[
https://issues.apache.org/jira/browse/RIVER-432?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13852188#comment-13852188
]
Peter Firmstone commented on RIVER-432:
---------------------------------------
I'm having trouble finding the policy we're violating, have you got some links
or further information?
animal-sniffer is an api checker, it's used for testing
asm is used by classdep for bytecode analysis and is requried for the present
ant build.
bouncy-castle is used to generate Certificate Authority certificates for
regression tests
dnsjava is used by the test suite
high-scale-lib is used by the CombinerSecurityManager
rclibs is used to enable weak or timed references in concurrent collections
velocity is used for configuration, I believe it hasn't been removed because
someone was using it downstream, I'd suggest searching the list archives for
details.
> Jar files in svn and src distributions
> --------------------------------------
>
> Key: RIVER-432
> URL: https://issues.apache.org/jira/browse/RIVER-432
> Project: River
> Issue Type: Bug
> Reporter: Greg Trasuk
>
> Recent traffic on the incubator lists has pointed out that including jar
> files for dependencies in the subversion repository and the source
> distributions is against Apache policy.
> In River, the following libraries appear in the Subversion repository and the
> source distributions (these are from trunk, a smaller set appear in the 2.2
> branch):
> animal-sniffer
> asm
> bouncy-castle
> dnsjava
> high-scale-lib
> rc-libs
> velocity
> They all have to go. What are we using them for? As I understand it, we
> were going to remove the VelocityConfigurationBuilder, so that's not a
> problem. Some of the others are available from Maven Central, so we can get
> them at build time using Ivy or another build tool. Which ones are actually
> required? And where did they come from?
--
This message was sent by Atlassian JIRA
(v6.1.4#6159)
