incubator-general mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From sebb <seb...@gmail.com>
Subject Re: [VOTE] Release OpenMeetings 2.0-incubating (Candidate 2)
Date Tue, 26 Jun 2012 13:40:00 GMT
On 26 June 2012 13:28, seba.wagner@gmail.com <seba.wagner@gmail.com> wrote:
> Thanks for the feedback and review so far!
>
> About correct attribution of ASF JARs
> Do they need a reference in the LICENSE file at all ?

The recipient of the package needs to be able to quickly find the
license associated with all jars, so I would say yes.

> Must the name of the JAR file be _exactly_ mentioned in the LICENSE file?
> For example:
> http://svn.apache.org/viewvc/incubator/openmeetings/tags/2.0RC2/LICENSE?view=markup
> Line: 206
> "For GlassFish components / activation.jar"
> => Do we need to write "activation-jar-1.1.jar" instead of "activation.jar"
> ?

Yes, because licenses may change between versions.

> or Line 327 instead of "For SLF4J:" "slf4j-api-1.6.4.jar"
>
> Thanks,
> Sebastian
>
> 2012/6/26 sebb <sebbaz@gmail.com>
>
>> On 26 June 2012 12:43, seba.wagner@gmail.com <seba.wagner@gmail.com>
>> wrote:
>> > @Sebb: Which of the Libraries do you think are duplicates?
>>
>> bcprov
>> commons-beanutils
>> commons-codec
>> commons-collections
>> ehcache-core
>> httpclient
>> httpcore
>>
>> etc.
>>
>> Not as many as I thought at first glance, but still quite a lot.
>>
>> > About License VS Notice file. From what I understood from
>> >
>> http://incubator.apache.org/guides/releasemanagement.html#best-practice-license
>> >
>> >
>> > "The NOTICE document is for additional copyright and attribution
>> statements
>> > those licenses may require."
>> > => As all libraries that are shipped are compliant to the Apache License
>> I
>> > would have expected that it is sufficient to only add a section to the
>> > Notice file where the License requires additionall attribution.
>>
>> Yes.
>>
>> > All 3th party licenses are in the License file.
>>
>> This is impossible to check at present, because the file does not list
>> all the jars it references.
>>
>> The only jar references I could find in the LICENSE file are:
>>
>> For GlassFish components / activation.jar
>>  For backport-util-concurrent-jar-3.1.jar
>>  For jaxb-api-jar-2.2.4.jar
>> For jaxen-jar-1.1.1.jar
>> For mail-jar-1.4.4.jar
>> For wsdl4j-jar-1.6.2.jar
>> For jython-2.5.jar
>> dom4j-1.6.1.jar
>> postgresql-jar-9.1-901.jdbc4.jar
>> serp-1.13.1.jar - BSD License
>>
>> Yet the following jars are included:
>>
>> activation-jar-1.1.jar
>> backport-util-concurrent-jar-3.1.jar
>> bcprov-jdk16-145.jar
>> boot.jar
>> cglib-jar-2.2.2.jar
>> com.springsource.javax.xml.stream-1.0.1.jar
>> com.springsource.net.sf.cglib-2.2.0.jar
>> com.springsource.org.antlr-3.1.3.jar
>> com.springsource.org.aopalliance-1.0.0.jar
>> com.springsource.org.apache.xerces-2.9.1.jar
>> com.springsource.org.codehaus.groovy-1.7.0.jar
>> com.springsource.org.mozilla.javascript-1.7.0.R2.jar
>> com.springsource.org.objectweb.asm-3.2.0.jar
>> com.springsource.org.objectweb.asm.commons-3.2.0.jar
>> dom4j-jar-1.6.1.jar
>> ehcache-core-2.5.0.jar
>> ical4j-bundle-1.0.3.jar
>> jasper-6.0.32.jar
>> jasper-el-6.0.32.jar
>> jasper-jdt-6.0.29.jar
>> javaee-api-5.1.2.om.jar
>> jaxb-api-jar-2.2.4.jar
>> jaxb-impl-jar-2.2.4.jar
>> jaxb-xjc-jar-2.2.4.jar
>> jaxws-tools-jar-2.2.5.jar
>> jcl-over-slf4j-1.6.4.jar
>> jruby-1.6.7.2.jar
>> jsr311-api-jar-1.1.1.jar
>> jul-to-slf4j-1.6.4.jar
>> jython-standalone-2.5.2.jar
>> logback-classic-1.0.3.jar
>> logback-core-1.0.3.jar
>> mail-jar-1.4.4.jar
>> neethi-bundle-3.0.3-SNAPSHOT.jar
>> org.springframework.aspects-jar-3.1.1.RELEASE.jar
>> org.springframework.jdbc-jar-3.1.1.RELEASE.jar
>> org.springframework.orm-jar-3.1.1.RELEASE.jar
>> org.springframework.transaction-jar-3.1.1.RELEASE.jar
>> org.springframework.web.servlet-jar-3.1.1.RELEASE.jar
>> postgresql-jar-9.1-901.jdbc4.jar
>> quartz-1.8.5.jar
>> red5-client.jar
>> red5.jar
>> serp-jar-1.13.1.jar
>> servlet-api-jar-2.5.jar
>> slf4j-api-1.6.4.jar
>> spring-aop-3.1.1.RELEASE.jar
>> spring-asm-3.1.1.RELEASE.jar
>> spring-beans-3.1.1.RELEASE.jar
>> spring-context-3.1.1.RELEASE.jar
>> spring-context-support-3.1.1.RELEASE.jar
>> spring-core-3.1.1.RELEASE.jar
>> spring-expression-3.1.1.RELEASE.jar
>> spring-web-3.1.1.RELEASE.jar
>> stax-api-jar-1.0-2.jar
>> stax2-api-jar-3.1.1.jar
>> sysout-over-slf4j-1.0.2.jar
>> tomcatplugin-1.3.jar
>> woden-api-jar-1.0-SNAPSHOT.jar
>> woden-impl-commons-jar-1.0-SNAPSHOT.jar
>> woden-impl-dom-jar-1.0-SNAPSHOT.jar
>> woodstox-core-asl-jar-4.1.3.jar
>> wsdl4j-jar-1.6.2.jar
>> XmlSchema-bundle-1.4.8-SNAPSHOT.jar
>> xpp3-jar-1.1.4c.jar
>> xstream-jar-1.4.2.jar
>>
>> Plus the following ASF jars:
>>
>> apache-mime4j-core-jar-0.8-SNAPSHOT.jar
>> axiom-api-bundle-1.2.14-SNAPSHOT.jar
>> axiom-dom-bundle-1.2.14-SNAPSHOT.jar
>> axiom-impl-bundle-1.2.14-SNAPSHOT.jar
>> axis2-jar-1.7.0-SNAPSHOT.jar
>> axis2-jaxws-jar-1.7.0-SNAPSHOT.jar
>> axis2-kernel-jar-1.7.0-SNAPSHOT.jar
>> axis2-metadata-jar-1.7.0-SNAPSHOT.jar
>> axis2-saaj-jar-1.7.0-SNAPSHOT.jar
>> axis2-transport-http-bundle-1.7.0-SNAPSHOT.jar
>> axis2-transport-local-bundle-1.7.0-SNAPSHOT.jar
>> batik-anim-jar-1.7.jar
>> batik-awt-util-jar-1.7.jar
>> batik-bridge-jar-1.7.jar
>> batik-codec-jar-1.7.jar
>> batik-css-jar-1.7.jar
>> batik-dom-jar-1.7.jar
>> batik-ext-jar-1.7.jar
>> batik-extension-jar-1.7.jar
>> batik-gui-util-jar-1.7.jar
>> batik-gvt-jar-1.7.jar
>> batik-parser-jar-1.7.jar
>> batik-rasterizer-jar-1.7.jar
>> batik-script-jar-1.7.jar
>> batik-slideshow-jar-1.7.jar
>> batik-squiggle-jar-1.7.jar
>> batik-svg-dom-jar-1.7.jar
>> batik-svggen-jar-1.7.jar
>> batik-svgpp-jar-1.7.jar
>> batik-swing-jar-1.7.jar
>> batik-transcoder-jar-1.7.jar
>> batik-ttf2svg-jar-1.7.jar
>> batik-util-jar-1.7.jar
>> batik-xml-jar-1.7.jar
>> catalina-6.0.32.jar
>> commons-beanutils-1.8.3.jar
>> commons-cli-jar-1.2.jar
>> commons-codec-1.6.jar
>> commons-codec-jar-1.6.jar
>> commons-collections-3.2.1.jar
>> commons-dbcp-jar-1.4.jar
>> commons-digester-jar-2.1.jar
>> commons-fileupload-jar-1.2.2.jar
>> commons-fileupload-jar-1.2.jar
>> commons-httpclient-jar-3.1.jar
>> commons-io-jar-1.4.jar
>> commons-io-jar-2.1.jar
>> commons-lang-jar-2.6.jar
>> commons-lang3-3.1.jar
>> commons-modeler-2.0.1.jar
>> commons-pool-1.5.6.jar
>> commons-transaction-jar-1.2.jar
>> derby-jar-10.8.2.2.jar
>> derbyclient-jar-10.8.2.2.jar
>> fop-jar-1.0.jar
>> geronimo-activation_1.1_spec-jar-1.0.2.jar
>> geronimo-annotation_1.0_spec-jar-1.1.jar
>> geronimo-javamail_1.4_spec-bundle-1.6.jar
>> geronimo-jaxws_2.2_spec-bundle-1.0.jar
>> geronimo-jpa_2.0_spec-bundle-1.1.jar
>> geronimo-jta_1.1_spec-jar-1.1.jar
>> geronimo-saaj_1.3_spec-jar-1.0.1.jar
>> geronimo-stax-api_1.0_spec-bundle-1.0.1.jar
>> geronimo-ws-metadata_2.0_spec-jar-1.1.2.jar
>> httpclient-4.1.2.jar
>> httpclient-jar-4.2.jar
>> httpcore-4.1.3.jar
>> jaxen-jar-1.1.1.jar
>> log4j-over-slf4j-1.6.4.jar
>> mina-core-2.0.4.jar
>> mina-integration-beans-2.0.4.jar
>> mina-integration-jmx-2.0.4.jar
>> openjpa-bundle-2.2.0.jar
>> openmeetings-2.0.0-SNAPSHOT.jar
>> openmeetings-screenshare-2.0.0-SNAPSHOT.jar
>> openmeetings-templates-2.0.0-SNAPSHOT.jar
>> openmeetings-WebService-2.0.0-SNAPSHOT.jar
>> tomcat-coyote-6.0.32.jar
>> tomcat-juli-slf4j-1.5.0.jar
>> velocity-jar-1.7.jar
>> velocity-tools-jar-2.0.jar
>> ws-commons-util-jar-1.0.2.jar
>> xalan-jar-2.7.0.jar
>> xml-apis-ext-jar-1.3.04.jar
>> xml-resolver-jar-1.2.jar
>> xmlgraphics-commons-jar-1.4.jar
>> xmlrpc-2.0.1.jar
>> xmlrpc-client-jar-3.1.3.jar
>> xmlrpc-common-jar-3.1.3.jar
>>
>> [Some of the first list of jars may be ASF, I did not check them all]
>>
>> Which jars are part of Glassfish?
>>
>> > I don't see any requirements for duplicating the same in the Notice file.
>>
>> Only required notices need to go in the license file.
>>
>> > Sebastian
>> >
>> > 2012/6/26 sebb <sebbaz@gmail.com>
>> >
>> >> On 26 June 2012 10:55, seba.wagner@gmail.com <seba.wagner@gmail.com>
>> >> wrote:
>> >> > Hi,
>> >> >
>> >> > that is the second Release Candidate (the first Candidate was voted
>> >> > negative on the openmeetings dev mailing list and did not came that
>> far)
>> >> >
>> >> > There was already a vote at the OpenMetings Dev mailing list.
>> >> > Results:
>> >> > PPMC:
>> >> > aaf +1 (mentor)
>> >> > solomax +1
>> >> > eschwert +1
>> >> > alvaro +1
>> >> >
>> >> > Wider Community: 3 times +3
>> >> >
>> >> > Result Vote Thread:
>> >> >
>> >>
>> http://mail-archives.apache.org/mod_mbox/incubator-openmeetings-dev/201206.mbox/%3CCACeMiA9MMjmZCbKKQ9ud64i4OPV2FJ9h6daqoS5q9%3DxOZVad_w%40mail.gmail.com%3E
>> >> >
>> >> > The Vote Thread:
>> >> >
>> >>
>> http://mail-archives.apache.org/mod_mbox/incubator-openmeetings-dev/201206.mbox/%3CCACeMiA9Xo7B13C14Uqq8VF%3DTCh3C7PNX6%2BQ4YJvO0cDej0e9vA%40mail.gmail.com%3E
>> >> >
>> >> > Main changes are covered in the Readme:
>> >> >
>> >>
>> http://svn.apache.org/repos/asf/incubator/openmeetings/tags/2.0RC2/README
>> >> >
>> >> > Full Changelog:
>> >> >
>> >>
>> http://svn.apache.org/repos/asf/incubator/openmeetings/tags/2.0RC2/CHANGELOG
>> >> >
>> >> > Release artefacts:
>> >> > http://people.apache.org/~sebawagner/rc2/
>> >>
>> >> The ASF releases source.
>> >> Why is there no Zip archive of the source?
>> >> There a zip and tar archives for the binary builds.
>> >>
>> >> The binary build includes a lot of 3rd party jars (about 80?, most of
>> >> them duplicated).
>> >> It's not clear if all the licenses for the included jars are included
>> >> in the LICENSE file.
>> >> I would expect some of them to require mention in the NOTICE file.
>> >>
>> >> The N&L files included in SVN, source and binary archives must relate
>> >> only to the content which is actually included.
>> >> This generally means different N&L files for the binary archives
>> >> (unless the binary is created only from the source).
>> >>
>> >> The NOTICE files must only have *required* notices.
>> >>
>> >> > Tag:
>> >> > http://svn.apache.org/repos/asf/incubator/openmeetings/tags/2.0RC2/
>> >>
>> >> The NOTICE file looks wrong; it should not include the full licence
>> >> for iCal4j which should be in the appropriate LICENSE file.
>> >> The NOTICE file is for required notices only.
>> >>
>> >> As far as I can tell, only the FamFamFam icons are included in the
>> >> source release (and SVN) so the corresponding N&L files should only
>> >> refer to them.
>> >>
>> >> > PGP release keys (signed using 93A30395):
>> >> > http://svn.apache.org/repos/asf/incubator/openmeetings/project/KEYS
>> >> >
>> >> > Vote will be open for 72 hours.
>> >> >
>> >> > [ ] +1  approve
>> >> > [ ] +0  no opinion
>> >> > [ ] -1  disapprove (and reason why)
>> >> >
>> >> > Best regards.
>> >> >
>> >> > --
>> >> > Sebastian Wagner
>> >> > https://twitter.com/#!/dead_lock
>> >> > http://www.openmeetings.de
>> >> > http://www.webbase-design.de
>> >> > http://www.wagner-sebastian.com
>> >> > seba.wagner@gmail.com
>> >>
>> >> ---------------------------------------------------------------------
>> >> To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
>> >> For additional commands, e-mail: general-help@incubator.apache.org
>> >>
>> >>
>> >
>> >
>> > --
>> > Sebastian Wagner
>> > https://twitter.com/#!/dead_lock
>> > http://www.openmeetings.de
>> > http://www.webbase-design.de
>> > http://www.wagner-sebastian.com
>> > seba.wagner@gmail.com
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
>> For additional commands, e-mail: general-help@incubator.apache.org
>>
>>
>
>
> --
> Sebastian Wagner
> https://twitter.com/#!/dead_lock
> http://www.openmeetings.de
> http://www.webbase-design.de
> http://www.wagner-sebastian.com
> seba.wagner@gmail.com

---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
For additional commands, e-mail: general-help@incubator.apache.org


Mime
View raw message