Thank you for your review and reply. The jar files in the maven repository are packaged in the same way as the jars in the binary tarball. I will deal with the jar package issues in the maven repository together. At the same time, I will check similar issues of all jar files. I will not put the jars of third-party dependencies into the released jar packages in an aggregated manner.
By the way, I will deal with the LGPL license issue next. If I only rely on the jar based on the LGPL license in the pom file of the project, and do not directly embed its class files in the project, such as MariaDB dependency is only used as a database driver reference, I understand that this is allowed to be released. Are there any other problems in this situation? If there are other problems, please let me know and I will solve them together. Looking forward to your answer and reply, thank you for your attention and answer. Sincerely regards, Xihui Gao On 2025/01/22 22:48:20 PJ Fanning wrote: > You seem to have JNA classes in log-stream-2.2.5-incubating.jar and > those are LGPL as far as I can see. Putting LGPL licensed classes in > an ASF jar is not allowed. > > https://repo1.maven.org/maven2/com/sun/jna/jna/3.0.9/jna-3.0.9.pom > > Also MariaDB is LGPL. > > https://repo1.maven.org/maven2/org/mariadb/jdbc/mariadb-java-client/3.5.1/mariadb-java-client-3.5.1.pom > > I may be finding the wrong licenses but it does look like we have some > very problematic classes getting included in the OzHera jars. > > There may be more issues. > > On Wed, 22 Jan 2025 at 02:55, Xihui Gao <gaoxi...@apache.org> wrote: > > > > Thank you for your suggestion. This is a very important guide for me to > > re-release the version. I will reconsider the form of binary tarball > > release and provide a complete list of licenses of third-party dependencies > > in LICENSE and NOTICE to make it as convenient as possible for everyone to > > review and users to use. Thank you again for your reminder. > > > > Sincerely regards, > > Xihui Gao > > > > On 2025/01/21 16:13:08 PJ Fanning wrote: > > > Thanks Xihui. > > > > > > Would it be possible to stop creating giant jars that splice together > > > multiple jars? It is much easier for reviews and users if the original > > > jars > > > appear in the tar.gz. Each jar can be independently checked for its > > > license. > > > The tar.gz will still need a LICENSE and NOTICE that lists the licenses of > > > all the 3rd party libs whether they appear in their original form or if > > > you > > > aggregated them into giant jars. > > > > > > > > > On Tue 21 Jan 2025, 04:10 Xihui Gao, <gaoxi...@apache.org> wrote: > > > > > > > Thank you for your review and guidance. I will correct the description > > > > of > > > > LICENSE and NOTICE and repackage and publish the artifact. > > > > > > > > Sincerely regards, > > > > Xihui Gao > > > > > > > > On 2025/01/20 17:27:33 PJ Fanning wrote: > > > > > -1 binding fanningpj IPMC > > > > > > > > > > I looked at apache-ozhera-2.2.5-incubating-bin-1.tar.gz and it does > > > > > not > > > > seem to have a LICENSE and NOTICE that describes the full contents of > > > > the > > > > tar.gz. > > > > > > > > > > I opened up dist/log-stream/log-stream-2.2.5-incubating.jar and this > > > > > is > > > > a giant jar with classes from numerous 3rd party (non ASF) projects and > > > > again the jar does not seem to contain a META-INF/LICENSE (and NOTICE) > > > > that > > > > describes the contents of the jar. > > > > > > > > > > In particular, there is a META-INF/LGPL2.1 file that indicates that > > > > > this > > > > log-stream-2.2.5-incubating.jar may contain LGPL licensed classes and > > > > this > > > > is not allowed in an ASF product. > > > > > > > > > > > > > > > > > > > > On 2025/01/14 12:07:50 石榴树 wrote: > > > > > > Hello Incubator Community, > > > > > > > > > > > > > > > > > > We are calling for votes to release Apache OzHera (Incubating) > > > > > > version > > > > 2.2.5-incubating release candidate rc4. > > > > > > > > > > > > > > > > > > Apache OzHera(Incubating) is an Application Performance Monitoring > > > > (APM) platform designed for the cloud-native era. It revolves around > > > > applications and integrates capabilities such as metric monitoring, > > > > distributed tracing, logging, and alerting. > > > > > > > > > > > > > > > > > > The Apache OzHera(Incubating) community has voted and approved > > > > the release of Apache OzHera (Incubating) 2.2.5-incubating-rc4. > > > > > > > > > > > > > > > > > > We cordially invite Incubator PMC members to review and vote for > > > > > > this > > > > release. > > > > > > > > > > > > > > > > > > Apache OzHera(Incubating) community voting thread: > > > > > > https://lists.apache.org/thread/hwctym3cs8yyrzdkt9blr1n4ln6qzv4w > > > > > > > > > > > > > > > > > > Voting results thread: > > > > > > https://lists.apache.org/thread/84vc2qw0vmq97m9jr0t4fp923of9lt0k > > > > > > > > > > > > > > > > > > The release candidates: > > > > > > > > > > https://dist.apache.org/repos/dist/dev/incubator/ozhera/2.2.5-incubating-rc4/ > > > > > > > > > > > > > > > > > > Git tag for the release: > > > > > > https://github.com/apache/ozhera/releases/tag/v2.2.5-incubating-rc4 > > > > > > > > > > > > > > > > > > gpg KEYS file here: > > > > > > https://downloads.apache.org/incubator/ozhera/KEYS > > > > > > gpg uid please select: gaoxihui<gaoxi...@apache.org> > > > > > > > > > > > > > > > > > > Please download, verify, and test. > > > > > > Friendly reminder: When you build the project, please ignore the > > > > tests, like this: > > > > > > mvn clean install -Papache-release -Dmaven.test.skip=true > > > > > > > > > > > > > > > > > > Voting will be open for at least 72 hours or until the required > > > > > > number > > > > of votes is reached. Please vote as follows: > > > > > > [ ] +1 for approval > > > > > > [ ] +0 for no opinion > > > > > > [ ] -1 for objection with reason > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Thanks, > > > > > > On behalf of Apache OzHera (Incubating) community > > > > > > > > > > --------------------------------------------------------------------- > > > > > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > > > > > For additional commands, e-mail: general-h...@incubator.apache.org > > > > > > > > > > > > > > > > > > --------------------------------------------------------------------- > > > > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > > > > For additional commands, e-mail: general-h...@incubator.apache.org > > > > > > > > > > > > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > > For additional commands, e-mail: general-h...@incubator.apache.org > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > > --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
