Mailing-List: contact dev-help@commons.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Jakarta Commons Developers List" <dev@commons.apache.org>
Received-SPF: neutral (athena.apache.org: local policy)
Message-ID: <47868AA0.4030002@apache.org>
Date: Thu, 10 Jan 2008 22:14:08 +0100
From: Dennis Lundberg <dennisl@apache.org>
User-Agent: Thunderbird 2.0.0.9 (Windows/20071031)
MIME-Version: 1.0
To: Jakarta Commons Developers List <dev@commons.apache.org>
Subject: Re: [IO] Planning IO 1.4 release
References: <191539.44918.qm@web86511.mail.ird.yahoo.com>
	 <25aac9fc0801100832x55890248k6ef511e1473478f8@mail.gmail.com>
	 <55afdc850801100839m383f1dfh95b90b1382667093@mail.gmail.com>
	 <25aac9fc0801100901n5734d06atf07ffa2d2dfed565@mail.gmail.com>
	 <47867BFC.2020809@apache.org> <1199997986.14527.29.camel@simon-laptop>
In-Reply-To: <1199997986.14527.29.camel@simon-laptop>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

simon wrote:
> On Thu, 2008-01-10 at 21:11 +0100, Dennis Lundberg wrote:
>> sebb wrote:
>>> AIUI, the NOTICE file is not about dependencies, it is about the
>>> artefacts that are actually included in the distribution.
>>>
>>> In the case of Commons, dependencies are normally not included in the
>>> distribution, and should therefore not be included in NOTICE.
>> Now I better understand why you feel the way you do about this.
>>
>> The approach that mrrp takes is to inform about software that is either 
>> included *or* used by the current project. So it behaves differently 
>> than you expect it to. I don't have much insight into the legal stuff 
>> surrounding these files, but mrrp is used by lots of ASF project. So I 
>> suspect that the generated NOTICE files comply with ASF policy.
> 
> In legal terms, things like "I don't have much insight into the legal
> stuff" and "I suspect that that generated NOTICE files comply.." worry
> me a lot. It also bothers me that "lots of projects" appear to have
> changed their legal process without asking on legal-discuss.

I started using the plugin because I had seen it used in other places 
within the ASF, so I assumed it was OK to use it. The resource-bundle 
that is downloaded by mrrp was designed to help ASF projects to comply 
with ASF policy, AIUI.

> Now I don't have much insight into legal issues either, and it may well
> be that you are right and I am wrong. But if processes are to be
> *changed*, then surely we need to validate the change before applying
> it. Just making changes to the legal processes without any expert
> opinion seems to be asking for trouble.
> 
> Which projects are using mrrp auto-notice generation, and since when?

I don't know when it was first used, but I checked SVN right now and 
directory and geronimo use it.

> Regards,
> 
> Simon
> 
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
> For additional commands, e-mail: dev-help@commons.apache.org
> 
> 


-- 
Dennis Lundberg

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
For additional commands, e-mail: dev-help@commons.apache.org