[
https://issues.apache.org/jira/browse/RYA-177?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15555489#comment-15555489
]
ASF GitHub Bot commented on RYA-177:
------------------------------------
Github user amihalik commented on the issue:
https://github.com/apache/incubator-rya/pull/101
Better. I'm still seeing gt dependencies.
try running `mvn dependency:tree | grep gt` in your environment. I get
this:
```
[INFO] | | | +- org.geotools:gt-referencing:jar:14.1:compile
[INFO] | | | +- org.geotools:gt-grid:jar:14.1:compile
[INFO] | | | \- org.geotools:gt-transform:jar:14.1:compile
[INFO] | | +- org.geotools:gt-main:jar:14.1:compile
[INFO] | | +- org.geotools:gt-api:jar:14.1:compile
[INFO] | | +- org.geotools:gt-data:jar:14.1:compile
[INFO] | | +- org.geotools:gt-cql:jar:14.1:compile
[INFO] | | +- org.geotools:gt-metadata:jar:14.1:compile
[INFO] | | +- org.geotools:gt-render:jar:14.1:compile
[INFO] | | | \- org.geotools:gt-coverage:jar:14.1:compile
[INFO] | | +- org.geotools:gt-process-feature:jar:14.1:compile
[INFO] | | | \- org.geotools:gt-process:jar:14.1:compile
[INFO] | | | \- org.geotools:gt-shapefile:jar:14.1:compile
[INFO] | +- org.geotools:gt-opengis:jar:14.1:compile
```
> Review License on Rya Dependencies
> ----------------------------------
>
> Key: RYA-177
> URL: https://issues.apache.org/jira/browse/RYA-177
> Project: Rya
> Issue Type: Task
> Affects Versions: 3.2.10
> Reporter: Aaron Mihalik
> Assignee: David W. Lotts
> Priority: Blocker
>
> * jgridshift:jgridshift appears to be LGPL licensed
> (https://github.com/floscher/jGridShift/blob/master/LICENSE). You may
> not use this software. It looks like it was not appropriately marked in
> its pom which is why the configuration from Rya's parent apache.pom did
> not catch it. This is brought in via org.geotools.xsd:gt-xsd-gml3.
> * colt (http://dst.lbl.gov/ACSSoftware/colt/) appears to be another
> brought in by com.tinkerpop.blueprints:blueprints-core
> * com.google.code.findbugs:jsr305 is another example of GPL licensing.
> While the artifact appears to have the ASL tagged on the pom, all
> Findbugs documentation states that the project is GPL.
> I would recommend to make a pass over your dependencies to verify that
> you aren't depending on any projects which are licensed with a license
> on this list: http://www.apache.org/legal/resolved.html#category-x. See
> http://www.apache.org/licenses/GPL-compatibility.html for more details.
> The above three examples were found via a brief glance.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
