[
https://issues.apache.org/jira/browse/SOLR-15929?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17897094#comment-17897094
]
Christos Malliaridis commented on SOLR-15929:
---------------------------------------------
I am not sure what the goal of the spreadsheet would be, could you elaborate?
This sounds like ahuge maintenance effort if it is not a one-time thing.
I believe the current tooling notifies about files that are no longer needed,
if that's what you mean. What I also saw is that we can merge a few LICENSE and
NOTICE files together that coming from the same repository, like all the netty
dependencies can share the same netty-LICENSE.txt and netty-NOTICE.txt file.
I'd love to see a variant-specific output. About the SBOM: Dawid Weiss
mentioned that in [a
thread|https://lists.apache.org/thread/7pth7286zmq8kcc18gx8yg62y8ktbsgf]. We
may look into it in more detail if it is worth the effort and maintenance cost.
What I am also worried about is modules that have the same artifact name but
different group name. The current naming convention would cause a naming
conflict, resulting in one LICENSE and NOTICE file for two completely different
dependencies. I am not sure if this is "critical" though.
> Clean up NOTICE and LICENSE files for Solr
> ------------------------------------------
>
> Key: SOLR-15929
> URL: https://issues.apache.org/jira/browse/SOLR-15929
> Project: Solr
> Issue Type: Improvement
> Reporter: Jan Høydahl
> Priority: Major
>
> Spinoff from SOLR-15862 and SOLR-2406:
> We need a total cleanup of both these files
> * Move lots of (C) notices from NOTICE to LICENSE file
> * Cross-check that we list all dependencies, and that removed deps (such as
> for DIH etc) are removed from NOTICE/LICENSE
> I wonder if
> [https://github.com/apache/solr/blob/main/solr/licenses/README.committers.txt]
> should also be relocated to either `dev-docs/` or `help/` to make it easier
> to find. It is hard to get the license/notice stuff right, so we need a good
> guide for committers!
> See [https://infra.apache.org/licensing-howto.html] for the requirements. PS:
> Any preference whether we should rename the files without {{.txt}} suffix?
> Also, our source and binary distributions are quite different, and would
> ideally have different LICENSE and NOTICE files compared to the binary
> distro. I think the Apache Whisker tool could potientailly help with this
> [https://creadur.apache.org/whisker/index.html] but have not looked deeply.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@solr.apache.org
For additional commands, e-mail: issues-h...@solr.apache.org
