >> > @Sebb: Which of the Libraries do you think are duplicates? >> >> bcprov >> commons-beanutils >> commons-codec >> commons-collections >> ehcache-core >> httpclient >> httpcore >> >> etc. >> >> Not as many as I thought at first glance, but still quite a lot. >> >> > About License VS Notice file. From what I understood from >> > >> http://incubator.apache.org/guides/releasemanagement.html#best-practice-license >> > >> > >> > "The NOTICE document is for additional copyright and attribution >> statements >> > those licenses may require." >> > => As all libraries that are shipped are compliant to the Apache License >> I >> > would have expected that it is sufficient to only add a section to the >> > Notice file where the License requires additionall attribution. >> >> Yes. >> >> > All 3th party licenses are in the License file. >> >> This is impossible to check at present, because the file does not list >> all the jars it references. >> >> The only jar references I could find in the LICENSE file are: >> >> For GlassFish components / activation.jar >> For backport-util-concurrent-jar-3.1.jar >> For jaxb-api-jar-2.2.4.jar >> For jaxen-jar-1.1.1.jar >> For mail-jar-1.4.4.jar >> For wsdl4j-jar-1.6.2.jar >> For jython-2.5.jar >> dom4j-1.6.1.jar >> postgresql-jar-9.1-901.jdbc4.jar >> serp-1.13.1.jar - BSD License >> >> Yet the following jars are included: >> >> activation-jar-1.1.jar >> backport-util-concurrent-jar-3.1.jar >> bcprov-jdk16-145.jar >> boot.jar >> cglib-jar-2.2.2.jar >> com.springsource.javax.xml.stream-1.0.1.jar >> com.springsource.net.sf.cglib-2.2.0.jar >> com.springsource.org.antlr-3.1.3.jar >> com.springsource.org.aopalliance-1.0.0.jar >> com.springsource.org.apache.xerces-2.9.1.jar >> com.springsource.org.codehaus.groovy-1.7.0.jar >> com.springsource.org.mozilla.javascript-1.7.0.R2.jar >> com.springsource.org.objectweb.asm-3.2.0.jar >> com.springsource.org.objectweb.asm.commons-3.2.0.jar >> dom4j-jar-1.6.1.jar >> ehcache-core-2.5.0.jar >> ical4j-bundle-1.0.3.jar >> jasper-6.0.32.jar >> jasper-el-6.0.32.jar >> jasper-jdt-6.0.29.jar >> javaee-api-5.1.2.om.jar >> jaxb-api-jar-2.2.4.jar >> jaxb-impl-jar-2.2.4.jar >> jaxb-xjc-jar-2.2.4.jar >> jaxws-tools-jar-2.2.5.jar >> jcl-over-slf4j-1.6.4.jar >> jruby-1.6.7.2.jar >> jsr311-api-jar-1.1.1.jar >> jul-to-slf4j-1.6.4.jar >> jython-standalone-2.5.2.jar >> logback-classic-1.0.3.jar >> logback-core-1.0.3.jar >> mail-jar-1.4.4.jar >> neethi-bundle-3.0.3-SNAPSHOT.jar >> org.springframework.aspects-jar-3.1.1.RELEASE.jar >> org.springframework.jdbc-jar-3.1.1.RELEASE.jar >> org.springframework.orm-jar-3.1.1.RELEASE.jar >> org.springframework.transaction-jar-3.1.1.RELEASE.jar >> org.springframework.web.servlet-jar-3.1.1.RELEASE.jar >> postgresql-jar-9.1-901.jdbc4.jar >> quartz-1.8.5.jar >> red5-client.jar >> red5.jar >> serp-jar-1.13.1.jar >> servlet-api-jar-2.5.jar >> slf4j-api-1.6.4.jar >> spring-aop-3.1.1.RELEASE.jar >> spring-asm-3.1.1.RELEASE.jar >> spring-beans-3.1.1.RELEASE.jar >> spring-context-3.1.1.RELEASE.jar >> spring-context-support-3.1.1.RELEASE.jar >> spring-core-3.1.1.RELEASE.jar >> spring-expression-3.1.1.RELEASE.jar >> spring-web-3.1.1.RELEASE.jar >> stax-api-jar-1.0-2.jar >> stax2-api-jar-3.1.1.jar >> sysout-over-slf4j-1.0.2.jar >> tomcatplugin-1.3.jar >> woden-api-jar-1.0-SNAPSHOT.jar >> woden-impl-commons-jar-1.0-SNAPSHOT.jar >> woden-impl-dom-jar-1.0-SNAPSHOT.jar >> woodstox-core-asl-jar-4.1.3.jar >> wsdl4j-jar-1.6.2.jar >> XmlSchema-bundle-1.4.8-SNAPSHOT.jar >> xpp3-jar-1.1.4c.jar >> xstream-jar-1.4.2.jar >> >> Plus the following ASF jars: >> >> apache-mime4j-core-jar-0.8-SNAPSHOT.jar >> axiom-api-bundle-1.2.14-SNAPSHOT.jar >> axiom-dom-bundle-1.2.14-SNAPSHOT.jar >> axiom-impl-bundle-1.2.14-SNAPSHOT.jar >> axis2-jar-1.7.0-SNAPSHOT.jar >> axis2-jaxws-jar-1.7.0-SNAPSHOT.jar >> axis2-kernel-jar-1.7.0-SNAPSHOT.jar >> axis2-metadata-jar-1.7.0-SNAPSHOT.jar >> axis2-saaj-jar-1.7.0-SNAPSHOT.jar >> axis2-transport-http-bundle-1.7.0-SNAPSHOT.jar >> axis2-transport-local-bundle-1.7.0-SNAPSHOT.jar >> batik-anim-jar-1.7.jar >> batik-awt-util-jar-1.7.jar >> batik-bridge-jar-1.7.jar >> batik-codec-jar-1.7.jar >> batik-css-jar-1.7.jar >> batik-dom-jar-1.7.jar >> batik-ext-jar-1.7.jar >> batik-extension-jar-1.7.jar >> batik-gui-util-jar-1.7.jar >> batik-gvt-jar-1.7.jar >> batik-parser-jar-1.7.jar >> batik-rasterizer-jar-1.7.jar >> batik-script-jar-1.7.jar >> batik-slideshow-jar-1.7.jar >> batik-squiggle-jar-1.7.jar >> batik-svg-dom-jar-1.7.jar >> batik-svggen-jar-1.7.jar >> batik-svgpp-jar-1.7.jar >> batik-swing-jar-1.7.jar >> batik-transcoder-jar-1.7.jar >> batik-ttf2svg-jar-1.7.jar >> batik-util-jar-1.7.jar >> batik-xml-jar-1.7.jar >> catalina-6.0.32.jar >> commons-beanutils-1.8.3.jar >> commons-cli-jar-1.2.jar >> commons-codec-1.6.jar >> commons-codec-jar-1.6.jar >> commons-collections-3.2.1.jar >> commons-dbcp-jar-1.4.jar >> commons-digester-jar-2.1.jar >> commons-fileupload-jar-1.2.2.jar >> commons-fileupload-jar-1.2.jar >> commons-httpclient-jar-3.1.jar >> commons-io-jar-1.4.jar >> commons-io-jar-2.1.jar >> commons-lang-jar-2.6.jar >> commons-lang3-3.1.jar >> commons-modeler-2.0.1.jar >> commons-pool-1.5.6.jar >> commons-transaction-jar-1.2.jar >> derby-jar-10.8.2.2.jar >> derbyclient-jar-10.8.2.2.jar >> fop-jar-1.0.jar >> geronimo-activation_1.1_spec-jar-1.0.2.jar >> geronimo-annotation_1.0_spec-jar-1.1.jar >> geronimo-javamail_1.4_spec-bundle-1.6.jar >> geronimo-jaxws_2.2_spec-bundle-1.0.jar >> geronimo-jpa_2.0_spec-bundle-1.1.jar >> geronimo-jta_1.1_spec-jar-1.1.jar >> geronimo-saaj_1.3_spec-jar-1.0.1.jar >> geronimo-stax-api_1.0_spec-bundle-1.0.1.jar >> geronimo-ws-metadata_2.0_spec-jar-1.1.2.jar >> httpclient-4.1.2.jar >> httpclient-jar-4.2.jar >> httpcore-4.1.3.jar >> jaxen-jar-1.1.1.jar >> log4j-over-slf4j-1.6.4.jar >> mina-core-2.0.4.jar >> mina-integration-beans-2.0.4.jar >> mina-integration-jmx-2.0.4.jar >> openjpa-bundle-2.2.0.jar >> openmeetings-2.0.0-SNAPSHOT.jar >> openmeetings-screenshare-2.0.0-SNAPSHOT.jar >> openmeetings-templates-2.0.0-SNAPSHOT.jar >> openmeetings-WebService-2.0.0-SNAPSHOT.jar >> tomcat-coyote-6.0.32.jar >> tomcat-juli-slf4j-1.5.0.jar >> velocity-jar-1.7.jar >> velocity-tools-jar-2.0.jar >> ws-commons-util-jar-1.0.2.jar >> xalan-jar-2.7.0.jar >> xml-apis-ext-jar-1.3.04.jar >> xml-resolver-jar-1.2.jar >> xmlgraphics-commons-jar-1.4.jar >> xmlrpc-2.0.1.jar >> xmlrpc-client-jar-3.1.3.jar >> xmlrpc-common-jar-3.1.3.jar >> >> [Some of the first list of jars may be ASF, I did not check them all] >> >> Which jars are part of Glassfish? >> >> > I don't see any requirements for duplicating the same in the Notice file. >> >> Only required notices need to go in the license file. >> >> > Sebastian >> > >> > 2012/6/26 sebb <seb...@gmail.com> >> > >> >> On 26 June 2012 10:55, seba.wag...@gmail.com <seba.wag...@gmail.com> >> >> wrote: >> >> > Hi, >> >> > >> >> > that is the second Release Candidate (the first Candidate was voted >> >> > negative on the openmeetings dev mailing list and did not came that >> far) >> >> > >> >> > There was already a vote at the OpenMetings Dev mailing list. >> >> > Results: >> >> > PPMC: >> >> > aaf +1 (mentor) >> >> > solomax +1 >> >> > eschwert +1 >> >> > alvaro +1 >> >> > >> >> > Wider Community: 3 times +3 >> >> > >> >> > Result Vote Thread: >> >> > >> >> >> http://mail-archives.apache.org/mod_mbox/incubator-openmeetings-dev/201206.mbox/%3CCACeMiA9MMjmZCbKKQ9ud64i4OPV2FJ9h6daqoS5q9%3DxOZVad_w%40mail.gmail.com%3E >> >> > >> >> > The Vote Thread: >> >> > >> >> >> http://mail-archives.apache.org/mod_mbox/incubator-openmeetings-dev/201206.mbox/%3CCACeMiA9Xo7B13C14Uqq8VF%3DTCh3C7PNX6%2BQ4YJvO0cDej0e9vA%40mail.gmail.com%3E >> >> > >> >> > Main changes are covered in the Readme: >> >> > >> >> >> http://svn.apache.org/repos/asf/incubator/openmeetings/tags/2.0RC2/README >> >> > >> >> > Full Changelog: >> >> > >> >> >> http://svn.apache.org/repos/asf/incubator/openmeetings/tags/2.0RC2/CHANGELOG >> >> > >> >> > Release artefacts: >> >> > http://people.apache.org/~sebawagner/rc2/ >> >> >> >> The ASF releases source. >> >> Why is there no Zip archive of the source? >> >> There a zip and tar archives for the binary builds. >> >> >> >> The binary build includes a lot of 3rd party jars (about 80?, most of >> >> them duplicated). >> >> It's not clear if all the licenses for the included jars are included >> >> in the LICENSE file. >> >> I would expect some of them to require mention in the NOTICE file. >> >> >> >> The N&L files included in SVN, source and binary archives must relate >> >> only to the content which is actually included. >> >> This generally means different N&L files for the binary archives >> >> (unless the binary is created only from the source). >> >> >> >> The NOTICE files must only have *required* notices. >> >> >> >> > Tag: >> >> > http://svn.apache.org/repos/asf/incubator/openmeetings/tags/2.0RC2/ >> >> >> >> The NOTICE file looks wrong; it should not include the full licence >> >> for iCal4j which should be in the appropriate LICENSE file. >> >> The NOTICE file is for required notices only. >> >> >> >> As far as I can tell, only the FamFamFam icons are included in the >> >> source release (and SVN) so the corresponding N&L files should only >> >> refer to them. >> >> >> >> > PGP release keys (signed using 93A30395): >> >> > http://svn.apache.org/repos/asf/incubator/openmeetings/project/KEYS >> >> > >> >> > Vote will be open for 72 hours. >> >> > >> >> > [ ] +1 approve >> >> > [ ] +0 no opinion >> >> > [ ] -1 disapprove (and reason why) >> >> > >> >> > Best regards. >> >> > >> >> > -- >> >> > Sebastian Wagner >> >> > https://twitter.com/#!/dead_lock >> >> > http://www.openmeetings.de >> >> > http://www.webbase-design.de >> >> > http://www.wagner-sebastian.com >> >> > seba.wag...@gmail.com >> >> >> >> --------------------------------------------------------------------- >> >> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org >> >> For additional commands, e-mail: general-h...@incubator.apache.org >> >> >> >> >> > >> > >> > -- >> > Sebastian Wagner >> > https://twitter.com/#!/dead_lock >> > http://www.openmeetings.de >> > http://www.webbase-design.de >> > http://www.wagner-sebastian.com >> > seba.wag...@gmail.com >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org >> For additional commands, e-mail: general-h...@incubator.apache.org >> >> > > > -- > Sebastian Wagner > https://twitter.com/#!/dead_lock > http://www.openmeetings.de > http://www.webbase-design.de > http://www.wagner-sebastian.com > seba.wag...@gmail.com --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
