On 26 June 2012 12:43, seba.wag...@gmail.com <seba.wag...@gmail.com> wrote: > @Sebb: Which of the Libraries do you think are duplicates?
bcprov commons-beanutils commons-codec commons-collections ehcache-core httpclient httpcore etc. Not as many as I thought at first glance, but still quite a lot. > About License VS Notice file. From what I understood from > http://incubator.apache.org/guides/releasemanagement.html#best-practice-license > > > "The NOTICE document is for additional copyright and attribution statements > those licenses may require." > => As all libraries that are shipped are compliant to the Apache License I > would have expected that it is sufficient to only add a section to the > Notice file where the License requires additionall attribution. Yes. > All 3th party licenses are in the License file. This is impossible to check at present, because the file does not list all the jars it references. The only jar references I could find in the LICENSE file are: For GlassFish components / activation.jar For backport-util-concurrent-jar-3.1.jar For jaxb-api-jar-2.2.4.jar For jaxen-jar-1.1.1.jar For mail-jar-1.4.4.jar For wsdl4j-jar-1.6.2.jar For jython-2.5.jar dom4j-1.6.1.jar postgresql-jar-9.1-901.jdbc4.jar serp-1.13.1.jar - BSD License Yet the following jars are included: activation-jar-1.1.jar backport-util-concurrent-jar-3.1.jar bcprov-jdk16-145.jar boot.jar cglib-jar-2.2.2.jar com.springsource.javax.xml.stream-1.0.1.jar com.springsource.net.sf.cglib-2.2.0.jar com.springsource.org.antlr-3.1.3.jar com.springsource.org.aopalliance-1.0.0.jar com.springsource.org.apache.xerces-2.9.1.jar com.springsource.org.codehaus.groovy-1.7.0.jar com.springsource.org.mozilla.javascript-1.7.0.R2.jar com.springsource.org.objectweb.asm-3.2.0.jar com.springsource.org.objectweb.asm.commons-3.2.0.jar dom4j-jar-1.6.1.jar ehcache-core-2.5.0.jar ical4j-bundle-1.0.3.jar jasper-6.0.32.jar jasper-el-6.0.32.jar jasper-jdt-6.0.29.jar javaee-api-5.1.2.om.jar jaxb-api-jar-2.2.4.jar jaxb-impl-jar-2.2.4.jar jaxb-xjc-jar-2.2.4.jar jaxws-tools-jar-2.2.5.jar jcl-over-slf4j-1.6.4.jar jruby-1.6.7.2.jar jsr311-api-jar-1.1.1.jar jul-to-slf4j-1.6.4.jar jython-standalone-2.5.2.jar logback-classic-1.0.3.jar logback-core-1.0.3.jar mail-jar-1.4.4.jar neethi-bundle-3.0.3-SNAPSHOT.jar org.springframework.aspects-jar-3.1.1.RELEASE.jar org.springframework.jdbc-jar-3.1.1.RELEASE.jar org.springframework.orm-jar-3.1.1.RELEASE.jar org.springframework.transaction-jar-3.1.1.RELEASE.jar org.springframework.web.servlet-jar-3.1.1.RELEASE.jar postgresql-jar-9.1-901.jdbc4.jar quartz-1.8.5.jar red5-client.jar red5.jar serp-jar-1.13.1.jar servlet-api-jar-2.5.jar slf4j-api-1.6.4.jar spring-aop-3.1.1.RELEASE.jar spring-asm-3.1.1.RELEASE.jar spring-beans-3.1.1.RELEASE.jar spring-context-3.1.1.RELEASE.jar spring-context-support-3.1.1.RELEASE.jar spring-core-3.1.1.RELEASE.jar spring-expression-3.1.1.RELEASE.jar spring-web-3.1.1.RELEASE.jar stax-api-jar-1.0-2.jar stax2-api-jar-3.1.1.jar sysout-over-slf4j-1.0.2.jar tomcatplugin-1.3.jar woden-api-jar-1.0-SNAPSHOT.jar woden-impl-commons-jar-1.0-SNAPSHOT.jar woden-impl-dom-jar-1.0-SNAPSHOT.jar woodstox-core-asl-jar-4.1.3.jar wsdl4j-jar-1.6.2.jar XmlSchema-bundle-1.4.8-SNAPSHOT.jar xpp3-jar-1.1.4c.jar xstream-jar-1.4.2.jar Plus the following ASF jars: apache-mime4j-core-jar-0.8-SNAPSHOT.jar axiom-api-bundle-1.2.14-SNAPSHOT.jar axiom-dom-bundle-1.2.14-SNAPSHOT.jar axiom-impl-bundle-1.2.14-SNAPSHOT.jar axis2-jar-1.7.0-SNAPSHOT.jar axis2-jaxws-jar-1.7.0-SNAPSHOT.jar axis2-kernel-jar-1.7.0-SNAPSHOT.jar axis2-metadata-jar-1.7.0-SNAPSHOT.jar axis2-saaj-jar-1.7.0-SNAPSHOT.jar axis2-transport-http-bundle-1.7.0-SNAPSHOT.jar axis2-transport-local-bundle-1.7.0-SNAPSHOT.jar batik-anim-jar-1.7.jar batik-awt-util-jar-1.7.jar batik-bridge-jar-1.7.jar batik-codec-jar-1.7.jar batik-css-jar-1.7.jar batik-dom-jar-1.7.jar batik-ext-jar-1.7.jar batik-extension-jar-1.7.jar batik-gui-util-jar-1.7.jar batik-gvt-jar-1.7.jar batik-parser-jar-1.7.jar batik-rasterizer-jar-1.7.jar batik-script-jar-1.7.jar batik-slideshow-jar-1.7.jar batik-squiggle-jar-1.7.jar batik-svg-dom-jar-1.7.jar batik-svggen-jar-1.7.jar batik-svgpp-jar-1.7.jar batik-swing-jar-1.7.jar batik-transcoder-jar-1.7.jar batik-ttf2svg-jar-1.7.jar batik-util-jar-1.7.jar batik-xml-jar-1.7.jar catalina-6.0.32.jar commons-beanutils-1.8.3.jar commons-cli-jar-1.2.jar commons-codec-1.6.jar commons-codec-jar-1.6.jar commons-collections-3.2.1.jar commons-dbcp-jar-1.4.jar commons-digester-jar-2.1.jar commons-fileupload-jar-1.2.2.jar commons-fileupload-jar-1.2.jar commons-httpclient-jar-3.1.jar commons-io-jar-1.4.jar commons-io-jar-2.1.jar commons-lang-jar-2.6.jar commons-lang3-3.1.jar commons-modeler-2.0.1.jar commons-pool-1.5.6.jar commons-transaction-jar-1.2.jar derby-jar-10.8.2.2.jar derbyclient-jar-10.8.2.2.jar fop-jar-1.0.jar geronimo-activation_1.1_spec-jar-1.0.2.jar geronimo-annotation_1.0_spec-jar-1.1.jar geronimo-javamail_1.4_spec-bundle-1.6.jar geronimo-jaxws_2.2_spec-bundle-1.0.jar geronimo-jpa_2.0_spec-bundle-1.1.jar geronimo-jta_1.1_spec-jar-1.1.jar geronimo-saaj_1.3_spec-jar-1.0.1.jar geronimo-stax-api_1.0_spec-bundle-1.0.1.jar geronimo-ws-metadata_2.0_spec-jar-1.1.2.jar httpclient-4.1.2.jar httpclient-jar-4.2.jar httpcore-4.1.3.jar jaxen-jar-1.1.1.jar log4j-over-slf4j-1.6.4.jar mina-core-2.0.4.jar mina-integration-beans-2.0.4.jar mina-integration-jmx-2.0.4.jar openjpa-bundle-2.2.0.jar openmeetings-2.0.0-SNAPSHOT.jar openmeetings-screenshare-2.0.0-SNAPSHOT.jar openmeetings-templates-2.0.0-SNAPSHOT.jar openmeetings-WebService-2.0.0-SNAPSHOT.jar tomcat-coyote-6.0.32.jar tomcat-juli-slf4j-1.5.0.jar velocity-jar-1.7.jar velocity-tools-jar-2.0.jar ws-commons-util-jar-1.0.2.jar xalan-jar-2.7.0.jar xml-apis-ext-jar-1.3.04.jar xml-resolver-jar-1.2.jar xmlgraphics-commons-jar-1.4.jar xmlrpc-2.0.1.jar xmlrpc-client-jar-3.1.3.jar xmlrpc-common-jar-3.1.3.jar [Some of the first list of jars may be ASF, I did not check them all] Which jars are part of Glassfish? > I don't see any requirements for duplicating the same in the Notice file. Only required notices need to go in the license file. > Sebastian > > 2012/6/26 sebb <seb...@gmail.com> > >> On 26 June 2012 10:55, seba.wag...@gmail.com <seba.wag...@gmail.com> >> wrote: >> > Hi, >> > >> > that is the second Release Candidate (the first Candidate was voted >> > negative on the openmeetings dev mailing list and did not came that far) >> > >> > There was already a vote at the OpenMetings Dev mailing list. >> > Results: >> > PPMC: >> > aaf +1 (mentor) >> > solomax +1 >> > eschwert +1 >> > alvaro +1 >> > >> > Wider Community: 3 times +3 >> > >> > Result Vote Thread: >> > >> http://mail-archives.apache.org/mod_mbox/incubator-openmeetings-dev/201206.mbox/%3CCACeMiA9MMjmZCbKKQ9ud64i4OPV2FJ9h6daqoS5q9%3DxOZVad_w%40mail.gmail.com%3E >> > >> > The Vote Thread: >> > >> http://mail-archives.apache.org/mod_mbox/incubator-openmeetings-dev/201206.mbox/%3CCACeMiA9Xo7B13C14Uqq8VF%3DTCh3C7PNX6%2BQ4YJvO0cDej0e9vA%40mail.gmail.com%3E >> > >> > Main changes are covered in the Readme: >> > >> http://svn.apache.org/repos/asf/incubator/openmeetings/tags/2.0RC2/README >> > >> > Full Changelog: >> > >> http://svn.apache.org/repos/asf/incubator/openmeetings/tags/2.0RC2/CHANGELOG >> > >> > Release artefacts: >> > http://people.apache.org/~sebawagner/rc2/ >> >> The ASF releases source. >> Why is there no Zip archive of the source? >> There a zip and tar archives for the binary builds. >> >> The binary build includes a lot of 3rd party jars (about 80?, most of >> them duplicated). >> It's not clear if all the licenses for the included jars are included >> in the LICENSE file. >> I would expect some of them to require mention in the NOTICE file. >> >> The N&L files included in SVN, source and binary archives must relate >> only to the content which is actually included. >> This generally means different N&L files for the binary archives >> (unless the binary is created only from the source). >> >> The NOTICE files must only have *required* notices. >> >> > Tag: >> > http://svn.apache.org/repos/asf/incubator/openmeetings/tags/2.0RC2/ >> >> The NOTICE file looks wrong; it should not include the full licence >> for iCal4j which should be in the appropriate LICENSE file. >> The NOTICE file is for required notices only. >> >> As far as I can tell, only the FamFamFam icons are included in the >> source release (and SVN) so the corresponding N&L files should only >> refer to them. >> >> > PGP release keys (signed using 93A30395): >> > http://svn.apache.org/repos/asf/incubator/openmeetings/project/KEYS >> > >> > Vote will be open for 72 hours. >> > >> > [ ] +1 approve >> > [ ] +0 no opinion >> > [ ] -1 disapprove (and reason why) >> > >> > Best regards. >> > >> > -- >> > Sebastian Wagner >> > https://twitter.com/#!/dead_lock >> > http://www.openmeetings.de >> > http://www.webbase-design.de >> > http://www.wagner-sebastian.com >> > seba.wag...@gmail.com >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org >> For additional commands, e-mail: general-h...@incubator.apache.org >> >> > > > -- > Sebastian Wagner > https://twitter.com/#!/dead_lock > http://www.openmeetings.de > http://www.webbase-design.de > http://www.wagner-sebastian.com > seba.wag...@gmail.com --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
