hadoop-yarn-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Xiao Chen (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (YARN-5433) Audit dependencies for Category-X
Date Tue, 25 Oct 2016 22:50:59 GMT

    [ https://issues.apache.org/jira/browse/YARN-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15606711#comment-15606711
] 

Xiao Chen commented on YARN-5433:
---------------------------------

Thanks [~sjlee0] for working on this (and the ping).

For HADOOP-12893, the [spreadsheet|https://docs.google.com/spreadsheets/d/1HL2b4PSdQMZDVJmum1GIKrteFr2oainApTLiJTPnfd4/edit#gid=1060066002]
has a 'generate.py' tab, containing the code used to generate the L&N (which license to
skip L&N etc.). Probably an overkill here, but that's more accurate than my memory. :)

So:
- No need to add NOTICE for BSD here. See https://issues.apache.org/jira/browse/HADOOP-12893?focusedCommentId=15284739&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15284739
for details.
- MPL and CDDL are ok. We should add it to LICENSE.txt under corresponding license. There's
already {{servlet-api 2.5}} in there under CPPL1.0, so we can skip that.
- Didn't check all, but if there're any dependency with multiple licenses, we can choose the
most friendly one.

> Audit dependencies for Category-X
> ---------------------------------
>
>                 Key: YARN-5433
>                 URL: https://issues.apache.org/jira/browse/YARN-5433
>             Project: Hadoop YARN
>          Issue Type: Bug
>          Components: timelineserver
>    Affects Versions: 3.0.0-alpha1
>            Reporter: Sean Busbey
>            Assignee: Sangjin Lee
>            Priority: Blocker
>         Attachments: YARN-5433.01.patch
>
>
> Recently phoenix has found some category-x dependencies in their build (PHOENIX-3084,
PHOENIX-3091), which also showed some problems in HBase (HBASE-16260).
> Since the Timeline Server work brought in both of these as dependencies, we should make
sure we don't have any cat-x dependencies either. From what I've seen in those projects, our
choice of HBase version shouldn't be impacted but our Phoenix one is.
> Greping our current dependency list for the timeline server component shows some LGPL:
> {code}
> ...
> [INFO]    net.sourceforge.findbugs:annotations:jar:1.3.2:compile
> ...
> {code}
> I haven't checked the rest of the dependencies that have changed since HADOOP-12893 went
in, so ATM I've filed this against YARN since that's where this one example came in.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-issues-help@hadoop.apache.org


Mime
View raw message