Thanks for the feedback and review so far! About correct attribution of ASF JARs Do they need a reference in the LICENSE file at all ?
Must the name of the JAR file be _exactly_ mentioned in the LICENSE file? For example: http://svn.apache.org/viewvc/incubator/openmeetings/tags/2.0RC2/LICENSE?view=markup Line: 206 "For GlassFish components / activation.jar" => Do we need to write "activation-jar-1.1.jar" instead of "activation.jar" ? or Line 327 instead of "For SLF4J:" "slf4j-api-1.6.4.jar" Thanks, Sebastian 2012/6/26 sebb <seb...@gmail.com> > On 26 June 2012 12:43, seba.wag...@gmail.com <seba.wag...@gmail.com> > wrote: > > @Sebb: Which of the Libraries do you think are duplicates? > > bcprov > commons-beanutils > commons-codec > commons-collections > ehcache-core > httpclient > httpcore > > etc. > > Not as many as I thought at first glance, but still quite a lot. > > > About License VS Notice file. From what I understood from > > > http://incubator.apache.org/guides/releasemanagement.html#best-practice-license > > > > > > "The NOTICE document is for additional copyright and attribution > statements > > those licenses may require." > > => As all libraries that are shipped are compliant to the Apache License > I > > would have expected that it is sufficient to only add a section to the > > Notice file where the License requires additionall attribution. > > Yes. > > > All 3th party licenses are in the License file. > > This is impossible to check at present, because the file does not list > all the jars it references. > > The only jar references I could find in the LICENSE file are: > > For GlassFish components / activation.jar > For backport-util-concurrent-jar-3.1.jar > For jaxb-api-jar-2.2.4.jar > For jaxen-jar-1.1.1.jar > For mail-jar-1.4.4.jar > For wsdl4j-jar-1.6.2.jar > For jython-2.5.jar > dom4j-1.6.1.jar > postgresql-jar-9.1-901.jdbc4.jar > serp-1.13.1.jar - BSD License > > Yet the following jars are included: > > activation-jar-1.1.jar > backport-util-concurrent-jar-3.1.jar > bcprov-jdk16-145.jar > boot.jar > cglib-jar-2.2.2.jar > com.springsource.javax.xml.stream-1.0.1.jar > com.springsource.net.sf.cglib-2.2.0.jar > com.springsource.org.antlr-3.1.3.jar > com.springsource.org.aopalliance-1.0.0.jar > com.springsource.org.apache.xerces-2.9.1.jar > com.springsource.org.codehaus.groovy-1.7.0.jar > com.springsource.org.mozilla.javascript-1.7.0.R2.jar > com.springsource.org.objectweb.asm-3.2.0.jar > com.springsource.org.objectweb.asm.commons-3.2.0.jar > dom4j-jar-1.6.1.jar > ehcache-core-2.5.0.jar > ical4j-bundle-1.0.3.jar > jasper-6.0.32.jar > jasper-el-6.0.32.jar > jasper-jdt-6.0.29.jar > javaee-api-5.1.2.om.jar > jaxb-api-jar-2.2.4.jar > jaxb-impl-jar-2.2.4.jar > jaxb-xjc-jar-2.2.4.jar > jaxws-tools-jar-2.2.5.jar > jcl-over-slf4j-1.6.4.jar > jruby-1.6.7.2.jar > jsr311-api-jar-1.1.1.jar > jul-to-slf4j-1.6.4.jar > jython-standalone-2.5.2.jar > logback-classic-1.0.3.jar > logback-core-1.0.3.jar > mail-jar-1.4.4.jar > neethi-bundle-3.0.3-SNAPSHOT.jar > org.springframework.aspects-jar-3.1.1.RELEASE.jar > org.springframework.jdbc-jar-3.1.1.RELEASE.jar > org.springframework.orm-jar-3.1.1.RELEASE.jar > org.springframework.transaction-jar-3.1.1.RELEASE.jar > org.springframework.web.servlet-jar-3.1.1.RELEASE.jar > postgresql-jar-9.1-901.jdbc4.jar > quartz-1.8.5.jar > red5-client.jar > red5.jar > serp-jar-1.13.1.jar > servlet-api-jar-2.5.jar > slf4j-api-1.6.4.jar > spring-aop-3.1.1.RELEASE.jar > spring-asm-3.1.1.RELEASE.jar > spring-beans-3.1.1.RELEASE.jar > spring-context-3.1.1.RELEASE.jar > spring-context-support-3.1.1.RELEASE.jar > spring-core-3.1.1.RELEASE.jar > spring-expression-3.1.1.RELEASE.jar > spring-web-3.1.1.RELEASE.jar > stax-api-jar-1.0-2.jar > stax2-api-jar-3.1.1.jar > sysout-over-slf4j-1.0.2.jar > tomcatplugin-1.3.jar > woden-api-jar-1.0-SNAPSHOT.jar > woden-impl-commons-jar-1.0-SNAPSHOT.jar > woden-impl-dom-jar-1.0-SNAPSHOT.jar > woodstox-core-asl-jar-4.1.3.jar > wsdl4j-jar-1.6.2.jar > XmlSchema-bundle-1.4.8-SNAPSHOT.jar > xpp3-jar-1.1.4c.jar > xstream-jar-1.4.2.jar > > Plus the following ASF jars: > > apache-mime4j-core-jar-0.8-SNAPSHOT.jar > axiom-api-bundle-1.2.14-SNAPSHOT.jar > axiom-dom-bundle-1.2.14-SNAPSHOT.jar > axiom-impl-bundle-1.2.14-SNAPSHOT.jar > axis2-jar-1.7.0-SNAPSHOT.jar > axis2-jaxws-jar-1.7.0-SNAPSHOT.jar > axis2-kernel-jar-1.7.0-SNAPSHOT.jar > axis2-metadata-jar-1.7.0-SNAPSHOT.jar > axis2-saaj-jar-1.7.0-SNAPSHOT.jar > axis2-transport-http-bundle-1.7.0-SNAPSHOT.jar > axis2-transport-local-bundle-1.7.0-SNAPSHOT.jar > batik-anim-jar-1.7.jar > batik-awt-util-jar-1.7.jar > batik-bridge-jar-1.7.jar > batik-codec-jar-1.7.jar > batik-css-jar-1.7.jar > batik-dom-jar-1.7.jar > batik-ext-jar-1.7.jar > batik-extension-jar-1.7.jar > batik-gui-util-jar-1.7.jar > batik-gvt-jar-1.7.jar > batik-parser-jar-1.7.jar > batik-rasterizer-jar-1.7.jar > batik-script-jar-1.7.jar > batik-slideshow-jar-1.7.jar > batik-squiggle-jar-1.7.jar > batik-svg-dom-jar-1.7.jar > batik-svggen-jar-1.7.jar > batik-svgpp-jar-1.7.jar > batik-swing-jar-1.7.jar > batik-transcoder-jar-1.7.jar > batik-ttf2svg-jar-1.7.jar > batik-util-jar-1.7.jar > batik-xml-jar-1.7.jar > catalina-6.0.32.jar > commons-beanutils-1.8.3.jar > commons-cli-jar-1.2.jar > commons-codec-1.6.jar > commons-codec-jar-1.6.jar > commons-collections-3.2.1.jar > commons-dbcp-jar-1.4.jar > commons-digester-jar-2.1.jar > commons-fileupload-jar-1.2.2.jar > commons-fileupload-jar-1.2.jar > commons-httpclient-jar-3.1.jar > commons-io-jar-1.4.jar > commons-io-jar-2.1.jar > commons-lang-jar-2.6.jar > commons-lang3-3.1.jar > commons-modeler-2.0.1.jar > commons-pool-1.5.6.jar > commons-transaction-jar-1.2.jar > derby-jar-10.8.2.2.jar > derbyclient-jar-10.8.2.2.jar > fop-jar-1.0.jar > geronimo-activation_1.1_spec-jar-1.0.2.jar > geronimo-annotation_1.0_spec-jar-1.1.jar > geronimo-javamail_1.4_spec-bundle-1.6.jar > geronimo-jaxws_2.2_spec-bundle-1.0.jar > geronimo-jpa_2.0_spec-bundle-1.1.jar > geronimo-jta_1.1_spec-jar-1.1.jar > geronimo-saaj_1.3_spec-jar-1.0.1.jar > geronimo-stax-api_1.0_spec-bundle-1.0.1.jar > geronimo-ws-metadata_2.0_spec-jar-1.1.2.jar > httpclient-4.1.2.jar > httpclient-jar-4.2.jar > httpcore-4.1.3.jar > jaxen-jar-1.1.1.jar > log4j-over-slf4j-1.6.4.jar > mina-core-2.0.4.jar > mina-integration-beans-2.0.4.jar > mina-integration-jmx-2.0.4.jar > openjpa-bundle-2.2.0.jar > openmeetings-2.0.0-SNAPSHOT.jar > openmeetings-screenshare-2.0.0-SNAPSHOT.jar > openmeetings-templates-2.0.0-SNAPSHOT.jar > openmeetings-WebService-2.0.0-SNAPSHOT.jar > tomcat-coyote-6.0.32.jar > tomcat-juli-slf4j-1.5.0.jar > velocity-jar-1.7.jar > velocity-tools-jar-2.0.jar > ws-commons-util-jar-1.0.2.jar > xalan-jar-2.7.0.jar > xml-apis-ext-jar-1.3.04.jar > xml-resolver-jar-1.2.jar > xmlgraphics-commons-jar-1.4.jar > xmlrpc-2.0.1.jar > xmlrpc-client-jar-3.1.3.jar > xmlrpc-common-jar-3.1.3.jar > > [Some of the first list of jars may be ASF, I did not check them all] > > Which jars are part of Glassfish? > > > I don't see any requirements for duplicating the same in the Notice file. > > Only required notices need to go in the license file. > > > Sebastian > > > > 2012/6/26 sebb <seb...@gmail.com> > > > >> On 26 June 2012 10:55, seba.wag...@gmail.com <seba.wag...@gmail.com> > >> wrote: > >> > Hi, > >> > > >> > that is the second Release Candidate (the first Candidate was voted > >> > negative on the openmeetings dev mailing list and did not came that > far) > >> > > >> > There was already a vote at the OpenMetings Dev mailing list. > >> > Results: > >> > PPMC: > >> > aaf +1 (mentor) > >> > solomax +1 > >> > eschwert +1 > >> > alvaro +1 > >> > > >> > Wider Community: 3 times +3 > >> > > >> > Result Vote Thread: > >> > > >> > http://mail-archives.apache.org/mod_mbox/incubator-openmeetings-dev/201206.mbox/%3CCACeMiA9MMjmZCbKKQ9ud64i4OPV2FJ9h6daqoS5q9%3DxOZVad_w%40mail.gmail.com%3E > >> > > >> > The Vote Thread: > >> > > >> > http://mail-archives.apache.org/mod_mbox/incubator-openmeetings-dev/201206.mbox/%3CCACeMiA9Xo7B13C14Uqq8VF%3DTCh3C7PNX6%2BQ4YJvO0cDej0e9vA%40mail.gmail.com%3E > >> > > >> > Main changes are covered in the Readme: > >> > > >> > http://svn.apache.org/repos/asf/incubator/openmeetings/tags/2.0RC2/README > >> > > >> > Full Changelog: > >> > > >> > http://svn.apache.org/repos/asf/incubator/openmeetings/tags/2.0RC2/CHANGELOG > >> > > >> > Release artefacts: > >> > http://people.apache.org/~sebawagner/rc2/ > >> > >> The ASF releases source. > >> Why is there no Zip archive of the source? > >> There a zip and tar archives for the binary builds. > >> > >> The binary build includes a lot of 3rd party jars (about 80?, most of > >> them duplicated). > >> It's not clear if all the licenses for the included jars are included > >> in the LICENSE file. > >> I would expect some of them to require mention in the NOTICE file. > >> > >> The N&L files included in SVN, source and binary archives must relate > >> only to the content which is actually included. > >> This generally means different N&L files for the binary archives > >> (unless the binary is created only from the source). > >> > >> The NOTICE files must only have *required* notices. > >> > >> > Tag: > >> > http://svn.apache.org/repos/asf/incubator/openmeetings/tags/2.0RC2/ > >> > >> The NOTICE file looks wrong; it should not include the full licence > >> for iCal4j which should be in the appropriate LICENSE file. > >> The NOTICE file is for required notices only. > >> > >> As far as I can tell, only the FamFamFam icons are included in the > >> source release (and SVN) so the corresponding N&L files should only > >> refer to them. > >> > >> > PGP release keys (signed using 93A30395): > >> > http://svn.apache.org/repos/asf/incubator/openmeetings/project/KEYS > >> > > >> > Vote will be open for 72 hours. > >> > > >> > [ ] +1 approve > >> > [ ] +0 no opinion > >> > [ ] -1 disapprove (and reason why) > >> > > >> > Best regards. > >> > > >> > -- > >> > Sebastian Wagner > >> > https://twitter.com/#!/dead_lock > >> > http://www.openmeetings.de > >> > http://www.webbase-design.de > >> > http://www.wagner-sebastian.com > >> > seba.wag...@gmail.com > >> > >> --------------------------------------------------------------------- > >> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > >> For additional commands, e-mail: general-h...@incubator.apache.org > >> > >> > > > > > > -- > > Sebastian Wagner > > https://twitter.com/#!/dead_lock > > http://www.openmeetings.de > > http://www.webbase-design.de > > http://www.wagner-sebastian.com > > seba.wag...@gmail.com > > --------------------------------------------------------------------- > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > > -- Sebastian Wagner https://twitter.com/#!/dead_lock http://www.openmeetings.de http://www.webbase-design.de http://www.wagner-sebastian.com seba.wag...@gmail.com
