Re: [Discuss] Graduate Apache SINGA (incubating) as a TLP

2019-09-04 Thread Justin Mclean
Hi, I just took a look at the Sign incubator report and it needs some improvement. If you were a TLP if and a report like this was submitted to the board, it would likely be rejected, or attract questions. I suggest you add a bit more meaningful detail to the report. Thanks, Justin

Re: Incubator podling reports due today

2019-09-04 Thread Dave Fisher
> On Sep 4, 2019, at 3:50 PM, Justin Mclean wrote: > > Hi, > > Thursday morning here and still to report are: > Amaterasu* > Hivemall > Iceberg > Marvin-AI > Omid** > SINGA > Superset > Tamaya* > Taverna > Tephra > Warble Warble just reported…. > > * did not report last month. > > A

Re: Incubator podling reports due today

2019-09-04 Thread Justin Mclean
Hi, Thursday morning here and still to report are: Amaterasu* Hivemall Iceberg Marvin-AI Omid** SINGA Superset Tamaya* Taverna Tephra Warble * did not report last month. A couple of the reports need more detail and may be rejected, I’ll contact the podlings individually. Thanks, Justin

Re: What is the best tool to scan the code?

2019-09-04 Thread Romain Manni-Bucau
Hi, 1. ossindex from sonatype covers a lot 2. not sure what you means, findbugs or more checkstyle/pmd? 3. rat plugin for example (see apache creadur tools too, there are license tools). Also note that with the initial dep review + review of the license each time a new dep is added in standard

Re: What is the best tool to scan the code?

2019-09-04 Thread Justin Mclean
HI, > We would like to scan our code to: > 1) dependency analysis Most build tools can do this. > 2) snippet matching I don’t know of any open source project that does this, but that not to say ones doesn’t exist. > 3) license analysis Apache Rat is a simple tool that can help with this, if

RE: What is the best tool to scan the code?

2019-09-04 Thread Xun Hu
We would like to scan our code to: 1) dependency analysis 2) snippet matching 3) license analysis 4) binary analysis - optional We found one paid solution - black duck, not sure there is any open source solution on the market. Thanks, -xun -Original Message- From: Justin Mclean

Re: What is the best tool to scan the code?

2019-09-04 Thread Justin Mclean
HI, > We have one open source project, and I would like to find a tool to scan the > code before we open it. Sorry but it unclear to me, what you what to scan the code for. Thanks, Justin - To unsubscribe, e-mail:

Re: Is it safe to include valgrind.h?

2019-09-04 Thread Justin Mclean
Hi, It’s under a Category A license so would be safe to include, however that then gives you a dependancy on a Category X bit of software which is not normally allowed. Is valgrind needed by all users or is it optional? Thanks, Justin

Re: [DISCUSS] Graduate Apache Rya (incubating) as a TLP

2019-09-04 Thread Julian Hyde
I’ve been monitoring Rya for a few years now. The project seems to have a steady level of activity from diverse contributors, operating according to the Apache Way. +1 to graduate, good luck! Julian > On Sep 3, 2019, at 6:27 PM, Adina Crainiceanu wrote: > > Hi, > > 5 of the proposed PMC

What is the best tool to scan the code?

2019-09-04 Thread Xun Hu
Hi, all, We have one open source project, and I would like to find a tool to scan the code before we open it. What is the best tool you can recommend to us? Best, -xun - To unsubscribe, e-mail:

Is it safe to include valgrind.h?

2019-09-04 Thread tan zhongyi
Hi, guys, We have included one file named as valgrind.h under brpc’s source code. https://github.com/apache/incubator-brpc/blob/master/src/butil/third_party/valgrind/LICENSE https://github.com/apache/incubator-brpc/blob/master/src/butil/third_party/valgrind/valgrind.h