On Wed, Mar 14, 2012 at 11:23 PM, Marvin Humphrey <mar...@rectangular.com> wrote: > 2012/3/13 Jürgen Schmidt <jogischm...@googlemail.com>: >> we have prepared a new developer snapshot on the way to our first release. > > Congratulations on your progress so far! >
And thanks for reviewing out dev snapshot build. >> We would very much appreciate some early feedback if possible. > > I can do a little bit of surface level checking. Ordinarily, I would probe > deeper into source code provenance, but in this case I will have to trust the > AOO PPMC and the AOO Mentors that proper diligence has been exercised. > We've tried to publicly document what we did to clean up the code on our wiki: https://cwiki.apache.org/confluence/display/OOOUSERS/IP_Clearance By "clean up" we mean that OpenOffice.org consisted of code that we received under SGA, but it also had some dependencies on 3rd party open source libraries. We've gone through each one, and removed the ones that had incompatible licenses. In almost every case we were fortunate to find a good substitute with a compatible license. > The PGP signature and the checksums on the tar.gz archive all looked good. > FWIW, there seemed to be extraneous .txt extensions attached to aoo.KEYS and > some of the checksum files, and the format of the checksum files will not work > with "md5sum --check" and "shasum --check" -- but that's all nitpicking. > Good to know. > I was a little surprised that the LICENSE file contained only the ALv2, and > that NOTICE points at the websites for dependencies and their licensing. > Ordinarily, I would expect to see entire verbatim licenses for all bundled > dependencies in LICENSE. > OK. > The README starts with a UTF-8-encoded BOM. Just FYI. > > I don't see the Incubation disclaimer in either a dedicated DISCLAIMER file or > the README. Also, the word "incubating" is not in the archive filename. > OK. > Hope this helps as a start at least, > Yes, thanks. -Rob > Marvin Humphrey > > marvin@smokey:~/Desktop $ gpg --verify aoo-3.4-src.tar.gz.asc > gpg: Signature made Tue Mar 13 00:52:11 2012 PDT using RSA key ID 51B5FDE8 > gpg: Good signature from "Juergen Schnmidt <j...@apache.org>" > gpg: aka "Juergen Schmidt <jogischm...@googlemail.com>" > gpg: aka "Juergen Schmidt <jogischm...@gmail.com>" > gpg: WARNING: This key is not certified with a trusted signature! > gpg: There is no indication that the signature belongs to the owner. > Primary key fingerprint: D09F B15F 1A24 768D DF1F A29C CFEE F316 51B5 FDE8 > marvin@smokey:~/Desktop $ gpg --print-md MD5 aoo-3.4-src.tar.gz > aoo-3.4-src.tar.gz: 9B 5B 55 09 68 DE 7A C2 54 DC 6C E2 3C 32 5F 17 > marvin@smokey:~/Desktop $ cat aoo-3.4-src.tar.gz.md5.txt > aoo-3.4-src.tar.gz: 9B 5B 55 09 68 DE 7A C2 54 DC 6C E2 3C 32 5F 17 > marvin@smokey:~/Desktop $ gpg --print-md SHA1 aoo-3.4-src.tar.gz > aoo-3.4-src.tar.gz: 83B7 F124 F967 4D5E 3468 24CC D245 2DEB 9171 6689 > marvin@smokey:~/Desktop $ cat aoo-3.4-src.tar.gz.sha1.txt > aoo-3.4-src.tar.gz: 83B7 F124 F967 4D5E 3468 24CC D245 2DEB 9171 6689 > marvin@smokey:~/Desktop $ gpg --print-md SHA512 aoo-3.4-src.tar.gz > aoo-3.4-src.tar.gz: 3898D4EC 92917120 87A016F8 075E3B7B B87E44B0 FED22E3B > CF5D8850 90CA2713 E9F98A6E 51522AEF 50DC6F30 F36860C4 > C62161B5 F16FE64B 5CD144FF ED043D33 > marvin@smokey:~/Desktop $ cat aoo-3.4-src.tar.gz.sha512 > aoo-3.4-src.tar.gz: 3898D4EC 92917120 87A016F8 075E3B7B B87E44B0 FED22E3B > CF5D8850 90CA2713 E9F98A6E 51522AEF 50DC6F30 F36860C4 > C62161B5 F16FE64B 5CD144FF ED043D33 > > --------------------------------------------------------------------- > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
