On 29 Apr 2009, at 18:58, Ian Boston wrote:



- fix NOTICE in the tarball/zip (not in the jars) to specify crypto
and for php, the use of Zend and PHPUnit (major)

NOTICE varies from tgz to tgz and artifact to artifact. And will vary over time.

For Java, Dependencies is probably a good source for this information, but presumably we should not be listing transitive dependencies, only 1st level dependencies ?

If I am right, this is the remaining issue, and it sounds like there needs to be a NOTICE per artifact ?

WDYT.


Sorry, correction to that,
Looking at things like the 5.2.0 release of ActiveMQ-core,

NOTICE only contains the words
=================
Apache ActiveMQ
Copyright 2008 The Apache Software Foundation

This product includes software developed at
The Apache Software Foundation (http://www.apache.org/).
=================

and DEPENDENCIES lists all the dependencies.


So as far as the jars built by maven are concerned, if ActiveMQ 5.2 is good, so is Shindig?

The war archive might be different since it really does contain all the jars.


Ian


Reply via email to