Re: Dependencies licenses Report

[Jihoon Son]

I can do this. I'll make an issue for this in Github and raise a PR.

Jihoon

2018년 4월 20일 (금) 오후 12:30, Gian Merlino 님이 작성:

> Does anyone have experience with RAT (https://creadur.apache.org/rat/) and
> a willingness to do a PR to set it up for us? I think we can do this even
> before migrating sources to Apache.
>
> On Fri, Apr 20, 2018 at 10:52 AM, Slim Bouguerra  >
> wrote:
>
> > As Suggested above, RAT is used as a first filter that does most of the
> > checking but it is not 100% enough.
> > The mvn site plugin is used to collect list of dependencies but it is not
> > enough as well.
> > They manually edit/create the Licenses/Notice files. It is done by
> > hand/a_human to avoid any glitch that an automatic tool will introduce
> and
> > to insure that someone has looked at it.
> > Seems like it is time consuming the first time but then it should be
> > incremental thus not that hard.
> >
> >
> >
> > On Wed, Apr 18, 2018 at 8:45 AM, Julian Hyde 
> > wrote:
> >
> > > The main tool to use is Apache RAT. Definitely use that.
> > >
> > > One of the hardest tasks is getting the contents of LICENSE and NOTICE
> > > right. That is a manual task I’m afraid.
> > >
> > > Julian
> > >
> > > > On Apr 18, 2018, at 08:34, Gian Merlino 
> wrote:
> > > >
> > > > Hi Slim,
> > > >
> > > > Do you know if ORC & Hive use this tool as part of their release
> > process?
> > > > And if it's considered a good tool by itself for verifying we meet
> all
> > of
> > > > the Apache licensing requirements, or if we'll need something else
> too?
> > > >
> > > >> On Tue, Apr 17, 2018 at 9:15 PM, Slim Bouguerra 
> > > wrote:
> > > >>
> > > >> One of the question last dev synch was about the generation of
> > > dependency
> > > >> licenses.
> > > >> Some projects (ORC and Hive) use the maven site plugin that can
> > > generates
> > > >> reports with all the dependencies and licenses details.
> > > >> I have run it on Druid and this is how it looks for Druid Api
> Module.
> > > >> cmd
> > > >>
> > > >> mvn project-info-reports:dependencies
> > > >>
> > > >> The site directory can be found under target/site
> > > >> here is an example for one module
> > > >> https://drive.google.com/file/d/1P8R0kZjp8zP4WSOVrKdlJF7Xr8-
> > > >> OI7Oe/view?usp=sharing
> > > >>
> > > >> Also no fancy tools used to detect unwanted licenses, it is done
> while
> > > >> reviewing PR
> > > >>
> > > >>
> > > >>
> > > >>
> -
> > > >> To unsubscribe, e-mail: dev-unsubscr...@druid.apache.org
> > > >> For additional commands, e-mail: dev-h...@druid.apache.org
> > > >>
> > >
> > > -
> > > To unsubscribe, e-mail: dev-unsubscr...@druid.apache.org
> > > For additional commands, e-mail: dev-h...@druid.apache.org
> > >
> > >
> >
> >
> > --
> >
> > B-Slim
> > ___/\/\/\___/\/\/\___/\/\/\___/\/\/\___/\/\/\___
> >
>

Re: Dependencies licenses Report

[Gian Merlino]

Does anyone have experience with RAT (https://creadur.apache.org/rat/) and
a willingness to do a PR to set it up for us? I think we can do this even
before migrating sources to Apache.

On Fri, Apr 20, 2018 at 10:52 AM, Slim Bouguerra 
wrote:

> As Suggested above, RAT is used as a first filter that does most of the
> checking but it is not 100% enough.
> The mvn site plugin is used to collect list of dependencies but it is not
> enough as well.
> They manually edit/create the Licenses/Notice files. It is done by
> hand/a_human to avoid any glitch that an automatic tool will introduce and
> to insure that someone has looked at it.
> Seems like it is time consuming the first time but then it should be
> incremental thus not that hard.
>
>
>
> On Wed, Apr 18, 2018 at 8:45 AM, Julian Hyde 
> wrote:
>
> > The main tool to use is Apache RAT. Definitely use that.
> >
> > One of the hardest tasks is getting the contents of LICENSE and NOTICE
> > right. That is a manual task I’m afraid.
> >
> > Julian
> >
> > > On Apr 18, 2018, at 08:34, Gian Merlino  wrote:
> > >
> > > Hi Slim,
> > >
> > > Do you know if ORC & Hive use this tool as part of their release
> process?
> > > And if it's considered a good tool by itself for verifying we meet all
> of
> > > the Apache licensing requirements, or if we'll need something else too?
> > >
> > >> On Tue, Apr 17, 2018 at 9:15 PM, Slim Bouguerra 
> > wrote:
> > >>
> > >> One of the question last dev synch was about the generation of
> > dependency
> > >> licenses.
> > >> Some projects (ORC and Hive) use the maven site plugin that can
> > generates
> > >> reports with all the dependencies and licenses details.
> > >> I have run it on Druid and this is how it looks for Druid Api Module.
> > >> cmd
> > >>
> > >> mvn project-info-reports:dependencies
> > >>
> > >> The site directory can be found under target/site
> > >> here is an example for one module
> > >> https://drive.google.com/file/d/1P8R0kZjp8zP4WSOVrKdlJF7Xr8-
> > >> OI7Oe/view?usp=sharing
> > >>
> > >> Also no fancy tools used to detect unwanted licenses, it is done while
> > >> reviewing PR
> > >>
> > >>
> > >>
> > >> -
> > >> To unsubscribe, e-mail: dev-unsubscr...@druid.apache.org
> > >> For additional commands, e-mail: dev-h...@druid.apache.org
> > >>
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@druid.apache.org
> > For additional commands, e-mail: dev-h...@druid.apache.org
> >
> >
>
>
> --
>
> B-Slim
> ___/\/\/\___/\/\/\___/\/\/\___/\/\/\___/\/\/\___
>