Hi, -1 binding jmclean (IPMC) due to issues with the binary release, the source release looks fine.
In the source release, I checked: - incubating in names - DISCLAIMER exists - LICENSE and NOTICE are fine - signatures and hashes are fine - all ASF files have headers - no unexpected binary files - I was unable to compile from source, but that may be my setup I am a little concerned by the user list in the README. How does the PMC vet these companies? You could name the two binary files to give a better idea of what each is rather than using the -1 and -2 postfixes. For the binaries the LICENSE and NOTICE fine of the binaries are incorrect as they fail to mention included 3rd party software. Regarding the inclusion of Category X software. ASF projects cannot distribute software under a Category X license. They can only have it as a dependency if it is optional in the ASF sense of the word, i.e. that the majority of users would not use it and need to install it themselves. Has thd project checked the license of all their dependencies? As it looks like there are a couple of Category X dependencies from a quick glance Elasticsearch and MariaDB Kind Regards, Justin --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org