[ 
https://issues.apache.org/jira/browse/NETBEANS-54?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16205161#comment-16205161
 ] 

ASF GitHub Bot commented on NETBEANS-54:
----------------------------------------

Github user matthiasblaesing commented on a diff in the pull request:

    https://github.com/apache/incubator-netbeans/pull/104#discussion_r144722875
  
    --- Diff: libs.osgi/external/binaries-list ---
    @@ -14,5 +14,5 @@
     # KIND, either express or implied.  See the License for the
     # specific language governing permissions and limitations
     # under the License.
    -972E6455724DC6ADB1C1912F53B5E3D7DF20C5FD osgi.cmpn-4.2.jar
    -2F2FBFF3FB80F91B159A7FA9F0C42A894BB8BCC5 osgi.core-5.0.0.jar
    +972E6455724DC6ADB1C1912F53B5E3D7DF20C5FD 
org.netbeans.external:osgi.cmpn:4.2
    --- End diff --
    
    Your link shows, that the referenced binary is not present in maven 
central, but only in the netbeans repository (see the "Repositories" row). The 
download binaries task has maven central hard-coded, so the binary won't be 
found.
    
    It works for you (and me), because there are multiple fallbacks:
    - local maven2 cache ($HOME/.m2/repository)
    - fallback to load the file from `http://hg.netbeans.org/binaries/`
    
    I would not change the binary reference, as currently there is no valuable 
alternative. And I can support your assessment not to change the binary right 
now. This makes it clear, that this needs to be tackled later.


> Clarify the status of donated files from ApacheNetBeansDonation1.zip
> --------------------------------------------------------------------
>
>                 Key: NETBEANS-54
>                 URL: https://issues.apache.org/jira/browse/NETBEANS-54
>             Project: NetBeans
>          Issue Type: Bug
>            Reporter: Bertrand Delacretaz
>              Labels: pull-request-available
>         Attachments: JavaApplication9.java, categorized-1.zip, 
> convert-headers-1.zip
>
>
> Reviewing the software grant [1] provided with the first NetBeans code 
> donation, my understanding is that not all files found in that zip are 
> donated.
> The grant indicates that the contents of that file [2] ("Code File") are 
> donated "excluding any third-party and separately licensed material contained 
> within the Code File". 
> I don't think we can consider that code ready to release as is, due to the 
> uncertainty that this creates w.r.t to which files are donated and which are 
> not.
> The zip archive contains about 45'000 files.
> I see the following options:
> a) Review all files and include only those which are not "third-party and 
> separately licensed material". How such files are identified needs to be 
> defined and documented, either in scripts under version control or as a set 
> of rules. The review process must be documented and traceable, so that we can 
> go back to it if problems are found in the future.
> b) Get an updated grant which does not mention such exclusions.
> If someone sees other options please discuss here or on the NetBeans dev 
> list, referencing this ticket.
> [1] in svn under private/documents/grants/oracle-america-netbeans.pdf , ASF 
> members have access
> [2] under http://bits.netbeans.org/download/apache-donation/  - 
> SHA256(ApacheNetBeansDonation1.zip)=
> 7f2ca0f61953a190613c9a0fbcc1b034084b04a4d55d23c02cefffc354e7c24a



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to