From chemistry-dev-return-2106-apmail-incubator-chemistry-dev-archive=incubator.apache.org@incubator.apache.org Thu Sep 09 13:18:08 2010 Return-Path: Delivered-To: apmail-incubator-chemistry-dev-archive@minotaur.apache.org Received: (qmail 79339 invoked from network); 9 Sep 2010 13:18:08 -0000 Received: from unknown (HELO mail.apache.org) (140.211.11.3) by 140.211.11.9 with SMTP; 9 Sep 2010 13:18:08 -0000 Received: (qmail 38323 invoked by uid 500); 9 Sep 2010 13:18:08 -0000 Delivered-To: apmail-incubator-chemistry-dev-archive@incubator.apache.org Received: (qmail 38206 invoked by uid 500); 9 Sep 2010 13:18:06 -0000 Mailing-List: contact chemistry-dev-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: chemistry-dev@incubator.apache.org Delivered-To: mailing list chemistry-dev@incubator.apache.org Received: (qmail 38192 invoked by uid 99); 9 Sep 2010 13:18:05 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 09 Sep 2010 13:18:05 +0000 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of florian.mueller@alfresco.com designates 88.151.129.23 as permitted sender) Received: from [88.151.129.23] (HELO mx-out-manc3.simplymailsolutions.com) (88.151.129.23) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 09 Sep 2010 13:17:57 +0000 Received: from zimbra.alfresco.com ([10.2.10.4]) by mx-out-manc3.simplymailsolutions.com (8.14.1/8.14.1) with ESMTP id o89DHZMQ022804 for ; Thu, 9 Sep 2010 14:17:35 +0100 Received: from localhost (localhost.localdomain [127.0.0.1]) by zimbra.alfresco.com (Postfix) with ESMTP id A2E0E414025 for ; Thu, 9 Sep 2010 14:17:35 +0100 (BST) X-Virus-Scanned: amavisd-new at unx-d-manc4.tc.ifeltd.com Received: from zimbra.alfresco.com ([127.0.0.1]) by localhost (zimbra.alfresco.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p5lhzHU60J0x for ; Thu, 9 Sep 2010 14:17:35 +0100 (BST) Received: from Florian-Mullers-MacBook-Pro-2.local (unknown [194.75.202.163]) (Authenticated sender: florian.mueller) by zimbra.alfresco.com (Postfix) with ESMTP id 07EFC414017 for ; Thu, 9 Sep 2010 14:17:35 +0100 (BST) Message-ID: <4C88DE5B.3080207@alfresco.com> Date: Thu, 09 Sep 2010 14:17:15 +0100 From: =?ISO-8859-1?Q?Florian_M=FCller?= User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.8) Gecko/20100802 Thunderbird/3.1.2 MIME-Version: 1.0 To: chemistry-dev@incubator.apache.org Subject: Re: Validation of release packages References: <23210225.115471283350553943.JavaMail.jira@thor> <0FE020E9-8A81-4838-A2D1-CE41EAB03432@apache.org> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Hi, Gab and my interpretation of the Apache third-party rules [1] is that all dependencies with Category B licences have to be mentioned in the NOTICE files with a link to the source code. We have a bunch of CDDL dependencies. The names and links are already in the DEPENDENCIES files. We think copying the CDDL entries to NOTICE files should sufficient. Any comments? Experts? - Florian [1] http://www.apache.org/legal/3party.html On 08/09/2010 14:59, Nick Burch wrote: > On Wed, 1 Sep 2010, Gabriele Columbro wrote: >> One question to conclude: referring to Nick's comments at [4], do you >> think we should have anything else in NOTICE for all packages? In >> other words, which of the licenses mentioned in the various >> DEPENDENCIES files actually require a NOTICE? > > The NOTICE file should contain as little as possible. Everything else > should go in DEPENDENCIES, a readme, the website etc > > The reason for this is that every downstream user has to include > everything in our NOTICE file in their own notices. So, we want it to > include all the required notices of our upstream dependencies, along > with our own notice. However, we don't want to full the NOTICE file up > with things that aren't required, as we don't want to burden our users! > > To review the NOTICE files, take a look at what's in there, and compare > that to the dependencies list (which is hopefully correct, since maven > generated it!). The notice file should have our notice in it, and after > that any dependency ones. If a dependency is under a license that > requires a notice, it should be there. (If not, it shouldn't. The main > apache 3rd party licenses page may give some help on this) > > Does this make sense to everyone? > > Nick