Re: [DISCUSS] GravitinoProposal to the incubator

[Justin Mclean]

Hi,

Thanks for all the +1’s, but this is the discussion, not the vote, the vote 
comes next.

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [DISCUSS] GravitinoProposal to the incubator

[Justin Mclean]

Hi,

> I would be willing to be an additional mentor or join the initial set of
> team members if there is interest.

Thanks, Larry, for offering. I’ve added you to the proposal as a mentor.

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: What is sufficient Incubation notification for Git repos?

[Justin Mclean]

Hi,

> Whilst the DISCLAIMER file is helpful, and having '(Incubating)' in
> the repo description/About, neither of these are all that obvious.

Yep, that should be done.

> It seems to me that the repo README should also contain the Incubator
> disclaimer, as is done on website pages.

That is also my expectation.

See for instance:
https://issues.apache.org/jira/browse/INFRA-25790

Kind Regards,
Justin

-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: KIE - Question about "staging" binaries/artifacts

[Justin Mclean]

Hi,

> Thank you all for the inputs, but we still seeking clarity on NPM.
> 
> We - Apache KIE podling - are trying to get a single release procedure for
> all binaries, but with lack of NPM infra for staging makes it really
> complex.
> 
> I notice that OpenDAL publishes to NPM, is there anyone involved in OpenDAL
> here that could help us sort this out?
> 
> For container images, we have similar issue with staging… less of issue is
> the build.

I would publish them, tag them as release candidates, and then update that 
tag/description if the release vote passes.

Also see our distribution guidelines [1] for other important information on 
publishing to non-official channels.

Kind Regards,
Justin

1. https://incubator.apache.org/guides/distribution.html

Re: [VOTE] Release Apache ResilientDB, Incubating, v1.10.0-RC1

[Justin Mclean]

Hi,

A few questions occurred to me when looking at the website:
- You list sponsors, how do these companies sponsor the project?
- You list 1.9.0 for download, but there is no link to the KEYS files
- You list Mohammad Sadoghi as the “Principle Investigator” This is problematic 
from an ASF point of view. An ASF community doesn't have a leader.
- There are people listed on the page that are not part of the PMC 
- You list members of a “founding team”, again this is problematic. You can’t 
claim this as it is now an ASF project and run by the community.
- you use resilientdb.com email address for contact and support.
- The relationship between cloud offering and rsview and the ASF project is 
unclear. Are these also open source, or do they intend to be commercial 
offerings?
- Again the connection with ResillientApp is unlear.
- The website is misisng the required ASF links to the foundation, events, 
license, thanks, security, and privacy. [1] 

I suggest you engage with your mentors and get them to provide advice here.

Kind Regards,
Justin

1. https://whimsy.apache.org/pods/
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [VOTE] Drop the incubator- prefix for podling's GitHub repo name

[Justin Mclean]

Hi,

+1 binding. We already have other requirements for the project to indicate that 
they are incubating (e.g. website disclaimer, DISCLAIMER, and release artifact 
name) that are more visible than having it in repo names.

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [VOTE] Release Apache ResilientDB, Incubating, v1.10.0-RC1

[Justin Mclean]

HI,

> Thanks for letting me know.
> I have removed those dependencies.

What goes in the license file is any 3rd party licenses that are included in 
the source release, not those that are dependencies. But unless it is optional, 
you also can’t have any GPL dependencies.

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [VOTE] Release Apache ResilientDB, Incubating, v1.10.0-RC1

[Justin Mclean]

HI,

I assume you mean [1] I’ve not looked at it in detail, but I note you include 
GPL licensed code. GPL-licensed code is Category X and can’t be used in an ASF 
project.

Kind Regards,
Justin


1. https://github.com/apache/incubator-resilientdb/blob/master/LICENSE

Re: [VOTE] Release Apache ResilientDB, Incubating, v1.10.0-RC1

[Justin Mclean]

Hi,

It’s -1 (binding) from me. I think you should use Apache Rat to check the 
release.

I checked:
- incubating in artifact name
- signatures and hashes are correct
- DISCLAIMER exists
- LICENSE is missing mention of 3rd party code included in the release
- NOTICE doesn't include correct text (missing URL)
- Files are missing ASF headers 
- no unexpected binary files
- I did not try to compile from the source

Files missing headers - you need to work out if these are 3rd party files or 
not.
./INSTALL.sh
./INSTALL_MAC.sh./entrypoint.sh./script.js./platform/consensus/ordering/common/algorithm/protocol_base.cpp./platform/consensus/ordering/common/algorithm/protocol_base.h./platform/consensus/ordering/poe/algorithm/poe.cpp./platform/consensus/ordering/poe/algorithm/poe.h./platform/statistic/test_server.sh./scripts/format.sh
./scripts/deploy/performance/pbft_performance.sh
./scripts/deploy/performance/poe_performance.sh
./scripts/deploy/performance/run_performance.sh
./scripts/deploy/script/deploy.sh
./scripts/deploy/script/env.sh
./scripts/deploy/script/generate_config.sh
./scripts/deploy/script/generate_key.sh
./scripts/deploy/script/load_config.sh./service/tools/contract/api_tools/example_contract/compile.sh./service/tools/contract/service_tools/start_contract_service.sh
./service/tools/kv/server_tools/start_kv_service.sh./service/tools/kv/server_tools/start_kv_service_monitoring.sh./service/tools/utxo/service_tools/start_utxo_service.sh./service/utxo/start_contract_server.sh
./tools/generate_certificate.sh
./tools/generate_client.sh
./tools/generate_cluster.sh
./tools/generate_key.sh

3rd party files that need to be mentioned in LICENSE:
./benchmark/protocols/poe/kv_server_performance.cpp
./common/crypto/hash.cpp
./common/crypto/hash.h
./common/crypto/hash_test.cpp
./common/crypto/key_generator.cpp
./common/crypto/key_generator.h
./common/crypto/mock_signature_verifier.h
./common/crypto/signature_utils.cpp
./common/crypto/signature_utils.h
./common/crypto/signature_verifier.cpp
./common/crypto/signature_verifier.h
./common/crypto/signature_verifier_interface.cpp
./common/crypto/signature_verifier_interface.h
./common/crypto/signature_verifier_test.cpp
./common/test/json_test.cpp
./common/test/test_macros.h
./common/utils/utils.cpp
./common/utils/utils.h
./node_modules/fs.realpath/old.js
./platform/consensus/ordering/common/framework/consensus.cpp
./platform/consensus/ordering/common/framework/consensus.h
./platform/consensus/ordering/common/framework/performance_manager.cpp
./platform/consensus/ordering/common/framework/performance_manager.h
./platform/consensus/ordering/common/framework/response_manager.cpp
./platform/consensus/ordering/common/framework/response_manager.h
./platform/consensus/ordering/common/framework/transaction_utils.cpp
./platform/consensus/ordering/common/framework/transaction_utils.h
./platform/consensus/ordering/poe/framework/consensus.cpp
./platform/consensus/ordering/poe/framework/consensus.h
./platform/consensus/ordering/poe/framework/consensus_test.cpp
./service/tools/utxo/wallet_tool/cpp/addr_utils.cpp
./service/tools/utxo/wallet_tool/cpp/addr_utils.h
./service/tools/utxo/wallet_tool/cpp/key_utils.cpp
./service/tools/utxo/wallet_tool/cpp/key_utils.h
./service/tools/utxo/wallet_tool/pybind/wallet_tools_py.cpp./node_modules/lodash.union/index.js./node_modules/lodash.difference/index.js./node_modules/brace-expansion/index.js./node_modules/ignore/index.js./node_modules/once/once.js./node_modules/inherits/inherits.js
...and many other files in node_modules

Kind Regards,
Justin







-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: License for text content

[Justin Mclean]

Hi,

The CC BY 4.0 is not compatible with the Apache license, so I would avoid it if 
you can. While the Apache license is intended for code, it’s OK to use for 
documentation as well.

Kind Regards,
Justin

> On 2 May 2024, at 1:25 pm, tison  wrote:
> 
> Hi,
> 
> IIUC, the Apache License 2.0 is mainly to license code and related stuff
> that constructs the final software.
> 
> However, projects may also create text content like documents. Is it
> appropriate to use Apache License 2.0 for them (since quite a few terms may
> not be applicable)? Or what licenses shall we use?
> 
> For example, a website repo can contain both code and docs. In my personal
> site, I wrote:
> 
>> Code is licensed under Apache-2.0, words and images are licensed under CC
> BY 4.0.
> 
> But I don't know if we can write the same to a site repo of an ASF project.
> 
> Best,
> tison.


-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [VOTE] Release Apache StreamPark(Incubating) 2.1.4-rc1

[Justin Mclean]

Hi,

> Thanks for your clarification. We have submitted a PR[1] to address this
> issue. I believe this issue will be resolved quickly.
> 
> [1] https://github.com/apache/incubator-streampark/pull/3689

That looks good to me, thanks.

Kind Regards,
Justin

-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [VOTE] Release Apache StreamPark(Incubating) 2.1.4-rc1

[Justin Mclean]

Hi,

> * Some false positive on testing assertions utils. Match rate < 50%, file
> is small, and those utilities are trivial. Even when I go to the "origins",
> they are lost or changed a lot. Clearly not the same origin.

Even if they have changed a lot, that could still be an issue. Copying an 
earlier version of a file is still an issue that needs to be dealt with. Even 
copying 5% of something needs to be treated correctly. The files seem to have 
permissive licenses, so there is no category X licensing issue, at least.

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [VOTE] Release Apache StreamPark(Incubating) 2.1.4-rc1

[Justin Mclean]

Hi,

-1 (binding) from me

I checked:
- incubating in name
- signatures and hashes correct
- disclaimer exists
- LICENSE is missing some info on the MIT license
- NOTICE looks fine
- I didn't compile from source

So a condition of including MIT licensed code is to include the relevant MIT 
license text. That seems to be missing for for vue-vben-admin , as I can’t find 
it anywhere in the release. Oddly, the license file here [1] is an Apache one, 
not an MIT one, and it also fails to mention the MIT code under it.

It looks like additional third-party code might also be in the release, but it 
is difficult to tell. I think you should run SCANOSS 
(https://www.softwaretransparency.org/download) on your release and look into 
its results. 

Kind Regards,
Justin


1. streampark-console/streampark-console-webapp/LICENSE
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: Verification of download pages and links

[Justin Mclean]

Hi,

> Here is a patch to cover a minimal download page [1], which is derived from
> OpenDAL's download page [2]. Welcome to leave comments if you find any
> issues or things we can improve on.
> 
> [1] https://github.com/apache/datafusion/pull/10271
> [2] https://opendal.apache.org/download

The link to the source download and keys and hashes is broken.

Kind Regards,
Justin

-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: Verification of download pages and links

[Justin Mclean]

Hi,

Projects need to make source releases on ASF infrastructure and have a download 
page for good reasons. Some users need a place to verify and download a trusted 
release. Having it hosted on ASF infrastructure means people can 100% trust it, 
unlike 3rd party providers. 3rd party providers have gone rogue in the past 
(e.g . Source Forge), disappeared (e.g. Google Code), or had multiple serious 
issues (e.g. NPM). Also by placing a release in the ASF distribution area / a 
project download page gives confidence that the ASF release process has been 
followed and that it is not a release by a 3rd party or an unofficial release 
of some sort.  IMO, all projects need to have a download page, even if it may 
not be used by the majority of users.

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [DISCUSS] Drop the incubator- prefix for podling's GitHub repo

[Justin Mclean]

Hi,

> 4. To clarify that a repo belongs to a podling, introduce a guideline or
> policy to help PPMCs include the DISCLAIMER in the README of all their
> repos.

Alternatively, perhaps we can come up with something a little shorter shorter 
that points to DISCLAIMER? What is important is that the project is clearly 
understood to be an incubating p[project and what that means, rather than the 
exact wording.

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [VOTE] Release Apache Fury(incubating) v0.5.0-rc3

[Justin Mclean]

HI,

I’m happy to share it, but as I said, I'm travelling right now and don't have 
access. I used ScanOSS workbench, but there are other checkers out there. And 
yes, tools like this can sometimes give false positives, and it can sometimes 
be unclear where things were originally copied or, in fact, may have been 
copied themselves.

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [DISCUSS] Drop the incubator- prefix for podling's GitHub repo

[Justin Mclean]

Hi,

I would be for requiring the incubator disclaimer text in the project's README:
"Apache FOO is an effort undergoing incubation at The Apache Software 
Foundation (ASF), sponsored by the Apache Incubator. Incubation is required of 
all newly accepted projects until a further review indicates that the 
infrastructure, communications, and decision making process have stabilized in 
a manner consistent with other successful ASF projects. While incubation status 
is not necessarily a reflection of the completeness or stability of the code, 
it does indicate that the project has yet to be fully endorsed by the ASF.”

Kind Regards,
Justin

> On 24 Apr 2024, at 9:48 pm, tison  wrote:
> 
> Thanks for your participation!
> 
> For people who support drop the incubator- prefix, please describe you
> opinion on:
> 
>> 3. It's still significant to make it clear that a podling is in the
> incubating status and thus a DISCLAIMER to protect the ASF branding.
>> I'd propose to add the "incubating" words to each repo's README. This can
> be regarded as treating those READMEs a homepage for the repo and,
>> 
>> 1. Name the project as "Apache Foo (Incubating)" in its first and most
> prominent uses, hopefully and H1 heading.
>> 2. Add a footer including the Incubator logo and DISCLAIMER, like the
> current footer of Apache Answer (Incubating) [3]
>> [3] https://answer.apache.org/
> 
> Be sure that you know we don't barely drop the prefix, but we need a formal
> way to "make it clear that a podling's repo is in the incubating status",
> which can be achieved currently by  its prefix.
> 
> Best,
> tison.
> 
> 
> Wilfred Spiegelenburg  于2024年4月23日周二 13:12写道：
> 
>> For Go based projects dropping the incubator reference in the git repo
>> makes things easier also when graduating. Packages and dependencies are
>> referenced based on the repository name. Renaming the repository either
>> requires changes throughout the code base to remove the incubator reference
>> or the packages will always have the incubator reference in them.
>> 
>> Wilfred
>> 
>> On 2024/04/23 01:22:02 tison wrote:
>>> Hi,
>>> 
>>> Recently, the new added podlings, namely Amoro and Hertzbeat, have their
>>> GitHub repo in the names:
>>> 
>>> * https://github.com/apache/amoro
>>> * https://github.com/apache/hertzbeat
>>> 
>>> ... which is different to the other 20+ podlings and 200+ repos [1]
>>> existing (this number counts retired ones and those for the Incubator PMC
>>> itself, but it's approximate).
>>> 
>>> [1]
>>> 
>> https://github.com/orgs/apache/repositories?language==incubator-==all
>>> 
>>> My opinion is to agree that generally:
>>> 
>>> 1. The incubator prefix comes from the SVN days where all podlings were
>> under
>>> the incubator SVN tree.
>>> 2. Dropping the incubator- prefix for podling's GitHub repo can reduce
>> some
>>> graduation tasks (although it's somewhat a milestone and ceremony for the
>>> podling, and INFRA does not find it a large job, as well as it won't
>> break
>>> downstream almost due to redirections).
>>> 3. It's still significant to make it clear that a podling is in the
>>> incubating status and thus a DISCLAIMER to protect the ASF branding.
>>> 
>>> With these premises, I started this thread with the following proposals
>> and
>>> questions.
>>> 
>>> 1. Establish a consensus to allow podling's GitHub repo to have a name
>>> without incubator- prefix.
>>> 2. Allow other podlings to ask the INFRA to drop their incubator- prefix
>> by
>>> now, not MUST during the graduation.
>>> 3. Update the docs on incubator.apache.org everywhere if the description
>>> can conflict with this consensus.
>>> 4. However, find a way to clarify that a repo belongs to a podling.
>>> 
>>> For 4, I'd propose to add the "incubating" words to each repo's README.
>>> This can be regarded as treating those READMEs a homepage for the repo
>> and,
>>> 
>>> 1. Name the project as "Apache Foo (Incubating)" in its first and most
>>> prominent uses, hopefully and H1 heading.
>>> 2. Add a footer including the Incubator logo and DISCLAIMER, like the
>>> current footer of Apache Answer (Incubating) [3]
>>> 
>>> [3] https://answer.apache.org/
>>> 
>>> This method, however, can be a new chore for podlings that have many
>>> satellite repos that may previously claim their incubating status by
>> naming
>>> the repos incubator-foo-satellite. But it's just another template to
>>> follow, so it won't be a big deal.
>>> 
>>> Looking forward to your thoughts on this proposal and any suggestions to
>>> improve the implementation part.
>>> 
>>> Best,
>>> tison.
>>> 
>> 
>> -
>> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
>> For additional commands, e-mail: general-h...@incubator.apache.org
>> 
>> 


-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: 

Re: [VOTE] Release Apache Fury(incubating) v0.5.0-rc3

[Justin Mclean]

Hi,

I’m currently travelling and may be slow in responding to emails.

> The MemoryBufferWritableChannel[5] and  MockWritableChannel[6] was written
> by me before we open-sourced Fury and
> I submitted it to Ray in PR[8] ,which was planned to optimize zero-copy
> serialization in Ray. I think it's OK to include it
> here since both are written by me.

That should be fine, but having an ASF header on the files may be a little 
misleading? What do you think?

> For files [1][2][3][4], could you give more details how those files include
> code from OpenSumi. The OpenSumi core developer
> bytemain[9] does commit some code to Fury, see his commits[10]. But I
> talked to him offline, he said he didn't copy code from
> OpenSumi.

It certainly looks like some code was copied; one file, for instance, is about 
70% the same. This is not an issue as it is under a compatible MIT license, but 
that needs to be mentioned in the LICENSE file.

> For Fury ArrayAsList, could you give more details how this class is copied
> from somewhere? It's just a simple wrapper for java
> object arrays.

A possible explanation for what has happened here is that the developer used AI 
to generate the code, and it’s duplicated that code from somewhere. Do you know 
if that is the case?

Kind Regards,
Justin


-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [VOTE] Release Apache Fury(incubating) v0.5.0-rc3

[Justin Mclean]

HI,

Sorry, it’s -1 (binding) from me as it looks like there is additional 
third-party code without correct headers or mentioned in LICENSE.

I checked:
- incubating in name
- signatures and hashes are fine
- LICENSE has some issues (see below)
- NOTICE is fine
- It looks like some 3rd party code incorrectly has ASF headers (see below)
- All source files have ASF headers

For the LICENSE file:
- there are several references to a benchmark directory, but it is not included 
in the release
- there seems to be 3rd part code from OpenSumi here [1][2][3][4]
- there seems to be code from Ray here [5][6]
- this file may have been copied from somewhere [7]

Kind Regards,
Justin

1. /javascript/packages/fury/lib/gen/datetime.ts
2. /javascript/packages/fury/lib/gen/index.ts
3. /javascript/packages/fury/lib/fury.ts
4. /javascript/packages/fury/lib/classResolver.ts
5. 
/java/fury-core/src/main/java/org/apache/fury/io/MemoryBufferWritableChannel.java
6. /java/fury-core/src/main/java/org/apache/fury/io/MockWritableChannel.java
7. 
/java/fury-core/src/main/java/org/apache/fury/serializer/collection/ArrayAsList.java
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: Questions about a new project entering Apache Incubator

[Justin Mclean]

HI,

So, I had an informal chat with Infra, and they don't care which one they do, 
but is it some work for them to change from “incubator-foo” to “foo” on 
graduation. I’m curious as to why some people in this thread think this is a 
big issue if the project clearly states it is an incubating project. I will 
note that Hertzbeat put the GitHub name in their propopal, and no one said 
anything about it.

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [MENTORS] May report timeline - reports due May 2024

[Justin Mclean]

HI,

As Sdap has just graduated, it doesn’t need to report.

Kind Regards,
Justin



-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: Questions about a new project entering Apache Incubator

[Justin Mclean]

Hi,

Both of these projects are new and just getting set up. I'd give them a
little time to do that. Infra in recent years have asked to minimise work
for them on graduation. We recently dropped the requirement for having
incubating in podling domain names so I don't see it's needed in repo names
as long as it clear the project is an incubating project.
Kind Regards,
Justin


On Wed, 17 Apr 2024, 1:47 pm Willem Jiang,  wrote:

> With the "incubator" profix, it's easy for us to tell if the project
> belongs to the incubator and it is still in the incubating process.
> Currently I cannot find any disclaimer document[1] in the repo root
> directory from [2][3] to tell if they are still in the incubator or
> not.
>
> [1]https://incubator.apache.org/policy/incubation.html#disclaimers
> [2]https://github.com/apache/amoro
> [3]https://github.com/apache/hertzbeat
>
> Willem Jiang
>
> On Wed, Apr 17, 2024 at 11:06 AM Calvin Kirs  wrote:
> >
> > Podlings are not yet fully accepted as part of the Apache Software
> > Foundation.
> >
> > I haven't specifically witnessed any formal decision or process for
> > removing the "incubator" prefix from repository names.
> >
> > Unless there are compelling reasons to remove the "incubator" prefix, I
> > believe it's important to maintain a clear distinction between Podlings
> and
> > TLPs, especially in situations where confusion is likely to arise.
> >
> > On Wed, Apr 17, 2024 at 10:32 AM Sheng Wu 
> wrote:
> >
> > > Same mistake for Armoro as Hertzbeat team was misguided from
> > > https://github.com/apache/amoro/issues/2700
> > >
> > > This is not discussed AFAIK, and the description is not correct.
> > > GitHub supported renaming and repository path forward automatically
> > > years ago. apache/incubator-foo -> apache/foo is transparent and both
> > > addresses work.
> > >
> > > This should not be changed randomly considering many other projects
> > > are using incubator- prefix. This renaming causes confusion. IPMC are
> > > making sure the website has `incubating` and disclaimer as always,
> > > suddenly some projects even could use repository names without
> > > prefixes. This is wrong.
> > >
> > > Mentors of Armoro and Hertzbeat should follow the existing
> > > requirements, and PPMC members of these two projects should ask INFRA
> > > to rename, adding the incubator- prefix back.
> > >
> > > Sheng Wu 吴晟
> > > Twitter, wusheng1108
> > >
> > > Xuanwo  于2024年4月17日周三 10:19写道：
> > > >
> > > > > For projects in incubation, is it no longer necessary for the
> project
> > > > > name to have the "incubator-" prefix as it used to be?
> > > >
> > > > Based on the discussions in this mailing list, the only change made
> is
> > > the removal of `incubator` from the domain. Now, users access `
> > > polding.apache.org` instead of `polding.incubator.apache.org` by
> default.
> > > >
> > > > The project and releases are still required to include "incubator",
> and
> > > it's important for the PPMC to clearly communicate that this project
> > > remains under incubation.
> > > >
> > > > In this case, I believe Hertzbeat PPMC made a mistake. I will suggest
> > > they rename it to incubator-hertzbeat.
> > > >
> > > > On Mon, Apr 15, 2024, at 14:23, rat O wrote:
> > > > > First of all, congratulations to HertzBeat for successfully
> entering
> > > > > the Apache Incubator.
> > > > >
> > > > > I noticed that the project has created an issue for an unknown
> license
> > > > > and is ready to address it. I'm sure the project will also address
> > > > > other unknown licenses, if they exist.
> > > > >
> > > > > I wonder if the situation of having a significant amount of
> non-English
> > > > > languages in the codes, like these
> > > > >
> > >
> https://github.com/apache/hertzbeat/blob/master/warehouse/src/main/java/org/apache/hertzbeat/warehouse/config/WarehouseProperties.java
> > > ,
> > > > >
> > >
> https://github.com/apache/hertzbeat/blob/master/common/src/main/java/org/apache/hertzbeat/common/entity/manager/NoticeRule.java
> > > ,
> > > > >
> > >
> https://github.com/apache/hertzbeat/blob/master/common/src/main/java/org/apache/hertzbeat/common/config/AviatorConfiguration.java
> > > > > ...
> > > > > , will all of them also be addressed in the future?
> > > > >
> > > > > For projects in incubation, is it no longer necessary for the
> project
> > > > > name to have the "incubator-" prefix as it used to be?
> > > >
> > > > --
> > > > Xuanwo
> > > >
> > > > -
> > > > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
> > > > For additional commands, e-mail: general-h...@incubator.apache.org
> > > >
> > >
> > > -
> > > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
> > > For additional commands, e-mail: general-h...@incubator.apache.org
> > >
> > >
> >
> > --
> > Best wishes！
> > CalvinKirs
>
> 

Re: Should we mention license of other projects in NOTICE file

[Justin Mclean]

Hi,

Any license information goes in LICENSE, not NOTICE. If you include something 
that is MIT or BSD licensed, nothing goes in the NOTICE. The NOTICE file will 
include re-located copyright statements removed from files and the contents of 
any Apache code you have included NOTICE files.

1. is BSD licensed, so just put the text in LICENSE
2. is Apache licensed, It’s a good idea to list that in the LICENSE file (but 
not required). It has no NOTICE file, so there is nothing to go in your NOTICE 
file.

Kind Regards,
Justin

> On 13 Apr 2024, at 3:53 pm, Shawn Yang  wrote:
> 
> Dear Community,
> 
> I'm fixing the license issue of Apache Fury to comply with ASF requirements
> for the first release for Fury under ASF.
> 
> Currently we borrowed some code from other projects such as
> v8-fast-api-calls.h[1] in v8 and Preconditions[2] in guava. We mentioned
> their license in our NOTICE file[3].
> 
> I'm wondering whether we should move those mentions into the LICENSE file,
> and mention the NOTICE of those projects in our NOTICE instead.
> 
> I did some research, but didn't know which is better:
> 1) Projects like flink[4] and pytorch[5] mention the license of other
> projects in the NOTICE file.
> 2) But other projects such as spark[6] and arrow[7] all put the mentions
> into the `LICENSE` file.
> 
> Are those both ways legal? Do we have a best practice here?
> 
> 1.
> https://github.com/apache/incubator-fury/blob/main/javascript/packages/hps/src/v8-fast-api-calls.h
> 2.
> https://github.com/apache/incubator-fury/blob/main/java/fury-core/src/main/java/org/apache/fury/util/Preconditions.java
> 3. https://github.com/apache/incubator-fury/blob/main/NOTICE
> 4. https://github.com/apache/opendal/blob/master/NOTICE
> 5. https://github.com/pytorch/pytorch/blob/main/NOTICE
> 6. https://github.com/apache/spark/blob/master/LICENSE
> 7. tttps://github.com/apache/arrow/blob/main/LICENSE.txt
> 
> 
> Best regards,
> Chaokun Yang


-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

[MENTORS] Missing podling reports

[Justin Mclean]

Hi,

We are missing a large number of reports this month. Mentors, can you please 
help your projects submit reports on time.

We are still waiting on reports from:
- Annotator
- Gluten
- HoraeDB
- HugeGraph
- Liminal
- Pony Mail
- ResilientDB
- Teaclave
- XTable

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: Trademarks and incubation (was: [DISCUSS] Graduate Apache AGE Incubating as a Top Level Project)

[Justin Mclean]

Hi,

> Question: where did the incubation process fail in this case?  How can we 
> prevent something like this from happening again?

The Incubator pointed out the issue during a graduation discussion at the end 
of 2021 (which put off graduation). The people involved said they would not use 
the name AgeDB and would stop using it in a week. They became a TLP in early 
2022. From what I can see, the AgeDB website was created in mid 2023.

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: Update project maturity model to include trademark and branding?

[Justin Mclean]

Hi,

> Besides, the maturity model is applied for all ASF projects and under the
> management of ComDev pmc.
> 
> Shall we cc this thread to dev@community.a.o or start a new thread after we
> have a consensus within the Incubator first?

I had intended to bring it up on dev@community.a.o for refinement and 
discussion, but unfortunately, I did not do so. It is probably overdue to do so.

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: Registering a release

[Justin Mclean]

Hi,

>> You might want to remove those old releases there, as they are automatically 
>> archived here:
>> https://archive.apache.org/dist/incubator/sdap/
> 
> Would that affect the closer.lua download links on our website?

Yes, but it’s not needed for old releases because they presumably don’t get as 
many downloads. See 
https://infra.apache.org/release-distribution.html#download-links

Kind Regards,
Justin

Re: [MENTORS] April report timeline - reports due April 2024

[Justin Mclean]

Hii,

Please note that Kie doesn't need to report.

Kind Regards,
Justin

-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: Registering a release

[Justin Mclean]

Hi,

In SDAPs case:
https://dist.apache.org/repos/dist/release/incubator/sdap/

You might want to remove those old releases there, as they are automatically 
archived here:
https://archive.apache.org/dist/incubator/sdap/

Kind Regards,
Justin

Re: Registering a release

[Justin Mclean]

Hi,

I’m not sure what you mean by registering a release. All ASF releases need to 
go here:
https://dist.apache.org/repos/dist/release/

Kind Regards,
Justin

> On 21 Mar 2024, at 10:29 am, Julian Hyde  wrote:
> 
> Can someone remind me where I go (whimsy or reporter, I presume) to
> register a release from a podling (in this case SDAP)?
> 
> In Calcite, a top-level project that deploys Java artifacts to Maven
> Central, the process has been straightforward. I believe I even
> received an email from Reporter sending me to the registration page.
> But for SDAP I can't figure out where to register the release.
> 
> Thanks!
> 
> Julian
> 
> -
> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
> For additional commands, e-mail: general-h...@incubator.apache.org
> 

Re: [VOTE] Podling web sites: make (incubator.) optional in podling urls

[Justin Mclean]

+1 binding

-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

[RESULT][VOTE] Accept Amoro into the ASF Incubator

[Justin Mclean]

HI,

Thanks to everyone who voted. [1]

There are 15 +1 binding votes, 19 +1 non-binding votes, and no 0 or -1 votes, 
so the vote has passed. 

Binding +1 votes:
Yu Li
Ayush Saxena
PJ Fanning
Felix Cheung
Craig Russell
Zili Chen (tison)
Xinyu Zhou
Xin Wang  
Jean-Baptiste Onofré 
Duo Zhang
Furkan Kamaci
Paul King
Junping Du (JP)
Kent Yao
Willem Jiang
 
Non-binding +1 votes +1:
Alex Porcelli
Keyong Zhou
Imba Jin
Nicholas Jiang
Bi Yan
Conrad Jam
roryqi
Huajie Wang
Shaoyun Chen  
Jingsong Li 
Suyan
Xuanwo
Cheng Pan
Hulk Lin
Zhongming Hua
Shaokang Lv
Yu Xiao
gaojun2048
Lifeng Nie

Kind Regards,
Justin

 [1] https://lists.apache.org/thread/56n4rtxq1q7c0m3bxp1n7lcj551555nk



-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [DISCUSS] Graduate Apache Paimon (Incubating) as a Top Level Project

[Justin Mclean]

Hi,

> Thanks for pointing this out Justin. The description of the first
> mentioned vedio (a CoC Asia talk) [1] has been updated (thanks @Willem
> for the help), and PPMC is actively working on correcting the second
> one.

Those two links were only some of the instances I found. I suggest you do some 
Google searches to find more.

Kind Regards,
Justin


-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [DISCUSS] Graduate Apache Paimon (Incubating) as a Top Level Project

[Justin Mclean]

HI,

In your discussion on graduation, you refer to the proposed chair as “the 
founder of Paimon”. While this person may have come up with the initial design 
before it was an Apache project, the project is run by the community. Please do 
not refer to anyone as a founder of an Apache project. I have noticed this 
language used in other places as well e.g. [1]  Also stating an Apache project 
is from a company e.g " from Ververica” [2] is not accurate, again the 
community runs a project not a company. If possible the PPMC should look into 
getting this corrected.

Kind Regards,
Justin

1. https://www.youtube.com/watch?v=AdRuYgtbzrQ
2. https://www.youtube.com/watch?v=7cD7eFzaNew
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [DISCUSS] Incubating Proposal for GraphAr

[Justin Mclean]

Hi,

Thanks for checking that, and yes indeed it seems I looked at the wrong repro.

Kind Regards,
Justin

> On 4 Mar 2024, at 6:09 pm, tison  wrote:
> 
> Hi Justin,
> 
> I checked the initial committers group and that is, according to [1][2]
> 
> Initial Committers
> * Weibin Zeng (Alibaba, weibin@gmail.com) -> @acezen #1 in the
> contributor graph
> * Xue Li (Alibaba, lx_cla...@qq.com) -> @lixueclaire #2 in the contributor 
> graph
> * Zhe Wang (Southwest Minzu University, thesp...@qq.com) -> @Thespica
> #3 in the contributor graph
> * Semyon Sinchenko (Raiffeisen Bank International,
> ssinche...@protonmail.com) -> @SemyonSinchenko #5 in the contributor
> graph
> * He Tao (Alibaba, sighing...@gmail.com) -> @sighingnow in the
> contributor graph.
> 
> Starting from #6, commits are <=5. Note that the "main project repo"
> mentioned here is "alibaba/GraphAr" [1].
> 
> It seems you are using alibaba/GraphScope as the source, which is a
> downstream project of the proposed project; it's not included in the
> donation proposal.
> 
> Best,
> tison.
> 
> [1] https://github.com/alibaba/GraphAr/graphs/contributors
> [2] https://cwiki.apache.org/confluence/display/INCUBATOR/GraphArProposal
> 
> Justin Mclean  于2024年3月4日周一 14:59写道：
>> 
>> HI,
>> 
>> I was looking at your initial committer list and noticed, according to 
>> GitHub, that:
>> - sighingnow is #1 in activity
>> - acezen is #6 in activity
>> - lixueclaire is #30 in activity
>> - Thespica is not a commmiter in the main project. Is the repo elsewhere, 
>> and does that intend to be donated to teh ASF?
>> - SemyonSinchenko is not a committer in the main project. Is the repo 
>> elsewhere, and does that intend to be donated to the ASF?
>> 
>> While contributions to a project can be in other forms other than code, I 
>> can count six other people who have made 100+ commits to the main repo. Why 
>> are they not included in the initial committer list?
>> 
>> Kind Regards,
>> Justin
>> -
>> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
>> For additional commands, e-mail: general-h...@incubator.apache.org
>> 
> 
> -
> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
> For additional commands, e-mail: general-h...@incubator.apache.org
> 


-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [DISCUSS] Incubating Proposal for GraphAr

[Justin Mclean]

HI,

I was looking at your initial committer list and noticed, according to GitHub, 
that:
- sighingnow is #1 in activity
- acezen is #6 in activity
- lixueclaire is #30 in activity
- Thespica is not a commmiter in the main project. Is the repo elsewhere, and 
does that intend to be donated to teh ASF?
- SemyonSinchenko is not a committer in the main project. Is the repo 
elsewhere, and does that intend to be donated to the ASF?

While contributions to a project can be in other forms other than code, I can 
count six other people who have made 100+ commits to the main repo. Why are 
they not included in the initial committer list?

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

[VOTE] Have Amoro join the Incubator

[Justin Mclean]

Hi,

Following on from the discussion of the Amoro proposal [1][2], let's vote on 
having it join the Incubator.

Please cast your vote:

[ ] +1, have it join the Incubator as an incubating project
[ ] +0, I have no strong opinion either way
[ ] -1, do not have it join the Incubator because...

Kind Regards,
Justin

1. https://cwiki.apache.org/confluence/display/INCUBATOR/AmoroProposal
2. https://lists.apache.org/thread/7t2bm6x19zq2d79cn8jj2wqd3f2t3k00

Re: [DISCUSS] Apache Amoro proposal

[Justin Mclean]

HI,

As the discussion seems to have died down, I’ll put this up for a vote.

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [DISCUSS] Incubating Proposal for GraphAr

[Justin Mclean]

Hi,

> 2. Slack Channel:
> We intend to continue maintaining the Slack channel as an additional 
> real-time communication platform for both users and developers. Slack 
> provides a convenient and efficient means of real-time communication. It can 
> serve as an additional tool for people to connect with the GraphAr community.

Just be mindful that Slack can’t be used to make decisions that need to happen 
on the project’s mailing list and that not everyone due to work, time zones or 
other reasons can participate in real time conversatons. It would be best if 
you moved to the ASF's Slack instance, as it has a permanent history and is 
managed by the ASF. Out of interest, who currently owns and manages this Slack 
instance?

Kind Regards,
Justin

Re: [DISCUSS] Graduate Apache SDAP (Incubating) as a Top Level Project

[Justin Mclean]

Hi,

+1 (binding) as well - all the best.

Kind Regards,
Justin


-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [VOTE] Graduate Apache Pekko (incubating) as a TLP

[Justin Mclean]

Hi,

+1 from me and best wishes on your journey as a TLP.

Kind Regards,
Justin

-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: Podling web sites: .incubator. required?

[Justin Mclean]

HI,

> I would propose that as part of our official policy we recommend the 
> podling's url as https://podling.apache.org and get rid of the .incubator. in 
> the url.
> 
> WDYT?


+1 from me.

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [NOTICE] Incubation Report for February 2024

[Justin Mclean]

HI,

The report_runbook.py script tells you most of what to do. A few more projects 
need t report than listed below, including some new projects that need to 
report monthly. I’ve also left the monthly properties as is.

The report_email.py script will send an email to this list with the important 
dates, and who needs to report, the report_reminders.py script will send each 
podling a reminder email.

There are some instructions here[1], but they could be improved.

Kind Regards,
Justin

1. https://incubator.apache.org/guides/chair.html

> On 24 Feb 2024, at 1:44 pm, tison  wrote:
> 
> Hi,
> 
> I'm trying to create an Incubation Report page for February 2024 at
> [1], including the following podlings according to the report group
> info that they should report in this month:
> 
> * answer
> * fury
> * horaedb
> * streampark
> 
> But it still lacks information that I need some help:
> 
> 1. What is the desired timeline and shepherd assignments?
> 2. Missing IPMC level report. Perhaps the only way is going through
> the mailing list?
> 3. Missing other projects need a report. I guess we have a script to
> list out from the podling.xml file, but I don't find it. I may write
> it when I have some spare time if there is no one. I don't promise :P
> 
> Best,
> tison.
> 
> [1] https://cwiki.apache.org/confluence/display/INCUBATOR/February2024
> 
> -
> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
> For additional commands, e-mail: general-h...@incubator.apache.org
> 


-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [MENTORS] March report timeline - reports due March 2023

[Justin Mclean]

Please ignore this as I put in the wrong year

> On 25 Feb 2024, at 12:12 pm, jmcl...@apache.org wrote:
> 
> Dates for next board report:
> Wed March 01 - Podling reports due by end of day
> Sun March 05 - Shepherd reviews due by end of day
> Sun March 05 - Summary due by end of day
> Tue March 07 - Mentor signoff due by end of day
> Wed March 08 - Report submitted to Board
> Wed March 15 - Board meeting
> 
> 
> Expected to report this month are:
> - baremaps
> - kie
> - marvin-ai
> - nemo
> - nlpcraft
> - opendal
> - pagespeed
> - spot
> - toree
> - training
> - uniffle
> - wayang
> 
> 
> Reports as usual can be submitted here [1]
> 
> Thanks,
> Justin
> 
> 
> 1. https://s.apache.org/incubator-report
> 1. https://cwiki.apache.org/confluence/display/INCUBATOR/Report
> 1. https://cwiki.apache.org/confluence/display/INCUBATOR/March2023
> 
> -
> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
> For additional commands, e-mail: general-h...@incubator.apache.org
> 


-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

[DISCUSS] Apache Amoro proposal

[Justin Mclean]

Hi,

I would like to propose a new project to the ASF incubator - Apache Amoro. I’m 
one of the mentors, but there are a lot of other people involved who have done 
all of the hard work.

Amoro is a Lakehouse management system built on open data lake formats like 
Apache Iceberg and Apache Paimon (Incubating). Working with compute engines 
including Apache Flink, Apache Spark, and Trino, Amoro brings pluggable and 
self-managed features for Lakehouse to provide out-of-the-box data warehouse 
experience, and helps data platforms or products easily build infra-decoupled, 
stream-and-batch-fused and lake-native architecture. You can find the proposal 
here. [1]

We are looking forward to anyone's feedback or questions.

Thanks,
Justin

[1] https://cwiki.apache.org/confluence/display/INCUBATOR/AmoroProposal
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: podling reports for January 2024

[Justin Mclean]

Hi,

I’ll sort this out in the next 24 hours.

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [RESULT][VOTE] Graduate Apache OpenDAL (incubating) as a TLP

[Justin Mclean]

Hi,

> Also, for trademark attribution, I understand the databend.rs, if it
> refers to OpenDAL, it should contain a Footer like Datastax does[2].

Datastax has had recent issues regarding trademarks; please follow the policy, 
not what other 3rd party companies do.

I can see the project, from what you have provided, has fixed a number of 
issues pointed out to them. However, they don’t seem to understand that they 
are responsible for managing their brand and protecting the ASF trademarks.

Kind Regards,
Justin


-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [RESULT][VOTE] Graduate Apache OpenDAL (incubating) as a TLP

[Justin Mclean]

Hi,

The (P)PMC must be able to do this independently. Just look at each of the 
resources you listed and ask yourself:
- Is Apache Foo being used in the most prominent place?
- Are we using the trademark symbol?
- Does the page include trademark attribution for any Apache trademarks used?

Our full trademark policy covers a lot more than this, but that’s a good start.

Kind Regards,
Justin 
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [RESULT][VOTE] Graduate Apache OpenDAL (incubating) as a TLP

[Justin Mclean]

Hi,

I’ll also note that this site (which I assume you have control of) also doesn’t 
comply with our policy. [1]

Kind Regards,
Justin

1. https://xuanwo.io/

Re: [RESULT][VOTE] Graduate Apache OpenDAL (incubating) as a TLP

[Justin Mclean]

Hi,

Several of those pages still do not comply with our trademark policy; the TM 
symbol needs to be used, and a trademark attribution included.

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Community over code incubator track

[Justin Mclean]

Hi,

There's less than 20 hours to go before submissions close and I'd like to
see some more submissions to the incubator track. Talks about your journey
as an incubating project or if you just want to promote your project are
welcome. Please submit your last minute tasks at
https://sessionize.com/coceu-2024

Kind Regards,
Justin

Re: [QUESTION] Oracle JDBC Driver as a test dependency

[Justin Mclean]

Hi,

> In your source release anything in Category A is fair game.  Things in
> Category B are not.  Things in Category X never are.

While correct, that’s not the full story; you also can’t have anything as a 
dependency whose license is a category X one.

Kind Regards,
Justin

Re: [QUESTION] Handling of licensing issues for dependencies of dependencies

[Justin Mclean]

HI,

> I was performing a more thorough check of our dependencies in preparation of 
> opening graduation discussions with the Incubator PMC and found at least one 
> package that, while not directly used in the code, is installed as a 
> dependency of multiple top-level dependencies that is LGPL licensed. The 
> dependencies that rely on this are themselves not a license issue (BSD-3 & 
> MIT licenses). How is this situation usually handled?

You will need to remove or replace that dependency. 

> I also found a package that has a license that isn't listed on the 3rd party 
> licenses page: HPND [1][2] which, from what I can tell, is similar to the 
> BSD-3 or MIT licenses, though I just wanted to double-check on that...

HPND looks fine to me, as it could be treated as a BSD-like or MIT-like 
license, depending on what parts you include.

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [VOTE] Release Apache Celeborn(Incubating) 0.3.2-incubating-rc2

[Justin Mclean]

Hi,

+1 (binding)

I checked in the source release:
- incubating in the name
- signatures and hashes are fine
- DISCLAIMER exists
- LICENSE looks good
- The NOTICE file needs to be updated and likely does not contain all the 
needed information. For example, The Flink Remote Shuffle Project NOTICE 
file[1] contains:
This product includes software developed at The Alibaba Group Holding Ltd
(https://www.alibaba.com/).
- no unexpected binary files.
- all files have ASF headers
- can compile from source

Kind Regards,
Justin

1. https://github.com/flink-extended/flink-remote-shuffle/blob/main/NOTICE
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [RESULT][VOTE] Release Apache OpenDAL, incubating, 0.44.0-rc.1 - Incubator Vote Round 1

[Justin Mclean]

Hi,

It’s best to wait for 72 hours before closing a vote.

Kind Regards,
Justin

> On 31 Dec 2023, at 1:19 pm, Liuqing Yue  wrote:
> 
> Hi Incubator PMC,
> 
> The vote to release Apache OpenDAL(incubating) 0.44.0-rc.1 has passed with
> 3 +1 binding and 1 +1 non-binding votes, no +0 or -1 votes.
> 
> Binding votes：
> 
> - tison
> - Sheng Wu
> - He Xiaoqiao
> 
> Non-Binding votes:
> 
> - Xuanwo
> 
> Vote thread: https://lists.apache.org/thread/dpb2lzjdgcmz4j68s5ksklp9m9xcdcf4
> 
> Thanks for reviewing and voting for our release candidate.
> 
> We will proceed with publishing the approved artifacts and sending out
> the announcement soon.
> 
> Thanks
> 
> Liuqing
> 
> -
> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
> For additional commands, e-mail: general-h...@incubator.apache.org
> 


-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [DISCUSS] Graduate Apache OpenDAL (incubating) as a TLP - Incubator

[Justin Mclean]

Hi,

> If today, someone on the internet, for any reason, buys a domain name
> and redirects it to opendal.apache.org. You don't even have contact to
> that person. Do you still argue that the PMC should take control of
> that domain?

Of course not, the issue is not with redirecting a domain. The issue mostly 
exists with existing domains. A 3rd party, if they had control of a domain 
name, foo.x.com could stop redirecting it to foo.apache.org and point foo.x.com 
at their own competing product. If that domain was well known and used by the 
community around foo, that would most likely be an issue.


> The case becomes complex when web saas involved. Anyone can possibly
> build a {user-id}.github.io or {app-name}.vercel.com and redirects it
> to opendal.apache.org in a few minutes.
> 
> If you said, these are violations so the PMC should spend time
> investigating and trying to take them down. This sounds reasonable,
> but of course, if you cannot find the person, you can hardly take it
> down, Negotiating with the saas provider can take a lot of time and
> they may not support your requirement.

Just about all providers have take-down mechanisms we can use if the name is 
one of our trademarks. If a PMC found itself in this position, the owner wasn't 
responsive, and the site’s content was in clear violation of our policy, it 
would be best to involve trademarks to help and it’s a fairly straightforward 
matter to request the site to be taken down.

Kind Regards,
Justin


-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [DISCUSS] Graduate Apache OpenDAL (incubating) as a TLP - Incubator

[Justin Mclean]

Hi,

> As an analogy, think of answer.dev and answer.apache.org. You are in
> the thread of a similar situation[1].

This projct has just entered incubation and is not seeking to graduate. It will 
need to hand over ownership of that domain name before it does.

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: Update project maturity model to include trademark and branding?

[Justin Mclean]

HI,

>> TB40 The project performs some monitoring of 3rd party use of its 
>> trademarks, addressing any instances of misuse.
> 
> Do you have some examples of how podlings or TLPs perform this today?

This varies from project to project:
- Some projects have PMC members working at a company who use their trademark, 
and they make sure that things are correctly done.
- Some projects have people who actively look out for these types of issues and 
report them.
- Some projects are more active and set up automated Google searches and the 
like.
- Not all issues occur on web pages. Some of these issues arise at conferences 
or 3rd party events and are often noticed by PMC members or ASF members.

> It's unclear to me how I can understand and follow this guideline:
> Shall the PMC check over the Internet? Is any 3rd party even with a
> very low page rank should the PMC spend time to address it; or else
> the PMC fail to meet this guideline?

Yes, in most cases, the PMC should spend time addressing it. This is described 
in full at [1], how the project wishes to implement this is up to them.

Kind Regards,
Justin

1. https://www.apache.org/foundation/marks/responsibility

Re: [VOTE] Graduate Apache OpenDAL (incubating) as a TLP - Incubator

[Justin Mclean]

Hi,

> As for branding and trademarks, the OpenDAL (P)PMC is actively
> handling known issues, including Anything referred in...

I’m not sure they are. What about, for instance, various download pages e.g. 
[1] and the ownership of the opendal.databend.rs  
domain name?

IMO, It would be best to delay the vote until after these issues have been 
resolved.

Kind Regards,
Justin


1. https://pypi.org/project/opendal/

Update project maturity model to include trademark and branding?

[Justin Mclean]

Hi,

It seems the updated podling report template has not had the impact it was 
hoped to have around issues of branding and trademarks.

It was pointed out on the trademark list that the current maturity model [1]  
is missing checks for trademarks and branding.

Here is my first attempt at it; feedback, thoughts, etc, are welcome.

Trademarks and Branding
TB10 The project correctly uses “Apache Foo” as the project name where required.
TB20 The project complies with ASF’s branding and trademark policy in all 
places it controls.*
TB30 The project resolves any potential trademark issue pointed out to it 
promptly.
TB40 The project performs some monitoring of 3rd party use of its trademarks, 
addressing any instances of misuse.

* Including its website, documentation, 3rd party download services or any 
other locations.

With some changes and increased focus on security, we might want to review the 
existing points that mention security.

Kind Regards,
Justin

1. https://community.apache.org/apache-way/apache-project-maturity-model.html


-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [VOTE] Graduate Apache OpenDAL (incubating) as a TLP - Incubator

[Justin Mclean]

Hi,

-1 (binding) until the branding and trademark issues have been resolved and the 
podling has a better understanding of what is involved here.

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [DISCUSS] Branding in Thirdparty Platform Distribution

[Justin Mclean]

HI,


> Users should run `npm install xxx`, `pip install xxx`, or `cargo add xxx` 
> to include our library in their dependency list. Users should write code 
> in their own libraries or applications using statements such as `use xxx` 
> or `import xxx`. Adding the prefixes `apache-` or `asf-` could significantly
> increase the workload for the entire community. In severe cases, users may 
> halt library updates to prevent having to replace `xxx` throughout their code.

This is no different to any project that comes to the ASF via the incubator. 
Many of them need to change names, often before joining the incubator, and all 
need to change their name to be in the form “Apache Foo”.

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [DISCUSS] Graduate Apache OpenDAL (incubating) as a TLP - Incubator

[Justin Mclean]

Hi,

> The domain `opendal.databend.rs` is owned by Databend Labs and was used as 
> the 
> primary domain before OpenDAL entered the incubation stage. The PMC will 
> coordinate
> with Databend Labs to ensure that all instances are updated to 
> `opendal.apache.org`.

It would be best if the domain was controlled by the (P)PMC. Having a 3rd party 
in control of a domain that currently redirects to the ASF site is not ideal. 

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [DISCUSS] Graduate Apache OpenDAL (incubating) as a TLP - Incubator

[Justin Mclean]

Hi,

> Thanks for your reply to report potential branding issues. The PMC is
> actively responding to these comments.
> 
> * https://github.com/apache/incubator-opendal/pull/3829/files
> * https://github.com/apache/incubator-opendal/pull/3830/files
> * https://github.com/apache/incubator-opendal/pull/3831/files
> * https://github.com/apache/incubator-opendal/pull/3833/files
> * https://github.com/apache/incubator-opendal/pull/3838/files

Thanks for that.

> For third-party references, when a PMC member notices one that can be
> confusing, there is a reaction:
> 
> * https://github.com/GreptimeTeam/greptimedb/pull/2653/files
> * https://github.com/zwpaper/dilu/pull/1/files
> * https://github.com/datafuselabs/databend-docs/pull/285/files

I noticed the domain opendal.databend.rs mentioned there. Who owns that domain?

> These are instances for "manage its brand and ASF’s trademarks". I
> believe that the PMC becomes more experienced on branding topics with
> your reports; thank you.

The point is I shouldn't have to report these; the (P)PMC should be managing 
this on their own.

>>> About the https://opendal.apache.org/docs/python/opendal.html,
>>> Please see https://incubator.apache.org/guides/distribution.html.
> 
> The first sentence of this page currently is "Apache OpenDAL™ Python binding".

But the first and more prominent mention of OpenDAL doesn’t include Apache. The 
page is also missing mention of ASF’s trademarks. I think you need a little 
more branding and naming is needed to comply with ASF's policy.

Other pages I click on have no mention of Apache. e.g. 
https://opendal.apache.org/docs/python/opendal/layers.html Other document pages 
have similar issues, e.g. https://opendal.apache.org/docs/haskell/OpenDAL.html. 
I think a little more work needs to be done here, and again, I shouldn't have 
to point out the issues. Please look at your documentation and the policy and 
see what needs to be fixed, or better still, discuss it on your mailing list. 
It’s far better that you work out what needs to be corrected on your own than 
for someone outside your project to list what might not be in line with policy.

> As for the package name, I argued for the current guidelines in [1]
> that you can follow. You may have different opinions and that's OK.
> Xuanwo explained more technical details and community feedback in [1].

Other projects have different reasons for doing what they do; don’t confuse 
that with permission to do what they do without a reason.

Kind Regards,
Justin

Re: [VOTE] Release Apache Celeborn(Incubating) 0.3.2-incubating-rc1

[Justin Mclean]

Hi,

> We just checked their repo and found the PR[1] which added Celeborn's code
> in their repo. We got in touch with them and they told us that the code was
> deleted a month ago. I also checked their release[2] and didn't find
> Celeborn's code in their source ball. So I guess this is no longer a
> problem?

Thanks for looking into that; that looks to be a non-issue. Can anyone answer 
my other questions?

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [DISCUSS] Branding in Thirdparty Platform Distribution

[Justin Mclean]

Hi,

> The proposal here is to improve the expression on NPM / PyPI for the
> package name to be either:
> 
> 1. apache-projectname
> 2. projectname

Existing ASF policy has this to say:
- "All PMCs must to comply with the Apache Project Branding Requirements.” [1]
- “PMCs are directly responsible for ensuring all of their project's web 
content complies with the Apache Project Branding Requirements.” [2]
- "PMCs are responsible for evaluating and if needed addressing any infringing 
use of their project's marks by third parties” [3]

In regards to naming:
- "All top level projects (TLPs) must use the format Apache Foo for their 
branding” [4]
- "The primary branding for any project or product name must be in the form of 
"Apache Projectname”. " [5]
- "The first and most prominent references to a project or product on every 
page, and uses in page titles or headers, must use the "Apache Projectname" 
form of the name. “ [5]

This is one reason why every single poding report asks, “Is the PPMC managing 
the podling's brand / trademarks?”.

In short, IMO, using the short name would not be in line with current policy, 
but that is probably more of a question for trademarks. For instance, it might 
be OK if the page made it very clear that this was an ASF project and the users 
were downloading “Apache Foo” and included appropriate trademark attribution.

Kind Regards,
Justin

1. https://www.apache.org/foundation/marks/responsibility#compliance
2. https://www.apache.org/foundation/marks/responsibility.html#website
3. https://www.apache.org/foundation/marks/responsibility.html#police
4. https://www.apache.org/foundation/marks/pmcs#naming
5. https://www.apache.org/foundation/marks/pmcs#branding



-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [DISCUSS] Branding in Thirdparty Platform Distribution

[Justin Mclean]

Hi,

I’ll note these guidelines were discussed and voted on by the IPMC a while 
back. Legal and trademarks also reviewed them and had input, and the work is 
based on existing policy and years of discussion. They, however, have only had 
minor updates since being formed.

Kind Regards,
Justin


-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [DISCUSS] Graduate Apache OpenDAL (incubating) as a TLP - Incubator

[Justin Mclean]

Hi,

-1 (binding) to graduation, the PMC needs to understand the importance of and 
follow our randing policy; something seems to have been missed here.

> About the  https://opendal.apache.org/docs/python/opendal.html, it is
> already on the apache.org site. It is obvious that it belongs to the
> ASF.

As part of the website, it needs to follow the ASF branding guidelines; there 
are no expectations.

> About other distribution platforms, using short names, rather than
> apache or asf prefixes is a common practice.

Please see https://incubator.apache.org/guides/distribution.html. It should not 
be common practice.

> For other projects, which are not controlled by the committers, it
> takes time to add Apache. None of the found ones seem to hurt ASF
> branding.

The PMC needs to manage its brand and ASF’s trademarks, registered or 
otherwise; it seems they have not been doing so.

Kind Regards,
Justin

Re: [DISCUSS] Graduate Apache OpenDAL (incubating) as a TLP - Incubator

[Justin Mclean]

HI,


>> 2. https://opendal.apache.org/docs/python/opendal.html

This is not fixed. I suggest the PMC members have a good read of our branding 
policy to understand what is needed here. [1] At a minimum, the project needs 
to be referred to as “Apache OpenDAL”, and the trademark attribution needs to 
be added. Please see [2] as well, in particular [3] and [4], but there are 
other issues here as well.

> NOTE: pypi.org, crates.io, docs.rs will be updated after our next release 
> published.

Can you fix the description and add the trademark attributions without making a 
release?

Kind Regards,
Justin

1. https://www.apache.org/foundation/marks/responsibility
2. https://www.apache.org/foundation/marks/pmcs
3. https://www.apache.org/foundation/marks/pmcs#naming
4. https://www.apache.org/foundation/marks/pmcs#attributions

Re: [LICENSE QUESTION] Use jmh as a benchmark tool

[Justin Mclean]

Hi,

As listed in that document, a GPL license with a classpath exception is 
category X, so everything that applies to other category X licenses applies to 
that license. System dependencies that users or developers typically have 
installed that don't impact the license of the compiled package are generally 
OK, so most versions of Java are OK.

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [VOTE] Release Apache Celeborn(Incubating) 0.3.2-incubating-rc1

[Justin Mclean]

Hi,

Sorry, but it is -1 (binding) for now. Clearing up some of the issues below may 
mean that I change my vote.

I checked
- incubating in artifact name
- signatures and hashes are correct
- LICENSE mentions 1 3rd party file from Guava; however, the NOTICE lists both 
Apache Spark and Apache Flink, so I think other files may have been copied into 
the code base, and LICENSE is missing information or the NOTICE is incorrect.
- There is some overlap with some files with [1]; this is concerning as these 
files are under a GPL license. Would you happen to know who has copied from 
whom here? If ASF files have been re-licensed under the GPL license, what is 
the PMC doing about this? What is the relationship, if any, between this 
company and the PMC?
- This file [2] seems to have been copied from Kyuubi?
- No unexpected binary files
- All files have correct source headers
- I didn't compile from the source

Kind Regards,
Justin

1. https://github.com/alldatacenter/alldata
2. /dev/checkout_pr.sh

Re: [VOTE] Release Apache HugeGraph (Incubating) 1.2.0 rc1

[Justin Mclean]

Hi,

+1  (binding)

I checked all source releases.

- incubating in names
- all release include LICENSE, NOTICE and DISCLAIMER
- The NOTICE file for huge graph-computer could be improved, as it contains 
unnecessary information. "Copyright 2012 and onwards JanusGraph Authors” is 
clearly not correct.
- The NOTICE file for the main source release duplicate information, i.e. "This 
product includes software developed at The Apache Software Foundation 
(http://www.apache.org/).” and also includes text that is not required.
- No unexpected binary files
- All files have correct headers, except this file might have an incorrect 
header. [1]
- was unable to compile but probably my setup

Kind Regards,
Justin

1. ./hugegraph-server/hugegraph-dist/src/assembly/static/bin/wait-storage.sh


-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [VOTE] Release Apache HugeGraph (Incubating) 1.2.0 rc1

[Justin Mclean]

Hi,

Only the release artifacts need incubating in their name.

Kind Regards,
Justin

-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [LICENSE QUESTION] Use jmh as a benchmark tool

[Justin Mclean]

Hi,

GPL files with classpath exceptions are not allowed [1]. Any files with that 
license cannot be in an ASF distribution [2] in source or binary form. They 
cannot be a non-optional dependency. [3]

Kind Regards,
Justin

1. https://www.apache.org/legal/resolved.html#category-x
2. https://www.apache.org/legal/resolved.html#prohibited
3. https://www.apache.org/legal/resolved.html#optional

Re: [DISCUSS] Gluten proposal

[Justin Mclean]

Hi,

Looks like a good proposal. Only one thing stood out to me, while not 
impossible, planning to graduate in a year might not be easily achievable.

Kind Regards,
Justn
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [DISCUSS] Graduate Apache OpenDAL (incubating) as a TLP - Incubator

[Justin Mclean]

Hi,

Sorry, that should be "trademark attribution”, not “trademark attribute”.

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [DISCUSS] Graduate Apache OpenDAL (incubating) as a TLP - Incubator

[Justin Mclean]

Hi,

I found a few minor issues where some name and branding work needs to be done. 
Note that the project should be referred to as “OpenDAL” in the first instances 
and generally in headings, and 3rd parties need to make it clear it is an 
Apache project and includes the trademark attribute.

For instance, here [1], and also on the documentation, for example, [2], and 
here [3] and here [4], and with some 3rd party sites [5][6] and [7] (search for 
OpenDal)

Kind Regards,
Justin

1. https://pypi.org/project/opendal/
2. https://opendal.apache.org/docs/python/opendal.html
3. https://crates.io/crates/opendal
4. https://docs.rs/crate/opendal/latest
5. https://llamahub.ai/l/opendal_reader
6, https://hackmd.io/@opendal
7 https://databend.rs/

Re: [VOTE] Release Apache Answer(Incubating) v1.2.1-RC1 (Round2)

[Justin Mclean]

Hi,

+1 (binding)

In the source release, I checked:
- incubating in artifacts name
- signatures and hashes are correct
- LICENSE and NOTICE are fine
- DISCLAIMER exists
- all files have ASF headers
- no unexpected binary files
- my system isn't setup to compile it

In the REDME.md it suggests that people run the latest non-released version; 
please don't do this. [1]

Kind Regards,
Justin

1. https://www.apache.org/legal/release-policy.html#what

Re: [VOTE] Release Apache Answer(Incubating) v1.2.1-RC1 (Round2)

[Justin Mclean]

Hi,

+1 (binding)

In the source release, I checked:
- incubating in artifacts name
- signatures and hashes are correct
- LICENSE and NOTICE are fine
- DISCLAIMER exists
- all files have ASF headers
- no unexpected binary files
- my system isn't setup to compile it

In the REDME.md it suggests that people run the latest non-released version; 
please don't do this. [1]

Kind Regards,
Justin

1. https://www.apache.org/legal/release-policy.html#what

Re: [VOTE] Release Apache Answer(Incubating) v1.2.1-RC1

[Justin Mclean]

HI,

The previous signing key also needs to be revoked as it has been shared.

Kind Regards,
Justn


-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: December Podling reports

[Justin Mclean]

I’ll get to it in the next 24 hours.
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [DISCUSS] HoraeDB proposal

[Justin Mclean]

HI,

> project still wants to use the CeresDB name in some form. Is this correct
> or not?
> NO.

Then why does the code in the code still refer to CeresDB in 100+ places?

for instance, the source path is:
/horaedb/src/ceresdb

looking at horaedbsrc/ceresdb/bin/ceresdb-server.rs it contains things like:
const NODE_ADDR:  = "CERESDB_SERVER_ADDR”;
use ceresdb:
println!("CeresDB server tries starting with config:{config:?}”);

in src/ceresdb/Cargo.toml
[package]
name = "ceresdb"

Dockerfile
COPY . /ceresdb
WORKDIR /ceresdb## CeresDBCOPY --from=build 
/ceresdb/target/release/ceresdb-server /usr/bin/ceresdb-server
RUN chmod +x /usr/bin/ceresdb-serverCOPY ./docs/minimal.toml 
/etc/ceresdb/ceresdb.toml

And as mentioned, 100+ other instances.

You also have things like this, which was published in the last day. If the 
name has changed, why is this still being published under the old name?
https://github.com/CeresDB/horaedb/pkgs/container/ceresdb-server

The proposal doesn't address these naming issues; please update it to include 
how these will be handled. All of the changes don't need to happen before 
donation, just meantion how they will be handled,  but you do need to respect 
3rd party trademarks. 

My previous question regards whether the project has been given permission to 
use the CeresDB trademark has still not been answered.

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [DISCUSS] HoraeDB proposal

[Justin Mclean]

HI,

From the discussion and proposal, I had understood that the HoraeDB project 
still wants to use the CeresDB name in some form. Is this correct or not?

Kind Regards,
Justin


-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [DISCUSS] HoraeDB proposal

[Justin Mclean]

Hi,

> I don't see if anywhere “CeresDB” should be used. If so, HoraeDB will change.

In the proposal, IMO CeresDB is not used where it should be, giving a false 
impression. e.g. "HoraeDB has been open-sourced on GitHub for over a year.” 
that is not correct as it was CeresDB as the name change only happened a couple 
of weeks ago.

> The org name is where it leaves now and shall not to change. This is
> the same as datafuselabs/opendal doesn't change its org name before
> proposing for incubation.

There is precedent for keeping the org if it already has widespread use and 
would harm the community with its change. However, it is strongly recommended 
that the name be changed to the new one. The proposal should state which 
direction the project will go in.

> The same for its doc site ceresdb.github.io/docs

This is an issue as a company still owns the brand and trademark. In other 
cases e.g. Wth Flex, permission was given by Adobbe to use the trademark. Has 
the company given permission to use their trademark? If so, how is it allowed 
to be used? This should be included in the proposal.

> Also, I don't think the time itself is an issue but the trust and
> certainty, because Pekko renames all its references to Akka after
> entering the incubator.

Pekko was forced to rename due to a hostile license change and they didn't own 
the name. The proposal stated that they would do this.

> So, Justin, your comment is not a reason also, but a suspect for
> uncertainty if "some entities have taken unfair advantage of this".
> This is neither provable nor unfalsifiable.

It is provable - take a look at the trademarks list. I did not want to 
highlight any particular project and sidetrack the discussion.

I think the proposal needs some improvements as mentioned above.

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [VOTE] Release Apache Answer(Incubating) v1.2.0-RC1

[Justin Mclean]

Hi,

The release artefacts include incubating in their names [1] as Incubator policy 
requires [2].

Kind Regards,
Justin

1. https://dist.apache.org/repos/dist/dev/incubator/answer/1.2.0-incubating-RC1/
2. https://incubator.apache.org/policy/incubation.html#releases

Re: [DISCUSS] HoraeDB proposal

[Justin Mclean]

Hi,

> Using a new name to avoid any possible confusion or conflict is reasonable
> I think.

That was not given as the reason.

Justin

-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [DISCUSS] HoraeDB proposal

[Justin Mclean]

Hi,

> We have tons of examples here in the ASF of project Foo being used to
> power commercial product Bar (Geode/Gemfire, Ignite/GridGain,
> Kafka/Confluent, and many, many more). So this kind of dual branding
> is nothing new -- there's no community fork involved per se.

"Daul branding" is nothing new, but recently, some entities have taken unfair 
advantage of this (including one you mentioned), and I feel the Incubator 
should take care that others do not also do this.

> It would be nice if the original name of the open source project (as
> it existed on Github) was donated to ASF and the new name for a
> commercially developed product was picked. But even if it is the other
> way around -- I actually don't see any risks for the foundation in
> this approach (as long as it is clearly understood that the branding
> guidelines on both sides need to be honored).

After reading the proposal, I’m not 100% sure the branding guidelines are 
understood. “HoraeDB” is used, whereas “CeresDB” should be used in several 
cases. It looks like the rename was only done a couple of weeks ago.

Kind Regards,
Justin  


1. 
https://github.com/CeresDB/horaedb/commit/7de05192d7fa6d96cdd49ffab4a4fd4754d64b68


-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [DISCUSS] HoraeDB proposal

[Justin Mclean]

Hi,

We need to know the reasons for the name change and why the company is willing 
to donate the code but not the name. The possibility of having them forking the 
community later is a risk the Incubator needs to know about and should be 
mentioned in the proposal. Having a brand closely associated with a project and 
owned by a single corporate entity is a risk to the project. Why a company 
would be unwilling to give up that brand or trademark just because it may be 
convenient in the future is a concern.

Kind Regards,
Justin

> On 28 Nov 2023, at 8:29 pm, tison  wrote:
> 
> Let me be clear on the reason for keeping the name:
> 
> 1. Ant Group registered the trademark CeresDB and did marketing work
> associated with the product. They want to keep the result under Ant
> Group corp even if the software source code is donated to ASF
> incubator.
> 2. Ant Group wants to retain the possibility of providing a product
> with the name "CeresDB", although there is not on-going plan now.
> 
> These are all the concert reasons that the name is changed to HoraeDB
> for donating. And I don't think we have some policies to prevent a
> to-be-donated project for doing so - it's effectively the same as Ant
> Group donates a project named HoraeDB which shares the same code with
> their codebase internally named "CeresDB". I wrote it in the
> background to explain why https://github.com/CeresDB/horaedb has its
> name, but it can be unrelated to the donation (forget "CeresDB" and
> nothing changes).
> 
> Best,
> tison.
> 
> tison  于2023年11月28日周二 09:12写道：
>> 
>> Perhaps think of an analogy with Docker vs. Moby?
>> 
>> Justin Mclean 于2023年11月28日 周二07:15写道：
>>> 
>>> HI,
>>> 
>>>> This is included in the proposal: Since Ant Group wants to retain the brand
>>>> of CeresDB, we renamed the OSS project as HoraeDB before this proposal.
>>> 
>>> Why do they want to retrain that brand? They are not using an internal 
>>> version of the project currently. Do they intend to fork the project?
>>> 
>>> Kind Regards,
>>> Justin
>>> -
>>> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
>>> For additional commands, e-mail: general-h...@incubator.apache.org
>>> 
> 
> -
> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
> For additional commands, e-mail: general-h...@incubator.apache.org
> 


-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [DISCUSS] HoraeDB proposal

[Justin Mclean]

HI,

> This is included in the proposal: Since Ant Group wants to retain the brand
> of CeresDB, we renamed the OSS project as HoraeDB before this proposal.

Why do they want to retrain that brand? They are not using an internal version 
of the project currently. Do they intend to fork the project?

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [DISCUSS] HoraeDB proposal

[Justin Mclean]

Hi,

Looking at the existing governance, I see that 2/3 of existing PMC members are 
needed to vote for a new PMC member. I assume this requirement will be dropped?

There are many communication channels e.g. Slack, WeChat, DingTalk. What will 
happen to these in the future and who controls them? Will control of these be 
transferred to the PMC?

I‘m curious about the name change and why the original name is being kept. How 
you provide a bit more detail on this?

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [DISCUSS] HoraeDB proposal

[Justin Mclean]

HI,

The ring license seems to include BSD-style licenses with advertising clauses. 
These are considered category X. [1]

Kind Regards,
Justin

1. https://www.apache.org/legal/resolved.html#category-x

Re: [VOTE] Release Apache Pekko(incubating) Core 1.0.2-RC1

[Justin Mclean]

Hi,

> Thanks Justin. I'll look into those files again. With this RC, it includes
> a security hardening change. Akka issued a CVE for the issue but we don't
> think it really needs one. At the same time, I'd like to get out a change.
> 
> Can we delay getting a fix for the possible license issue with these test
> files?

Sure, it's not that the files are that interesting content-wise; they are meant 
to be copied. You are likely to keep their contents the same, but it needs to 
be clarified what their license is - at worst, it is category b. It might be 
possible that the owners could release them under a category A license if you 
ask.

Kind Regards,
Justin


-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [VOTE] Release Apache Pekko(incubating) Core 1.0.2-RC1

[Justin Mclean]

Hi,

> We have not modified these files since the Akka split so I do not
> think we should put Apache headers on them.

Nor do I. 3rd party files should not have ASF headers.

> I removed one file using https://github.com/apache/incubator-pekko/pull/810
> 
> I cannot find any other files that appear to be based on
> https://github.com/isc-projects/bind9 

It looks like most files in the /actor-tests/src/test/bind/etc/ directory? See, 
for example, https://wiki.debian.org/Bind9#Files_in_.2Fvar.2Flib.2Fbind.2F and 
https://wiki.debian.org/Bind9#File_.2Fetc.2Fbind.2Fnamed.conf.default-zones

These files I can find identical copies of:
/actor-tests/src/test/bind/etc/db.local
/actor-tests/src/test/bind/etc/named.conf.default-zones
/actor-tests/src/test/bind/etc/db.root
/actor-tests/src/test/bind/etc/zones.rfc1918
/actor-tests/src/test/bind/etc/bind.keys
/actor-tests/src/test/bind/etc/db.127
/actor-tests/src/test/bind/etc/db.empty

But it’s unclear how these files are licensed.

Kind Regards,
Justin



-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [VOTE] Release Apache Pekko(incubating) Core 1.0.2-RC1

[Justin Mclean]

Hi,

> Justin - if you are aware of more matches other than the bind.keys
> file, could you make us aware of them?

I think there are about 1/2 a dozen files in that directory from Bind9, but 
nothing outside of that I’ve found. I’ve not done an extensive check, but at a 
glance, the file names and contents show similarity. They didn’t have ASF or 
Pekko headers which first alerted me.

Kind Regards,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [VOTE] Release Apache Pekko(incubating) Core 1.0.2-RC1

[Justin Mclean]

HI,

I’ve not finished my review, but I may have found an issue. Some of the content 
in /actor-tests/src/test/bind/etc/ seems to come from Bind9 
(https://github.com/isc-projects/bind9). The project is under a Category B 
license (MPL 2.0), but given the nature of these files and their use, I’m 
unsure if that license applies. Assuming it is OK to include them, something 
should be mentioned LICENSE.

Kind Regards,
Justin

> On 19 Nov 2023, at 12:56 am, PJ Fanning  wrote:
> 
> Hello Incubator Community,
> 
> This is a call for a vote to release Apache Pekko(incubating)
> Core version 1.0.2-RC1.
> 
> The discussion thread:
> https://lists.apache.org/thread/zy84yk5gxp54bkn81ntlj5ps5o2z9w4j
> 
> Pekko Vote Thread
> https://lists.apache.org/thread/0ojxypkm650bhk6pf53cp7h8036jgyol
> 
> Pekko Result:
> https://lists.apache.org/thread/mh398gtjm751fq4fhss5c0xfwxnvx2xy
> 
> The release candidate:
> 
> https://dist.apache.org/repos/dist/dev/incubator/pekko/1.0.2-RC1/
> 
> This release has been signed with a PGP key, available here:
> 
> https://dist.apache.org/repos/dist/release/incubator/pekko/KEYS
> 
> Git branch for the release:
> 
> https://github.com/apache/incubator-pekko/tree/v1.0.2-RC1
> Git commit ID: 58fa510455190bd62d04f92a83c9506a7588d29c
> 
> Release Notes:
> 
> https://nightlies.apache.org/pekko/docs/pekko/1.0/docs/release-notes/index.html#1-0-2
> 
> Please download, verify, and test.
> 
> We have also staged jars in the Apache Nexus Repository. These were
> built with the same code
> as appears in this Source Release Candidate. We would appreciate if
> users could test with these too.
> If anyone finds any serious problems with these jars, please also
> notify us on this thread.
> 
> https://repository.apache.org/content/groups/staging/org/apache/pekko/
> 
> In sbt, you can add this resolver.
> 
> resolvers += "Apache Pekko Staging" at
> "https://repository.apache.org/content/groups/staging;
> 
> 
> The vote will be left open for at least 72 hours.
> 
> [ ] +1 approve
> [ ] +0 no opinion
> [ ] -1 disapprove with the reason
> 
> To learn more about Apache Pekko, please see https://pekko.apache.org/
> 
> Checklist for reference:
> 
> [ ] Download links are valid.
> [ ] Checksums and signatures.
> [ ] LICENSE/NOTICE files exist
> [ ] No unexpected binary files
> [ ] Source files have ASF headers
> [ ] Can compile from source
> 
> To compile from the source, please refer to:
> 
> https://github.com/apache/incubator-pekko/blob/main/README.md#building-from-source
> 
> Some notes about verifying downloads can be found at:
> 
> https://pekko.apache.org/download.html#verifying-downloads
> 
> 
> Here is my +1 (binding).
> 
> Thanks,
> 
> PJ Fanning
> 
> -
> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
> For additional commands, e-mail: general-h...@incubator.apache.org
> 

Re: [VOTE] Release Apache DevLake (Incubating) v0.19.0-rc2

[Justin Mclean]

Hi,

I think a little more work is needed:
- It is unclear what license yarn-3.4.1.cjs is under - why not just say it 
contains multiple pieces of 3rd party code under different licenses?
- You are misisng the BSD license for Yarn. The full text of the license needs 
to be included.
- You still need to, as required by the license, include the full text of the 
MIT licenses, which include the copyright line.
- What code is "Copyright (c) 2015, Rebecca Turner”, and what license is it 
under?
- What code is "Copyright Joyent, Inc. and other Node contributors.”, and what 
license is it under?
- What code is "Copyright Node.js contributors. All rights reserved.", and what 
license is it under?
- What code is "Copyright (c) 2014 Blake Embrey (he...@blakeembrey.com)”, and 
what license is it under?

Kind Regards,
Justin 


-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [VOTE] Release Apache Answer(Incubating) v1.2.0-RC1

[Justin Mclean]

Hi,

+1 (binding) - carrying over my vote from the dev list.

Kind Regards,
Justin

-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

[jira] [Commented] (INCUBATOR-281) Broken link

[Justin Mclean (Jira)]

[ 
https://issues.apache.org/jira/browse/INCUBATOR-281?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17787384#comment-17787384
 ] 

Justin Mclean commented on INCUBATOR-281:
-

It did exist at one point:
https://web.archive.org/web/20200428010425/https://incubator.apache.org/guides/retirement.html

And the file is still here:
https://github.com/apache/incubator/blob/master/pages/guides/retirement.ad

So perhaps something is going wrong with the build?

> Broken link
> ---
>
> Key: INCUBATOR-281
> URL: https://issues.apache.org/jira/browse/INCUBATOR-281
> Project: Incubator
>  Issue Type: Bug
>Reporter: Sebb
>Priority: Major
>
> https://cwiki.apache.org/confluence/display/incubator/RetiringPodlings
> links to
> https://incubator.apache.org/guides/retirement.html
> which does not exist.
> Not sure whether it ever did exist.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [CANCEL][VOTE] Release Apache Answer(Incubating) v1.2.0-RC1

[Justin Mclean]

Hi,

You’ve cancelled it, but I would have just left it open. The 72-hour period is 
a suggestion, and in some cases, if you have a good reason, e.g., an urgent 
security issue, you don’t have to wait 72 hours.

Kind Regards,
Justin

> On 17 Nov 2023, at 11:04 pm, LinkinStar  wrote:
> 
> Hi,
> 
> https://lists.apache.org/thread/8clmq7f9k56ppm7kqzq1wx0cfz25pxcb
> https://lists.apache.org/thread/sskl7zo2ps6k5txw4fzrc1xsf1v64k3f
> 
> Thanks for the suggestion from Justin and PJ. So cancel this vote and we
> will wait at least 72 hours for the Answer vote in d...@answer.apache.org.
> 
> Thanks,
> LinkinStar


-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org