incubator-general mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Marvin Humphrey <mar...@rectangular.com>
Subject Re: Request for an early review of an potential Apache OpenOffice release
Date Thu, 15 Mar 2012 03:23:15 GMT
2012/3/13 J├╝rgen Schmidt <jogischmidt@googlemail.com>:
> we have prepared a new developer snapshot on the way to our first release.

Congratulations on your progress so far!

> We would very much appreciate some early feedback if possible.

I can do a little bit of surface level checking.  Ordinarily, I would probe
deeper into source code provenance, but in this case I will have to trust the
AOO PPMC and the AOO Mentors that proper diligence has been exercised.

The PGP signature and the checksums on the tar.gz archive all looked good.
FWIW, there seemed to be extraneous .txt extensions attached to aoo.KEYS and
some of the checksum files, and the format of the checksum files will not work
with "md5sum --check" and "shasum --check" -- but that's all nitpicking.

I was a little surprised that the LICENSE file contained only the ALv2, and
that NOTICE points at the websites for dependencies and their licensing.
Ordinarily, I would expect to see entire verbatim licenses for all bundled
dependencies in LICENSE.

The README starts with a UTF-8-encoded BOM.  Just FYI.

I don't see the Incubation disclaimer in either a dedicated DISCLAIMER file or
the README.  Also, the word "incubating" is not in the archive filename.

Hope this helps as a start at least,

Marvin Humphrey

marvin@smokey:~/Desktop $ gpg --verify aoo-3.4-src.tar.gz.asc
gpg: Signature made Tue Mar 13 00:52:11 2012 PDT using RSA key ID 51B5FDE8
gpg: Good signature from "Juergen Schnmidt <jsc@apache.org>"
gpg:                 aka "Juergen Schmidt <jogischmidt@googlemail.com>"
gpg:                 aka "Juergen Schmidt <jogischmidt@gmail.com>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: D09F B15F 1A24 768D DF1F  A29C CFEE F316 51B5 FDE8
marvin@smokey:~/Desktop $ gpg --print-md MD5 aoo-3.4-src.tar.gz
aoo-3.4-src.tar.gz: 9B 5B 55 09 68 DE 7A C2  54 DC 6C E2 3C 32 5F 17
marvin@smokey:~/Desktop $ cat aoo-3.4-src.tar.gz.md5.txt
aoo-3.4-src.tar.gz: 9B 5B 55 09 68 DE 7A C2  54 DC 6C E2 3C 32 5F 17
marvin@smokey:~/Desktop $ gpg --print-md SHA1 aoo-3.4-src.tar.gz
aoo-3.4-src.tar.gz: 83B7 F124 F967 4D5E 3468  24CC D245 2DEB 9171 6689
marvin@smokey:~/Desktop $ cat aoo-3.4-src.tar.gz.sha1.txt
aoo-3.4-src.tar.gz: 83B7 F124 F967 4D5E 3468  24CC D245 2DEB 9171 6689
marvin@smokey:~/Desktop $ gpg --print-md SHA512 aoo-3.4-src.tar.gz
aoo-3.4-src.tar.gz: 3898D4EC 92917120 87A016F8 075E3B7B B87E44B0 FED22E3B
                    CF5D8850 90CA2713 E9F98A6E 51522AEF 50DC6F30 F36860C4
                    C62161B5 F16FE64B 5CD144FF ED043D33
marvin@smokey:~/Desktop $ cat aoo-3.4-src.tar.gz.sha512
aoo-3.4-src.tar.gz: 3898D4EC 92917120 87A016F8 075E3B7B B87E44B0 FED22E3B
                    CF5D8850 90CA2713 E9F98A6E 51522AEF 50DC6F30 F36860C4
                    C62161B5 F16FE64B 5CD144FF ED043D33

---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
For additional commands, e-mail: general-help@incubator.apache.org


Mime
View raw message