[ 
https://issues.apache.org/jira/browse/HIVE-27504?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Stamatis Zampetakis updated HIVE-27504:
---------------------------------------
    Fix Version/s: 4.0.0

> Automate inclusion of 3-party licenses in binary distribution
> -------------------------------------------------------------
>
>                 Key: HIVE-27504
>                 URL: https://issues.apache.org/jira/browse/HIVE-27504
>             Project: Hive
>          Issue Type: Improvement
>            Reporter: Stamatis Zampetakis
>            Assignee: Stamatis Zampetakis
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 4.0.0
>
>
> Manually downloading and including licenses of bundled dependencies in the 
> binary distribution (as it is done currently under [binary-package-licenses 
> directory|
> https://github.com/apache/hive/tree/bd02abc9eba3aa0cd3701b26d9169130551a12ef/binary-package-licenses])
>  is error-prone and time consuming.
> Moreover, dependencies and their versions change rapidly and it is hard to 
> keep the LICENSE documentation correct and up-to-date. At the moment, the 
> binary-package-licenses directory is stale; some bundled dependencies are 
> missing, others do not longer exist, and versions are not mentioned anywhere 
> so we cannot know if the license has changed.
> Furthermore, every dependency change (add/remove/version bump) potentially 
> requires commits and modifications to the source code.
> The goal of this ticket is to automate the download and inclusion of 
> 3rd-party licenses in the binary distribution to minimize/eliminate the need 
> for human intervention. As part of the automation the following issues should 
> be fixed as well:
> 1. LICENSE/NOTICE should reflect exactly what lies inside each package 
> distribution (source & binary); ideally no more and definitely not less.
> 2. LICENSES for bundled dependencies should be referenced from the main 
> LICENSE file not from NOTICE (or other places) as it is right now.
> 3. For bundled dependencies their versions should be included cause different 
> version may use different licenses and it should be clear which version is 
> bundled.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to