incubator-general mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Justin Mclean <jus...@classsoftware.com>
Subject Re: [VOTE] Release Apache NetBeans 9.0 Beta (incubating) rc2
Date Tue, 23 Jan 2018 04:20:13 GMT
Hi,

I did this fairly quickly so may of made a mistake or two and may of missed something. A number
of issues here are due to upstream projects putting too much in NOTICE or not including a
NOTICE file in the jar :-( But it also looked like you missing a couple of things from LICENSE
as well and have a few thing listed under the wrong license. I think you may need someone
to go though that list and double check.

Netbeans jars are missing LICENSE and NOTICE file in META_INF. Note that this may vary on
a jar by jar basis.

./extide/ant/etc/ant-bootstrap.jar (and other ant jars)
- see LICENSE at it mentions SAX2 and that may be missing from LICENSE

./harness/antlib/bindex-2.2.jar
- has odd NOTICE that may impact NOTICE file. Looking at it I think the notice bit should
be included and the rest may affect LICENSE.

./ide/modules/com-googlecode-javaewah-JavaEWAH.jar
- has no notice but copyright has been incorrectly add to license you may want to include
that in NOTICE as if it was in a NOTICE file or do nothing.

./ide/modules/com-jcraft-jzlib.jar
- missing from LICENSE

./ide/modules/ext/commons-compress-1.8.1.jar
- I see the public domain “notice” has been copied from the notice file. IMO this should
be in notice but in license but is an upstream issue.

./ide/modules/ext/commons-net-3.6.jar
- probably no need to include this in NOTICE as you’re done

./ide/modules/ext/freemarker-2.3.19.jar
- no need for line (Visigoth Software) in NOTICE having it in license is enough IMO

./ide/modules/ext/ini4j-0.5.1.jar
- missing form NOTICE

./ide/modules/ext/jaxb/jaxb-xjc-2.2.5-2.jar
- contains org.kohsuke.rngom MIT licensed missing from LICENSE

./ide/modules/ext/jaxb/jaxb1-impl-2.2.5-2.jar
- also contains 3rd party code not mentioned in LICENSE

./ide/modules/ext/lucene-core-3.5.0.jar
- thesis where the bulk of you NOTICE info come from and why I thought something was up. Again
it’s an upstream issue just about all of this information should be in LICENSE not NOTICE,
but as the upstream project NOTICE file has this issue including it all is valid.

./ide/modules/ext/resolver-1.2.jar
- missing from NOTICE file

./ide/modules/ext/servlet-2.2.jar 
- this seems to be CDDL not Apache 1.1? Not 100% sure here.

./ide/modules/ext/smackx.jar 
- includes BSD licensed JZlib missing from LICENSE

./ide/modules/ext/webserver.jar
- I assume this is tomcat? if so it has a NOTICE file and should be included in NOTICE. Pity
there no NOTICE file in the jar.

./ide/modules/ext/winp-1.14-patched.jar
- LICENSE is missing this MIT licensed 

./ide/modules/ext/xerces-2.8.0.jar
- has NOTICE that would effect NOTICE file

./ide/modules/org-apache-commons-codec.jar
- has NOTICE that would effect NOTICE file

./ide/modules/org-apache-commons-lang.jar
- probably has NOTICE that would effect NOTICE file

./ide/modules/org-openidex-util.jar
- CDDL licensed missing in LICENSE

java/maven/boot/plexus-classworlds-2.5.2.jar 
- is not Apache licensed

./java/maven/lib/aether-api-1.0.2.v20150114.jar  
./java/maven/lib/aether-connector-basic-1.0.2.v20150114.jar
./java/maven/lib/aether-impl-1.0.2.v20150114.jar
./java/maven/lib/aether-spi-1.0.2.v20150114.jar
./java/maven/lib/aether-transport-wagon-1.0.2.v20150114.jar
./java/maven/lib/aether-util-1.0.2.v20150114.jar
- are EPL license not Apache licensed

./java/maven/lib/commons-lang3-3.4.jar
- probably has NOTICE that would effect NOTICE file

java/maven/lib/jsoup-1.7.2.jar     
- is MIT licensed not Apache licensed

java/maven/lib/jsr250-api-1.0.jar
- is CDDL licensed not Apache licensed

./java/maven/lib/org.eclipse.sisu.inject-0.3.2.jar
./java/maven/lib/org.eclipse.sisu.plexus-0.3.2.jar
- are EPL licensed not Apache licensed

./java/maven/lib/plexus-cipher-1.7.jar
- has a NOTICE file that would effect NOTICE

./java/maven/lib/slf4j-simple-1.7.5.jar
./java/maven/lib/slf4j-api-1.7.5.jar
- are MIT licensed not Apache licensed

./java/modules/ext/cglib-2.2.jar
- has an incorrect NOTICE file (copy/paste error I assume) and if fixed may effect the NOTICE
file

java/modules/ext/jaxws22/FastInfoset.jar  
- is under an Apache license not a CDDL one

./java/modules/ext/jaxws22/stax2-api.jar
- is under a BSD license not a CDDL one

./java/modules/ext/jaxws22/woodstox-core-asl.jar
- is under an Apache 2.0 license not a CDDL one and has a NOTICE file that effect NOTICE (although
none of it’s content mean anything IMO)

./java/modules/ext/maven/indexer-core-6.0-SNAPSHOT-patched.jar
- is may not be possible to release with a snapshot jar I not sure re that. It as ASF project
and the code has not been released by it’s PMC.

./java/modules/ext/maven/jdom-1.0.jar
- is BSD Style rather than Apache licensed

./java/modules/ext/spring-3.0/spring-context-3.2.7.RELEASE.jar
./java/modules/ext/spring-3.0/spring-context-support-3.2.7.RELEASE.jar
(and other spring jars)
- has a NOTICE file that would effect the NOTICE file

./platform/modules/ext/org.apache.felix.main-4.2.1.jar
- has a NOTICE file that would effect the NOTICE file

platform/modules/ext/org.eclipse.osgi_3.9.1.v20140110-1610.jar 
- I’m not sure if the OSGi license is compatible with the Apache one. It’s not listed
in Category A/B/X you may need to ask on legal discuss. It may be under EPL but not 100% sure.

./platform/modules/ext/testng-6.8.1-dist.jar
- contains apache licensed jcommander and MIT licensed jquery
- jcommander has a notice that would effect NOTICE

./platform/modules/net-java-html-boot-fx.jar
./platform/modules/net-java-html-boot-script.jar
./platform/modules/net-java-html-boot.jar
./platform/modules/net-java-html-geo.jar
./platform/modules/net-java-html-sound.jar
./platform/modules/net-java-html.jar
- have NOTICE files that would effect the NOTICE file
- a couple have DISCLAIMER is that’s right?
- are the copyright lines in NOTICE correct here?

./platform/modules/org-openide-compat.jar
./platform/modules/org-openide-dialogs.jar
(and a few others similarly named)
- are missing from LICENSE

Thanks,
Justin






---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
For additional commands, e-mail: general-help@incubator.apache.org


Mime
View raw message