[
https://issues.apache.org/jira/browse/CASSANDRA-18969?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17785274#comment-17785274
]
Michael Semb Wever edited comment on CASSANDRA-18969 at 11/13/23 9:08 AM:
--------------------------------------------------------------------------
bq. A reminder that only things that are included/bundled in a release need to
be mentioned in LICENSE and NOTICE.
Yea, thanks for the reminder.
This java-driver does not bundle any dependencies in the source release, and
[~henry.hughes] are there any (binary convenience) releases that bundle
dependencies (like shaded jars published to maven central) ?
bq. So in general, transitive dependencies don't need to be mentioned in
LICENSE or NOTICE.
That's kinda misleading. Transitive dependencies are to be treated no
differently. It is solely whether they are included or not.
See https://infra.apache.org/licensing-howto.html#deps-of-deps
{quote}Dependencies of dependencies (including so-called "transitive
dependencies") are no different from first-order dependencies for the purposes
of assembling LICENSE and NOTICE: LICENSE and NOTICE need only be modified to
accommodate them only if their bits are bundled.{quote}
was (Author: michaelsembwever):
bq. A reminder that only things that are included/bundled in a release need to
be mentioned in LICENSE and NOTICE.
Yea, thanks for the reminder.
This java-driver does not bundle any dependencies in the source release, and
[~henry.hughes] are there any releases that bundle dependencies (like shaded
jars published to maven central) ?
bq. So in general, transitive dependencies don't need to be mentioned in
LICENSE or NOTICE.
That's kinda misleading. Transitive dependencies are to be treated no
differently. It is solely whether they are included or not.
See https://infra.apache.org/licensing-howto.html#deps-of-deps
{quote}Dependencies of dependencies (including so-called "transitive
dependencies") are no different from first-order dependencies for the purposes
of assembling LICENSE and NOTICE: LICENSE and NOTICE need only be modified to
accommodate them only if their bits are bundled.{quote}
> Pre-release required legal changes for cassandra-java-driver
> ------------------------------------------------------------
>
> Key: CASSANDRA-18969
> URL: https://issues.apache.org/jira/browse/CASSANDRA-18969
> Project: Cassandra
> Issue Type: Sub-task
> Components: Client/java-driver
> Reporter: Michael Semb Wever
> Priority: Urgent
> Time Spent: 15h 50m
> Remaining Estimate: 0h
>
> TODO
> * there is still code copyrighted to others that isn't mentioned in LICENSE
> (e.g. ci/install-jdk.sh )
> * "© DataStax" still appears in the README
> * -spotbugs is LGPL, in 4.x, and not correctly made provided scope-
> * add any BSD/MIT deps to LICENCE
> * -ensure copyright headers are on all files, use rat plugin-
> * ensure NOTICE propagates NOTICES
> In short…
> {quote}
> LICENSE must contain the ASL, plus references to all code that includes
> someone else's copyright, and all BSD and MIT dependencies (including
> transitive).
> NOTICE must the standard header, plus the shorten content of any NOTICE file
> (minus its header) found in any ASL dependency (including transitive).
> {quote}
> These things must be done before a release.
> Cat X deps we included as build tool by using scope provided we should put a
> test in to ensure they work at runtime without the dep doesn't regress in the
> future.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
