Return-Path: X-Original-To: apmail-incubator-jena-dev-archive@minotaur.apache.org Delivered-To: apmail-incubator-jena-dev-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id DE5B17EF9 for ; Wed, 7 Dec 2011 10:19:51 +0000 (UTC) Received: (qmail 58942 invoked by uid 500); 7 Dec 2011 10:19:51 -0000 Delivered-To: apmail-incubator-jena-dev-archive@incubator.apache.org Received: (qmail 58901 invoked by uid 500); 7 Dec 2011 10:19:51 -0000 Mailing-List: contact jena-dev-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: jena-dev@incubator.apache.org Delivered-To: mailing list jena-dev@incubator.apache.org Received: (qmail 58893 invoked by uid 99); 7 Dec 2011 10:19:51 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 07 Dec 2011 10:19:51 +0000 X-ASF-Spam-Status: No, hits=-0.7 required=5.0 tests=RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of andy.seaborne.apache@gmail.com designates 74.125.83.47 as permitted sender) Received: from [74.125.83.47] (HELO mail-ee0-f47.google.com) (74.125.83.47) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 07 Dec 2011 10:19:44 +0000 Received: by eekb15 with SMTP id b15so262271eek.6 for ; Wed, 07 Dec 2011 02:19:24 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=sender:message-id:date:from:user-agent:mime-version:to:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=+5d3PruK2xFpz7dIb6tm3JvbrWV9keO0B5/rIaaQDg4=; b=HjBSoy/Oh+ZPqB3Bp9haCnK0rrUhQD6ldh+8NiOvqLjPO8kd744q9R3wPGnlN1e8K0 pJy2NQlGwRbLWYFzx8zEN5WMHGVL1A5Fpm/o8CV//Q1qXxPuQ8s5dav/32QCkB0PSZrz PyIPIOZxLnI/wkt4Ih2El5dIZkJkg/aOUX3Zw= Received: by 10.14.9.203 with SMTP id 51mr3411115eet.41.1323253164030; Wed, 07 Dec 2011 02:19:24 -0800 (PST) Received: from [192.168.1.33] (82-69-1-248.dsl.in-addr.zen.co.uk. [82.69.1.248]) by mx.google.com with ESMTPS id fg16sm1592602bkb.16.2011.12.07.02.19.22 (version=SSLv3 cipher=OTHER); Wed, 07 Dec 2011 02:19:23 -0800 (PST) Sender: Andy Seaborne Message-ID: <4EDF3DA9.9020402@apache.org> Date: Wed, 07 Dec 2011 10:19:21 +0000 From: Andy Seaborne User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:8.0) Gecko/20111124 Thunderbird/8.0 MIME-Version: 1.0 To: jena-dev@incubator.apache.org Subject: Re: Pre-release trial run. References: <4ED65237.1040407@apache.org> <4ED77CFD.2090308@apache.org> <4ED8A964.9010701@apache.org> <4ED8C884.2090108@epimorphics.com> <4ED8E0A5.2000108@apache.org> <4EDBAB43.9020201@apache.org> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org On 07/12/11 08:33, Leo Simons wrote: > On Wed, Dec 7, 2011 at 1:24 AM, Benson Margulies wrote: >> On Tue, Dec 6, 2011 at 7:03 PM, Leo Simons wrote: >>> More legal stuff...on reproducing licenses and notices.... >> >> Since The Official Release is the source, and the binary releases are >> 'just for convenience', do we really need to apply all the same >> fine-tooth-comb treatment? > > Of course! A lot of open source licensing is about "things you have to > do when you (re)distribute". > > In a binary release with libraries inside, apache is (re)distributing > those libraries, so those license terms kick in, and we simply have to > follow them. And a lot of the obligation that comes with those > licenses is about reproducing licenses and notices. > > The only alternative is not to redistribute those libraries, which > puts the burden of figuring out the legal mess on the user (and so > makes the binary "less convenient" for them!). > > Finally, do remember that _normally_ you would update the binary > release LICENSE and NOTICE when you updated its build scripts to > include another dependency, so this painful legal cleanup/scrubbing > should really be a once-only event. I'm more than happy to try to get the details right - I'm not aiming to merely meet the minimum necessary requirements but to do the "right thing" now. We're learning. Jena has historically shipped with dependencies, originally (10 years ago) because that was the only practical way to get the stuff to the users. The simple act of putting the right versions of the software into the users hands was been quite important. Getting the classpath set correctly is another matter ... Nowadays, because public maven, or even maven, isn't for everyone, it's still useful to deliver the bundle. I guess all of us use maven (or etc) dependency management but it's a real barrier for people starting out with Java, semantic web all at the same time, and not just students doing projects. Ditto people who use the command line tools. So I appreciate the fine tooth combing. At the moment I'm on the receiving end of formal public comments on specs as SPARQL goes through the later stages of W3C process, and the comments there are not necessarily as supportive as here. Andy