kou commented on PR #55461: URL: https://github.com/apache/arrow/pull/55461#issuecomment-6784337528
Can we add license information for vendored dependencies to `arrow/tools/LICENSE.txt` in `arrow_X.Y.Z.tar.gz` that is submitted to CRAN? See also: https://www.apache.org/legal/release-policy.html#license-file > When a package bundles code under several licenses, the LICENSE file MUST contain details of all these licenses. For each component which is not Apache licensed, details of the component MUST be appended to the LICENSE file. The component license itself MUST either be appended or else stored elsewhere in the package with a pointer to it from the LICENSE file, e.g. if the license is long. See also: https://infra.apache.org/licensing-howto.html#permissive-deps > In LICENSE, add a [pointer](http://s.apache.org/Hqj) to the dependency's license within the distribution and a short note summarizing its licensing: > > This product bundles SuperWidget 1.2.3, which is available under a "3-clause BSD" license. For details, see deps/superwidget/. I know that `arrow_X.Y.Z.tar.gz` for CRAN is NOT an "official" release of Apache Arrow but could you follow the ASF policy? BTW, we may need to care about the CRAN Repository Policy too: https://cran.r-project.org/web/packages/policies.html#Source-packages > The ownership of copyright and intellectual property rights of all components of the package must be clear and unambiguous (including from the authors specification in the DESCRIPTION file). Where code is copied (or derived) from the work of others (including from R itself), care must be taken that any copyright/license statements are preserved and authorship is not misrepresented. > > Preferably, an ‘Authors@R’ field would be used with ‘ctb’ roles for the authors of such code. Alternatively, the ‘Author’ field should list these authors as contributors. > > Where copyrights are held by an entity other than the package authors, this should preferably be indicated via ‘cph’ roles in the ‘Authors@R’ field, or using a ‘Copyright’ field (if necessary referring to an inst/COPYRIGHTS file). > > Trademarks must be respected. > > (’All components’ includes any downloaded at installation or during use.) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
