Apache RAT helps a lot - at least to find files which hasn't got a license header - but also manual grep for "Copyright", "License", "GPL" etc. Some of these will require you to update your LICENSE or NOTICE files.
Then you would have to go through binary files and check their origin, e.g. PNGs for toolbar buttons. A second item is to check the dependencies your code depends on, here the Maven dependency plugin and Maven License pluginS (there are two) will help you somewhat. Usually there are some <dependencies> which didn't bother to put a <license> to their pom.xml, those would have to be checked manually. If you do binary releases that include third-party libraries, then that release would need it's own augmented LICENSE/NOTICE to cover the libs. If it's a larger project, then to keep track of this for a podling it might be good to do a wiki page or two and raise Jira issues to track those files you are not quite sure of. --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
