Hi, You may not be aware that I have voted on 1,000+ releases and helped refine and improve ASF policy on this over the years. I also hold a number of other relevant ASF roles.
> There are two main issues with the presented arguments: > > 1. This isn't a bundled dependency, it is an attribution of a code snippet > taken from another project It applies to any 3rd party code included in a release. > 2. There is nothing in the NOTICE that would qualify as "relevant portions > [to be] bubbled up" The relevant portions in the NOTICE files are the project names and the copyright dates. For Apache Thrift that would be: Apache Thrift Copyright (C) 2006 - 2019, The Apache Software Foundation For Apache Hive that would be: Apache Hive Copyright 2008-2023 The Apache Software Foundation Kind Regards, Justin