I had some time to do some work/thinking on this today...

Third-party stuff
----------------------
Since the maven tasks have gone silent again, I have continued to work
with ant on the 0.4 branch.

Many of the dependencies are easy to add (with much being pulled from
the maven central repositories for ease-of-download), however there
are a few libraries requiring more work:

Deletion:
I feel that none of these libraries serve any purpose now, and should
be removed.
- codegen/SocketIO (superseded by Websockets, could-be-argued to keep
for legacy situations, but I don't feel it is worth the maintenance
effort)
- runtime/SocketIO ditto
- runtime/mongo* (intended to be the main storage system, but only
possible for signer, attachment and accounts. So I wish to remove its
code to leave only the file store types)
[Why maintain multiple formats?]

Update (then fetch from maven repo):
- runtime/guava (to at least 10)
- runtime/jdom (to at least 1.1.2)
- runtime/jsr305 (to anything, any release will be more modern than ours)

Write some download+extract+mv routine:
- runtime/libidn

Other:
- runtime/whack
  We are currently using 1.0.0 with some local changes to work with GNU libidn.
  I am not sure how we can package this for deployment?

Export Regulations
---------------------------
Looking at the Apache wiki, we are probably a bit late getting one of
these anyway...
"PMCs considering including cryptographic functionality within their
products [...] should take the following steps before placing such
code on any ASF server, including commits to subversion "

We could do with a PMC editing the Apache wide exports page to include
us under the 'Incubator' section for 'development' and '0.x' releases.
We seem to fall under 5D002. The controlled source being both our
repository, and our inclusion of Bouncy Castle.

The only other thing we need to do (until a public release - at which
point we have to notify the US government), is to add the required
blurb to README (see the one in the 0.4 branch).

[Perhaps I should move the build notes out to BUILD from README?]

Ali

Reply via email to