Re: [OT] POM, licenses and dependency trees

2009-03-05 Thread Wes Wannemacher
On Thu, Mar 5, 2009 at 10:26 AM, stanlick wrote: > > Thanks Wes -- > > First off, you are preaching to the choir bro.  My question stems from the > fact we have a small army of lawyers who stake their careers on looking in > these rabbit holes and they are now asking me to help them dig!  Telling

Re: [OT] POM, licenses and dependency trees

2009-03-05 Thread stanlick
Thanks Wes -- First off, you are preaching to the choir bro. My question stems from the fact we have a small army of lawyers who stake their careers on looking in these rabbit holes and they are now asking me to help them dig! Telling them not to concern themselves with this and that archive f

Re: [OT] POM, licenses and dependency trees

2009-03-04 Thread Wes Wannemacher
On Tue, Mar 3, 2009 at 11:20 PM, stanlick wrote: > > Java != C? > > I realize the strength and duration of dependencies varies, and I understand > the issues concerning use vs. redistribution.  This notwithstanding, I am > looking to satisfy the legal team and this requires collecting the sum of >

Re: [OT] POM, licenses and dependency trees

2009-03-04 Thread Antonio Petrelli
FYI here are the Apache guidelines about licensing of Apache projects: http://www.apache.org/legal/3party.html Ciao Antonio - To unsubscribe, e-mail: user-unsubscr...@struts.apache.org For additional commands, e-mail: user-h...@s

Re: [OT] POM, licenses and dependency trees

2009-03-03 Thread stanlick
Java != C? I realize the strength and duration of dependencies varies, and I understand the issues concerning use vs. redistribution. This notwithstanding, I am looking to satisfy the legal team and this requires collecting the sum of licenses from all the dependent archives before anything larg

Re: [OT] POM, licenses and dependency trees

2009-03-03 Thread Wes Wannemacher
On Tuesday 03 March 2009 15:40:43 stanlick wrote: > If you look at the POM for Struts 2.1.6 there are many more dependencies > than what show up running > dependency:resolve. I verifies the default for scope because several of > the dependencies are "test." It appears the default is all scopes,

Re: [OT] POM, licenses and dependency trees

2009-03-03 Thread stanlick
If you look at the POM for Struts 2.1.6 there are many more dependencies than what show up running dependency:resolve. I verifies the default for scope because several of the dependencies are "test." It appears the default is all scopes, so I am wondering why I don't see them all when I run dep

Re: [OT] POM, licenses and dependency trees

2009-03-03 Thread Musachy Barroso
well, for core, that should be it. On Tue, Mar 3, 2009 at 2:57 PM, stanlick wrote: > > Well, since necessity is the mother of all invention and I have been asked > for a magic bullet that poops out a stack of licenses, I am becoming more > creative.  Consider the following simple dependency: > >

Re: [OT] POM, licenses and dependency trees

2009-03-03 Thread stanlick
Well, since necessity is the mother of all invention and I have been asked for a magic bullet that poops out a stack of licenses, I am becoming more creative. Consider the following simple dependency: org.apache.struts struts2-core 2.1.6 I am running mvn depende

Re: [OT] POM, licenses and dependency trees

2009-03-03 Thread Musachy Barroso
All the dependencies that we have, must have a license that is compatible with ASL 2. I don't know of any way to compile a list of licenses used, that would be cool for a maven plugin. musachy On Tue, Mar 3, 2009 at 9:32 AM, wrote: > How does a company go about fleshing out the aspects of FOSS

[OT] POM, licenses and dependency trees

2009-03-03 Thread stanlick
How does a company go about fleshing out the aspects of FOSS without wasting so many people's time? As FOSS gains in popularity, we are sinking in a quagmire of manual research, analysis and legal license inspections. It seems the FOSSology product will unpack compressed files and sniff around fo