The GitHub Actions job "CI" on 
rocketmq-dashboard.git/fix/legal-gate-determinations has succeeded.
Run started by GitHub user lizhimins (triggered by lizhimins).

Head commit for run:
745df30a03f339df46b408d9bace0526e7a0a0f0 / lizhimins <[email protected]>
docs(server): record where every collected license text came from

server/legal/licenses/SOURCES.md lists, per component, the coordinate, the 
declared license,
the one we rely on, the upstream URL at the exact version tag, and the 
collection date — so a
reviewer can re-fetch and diff any of them instead of taking the texts on faith.

reflections is the one that needed a decision rather than a download: it is 
dual-licensed
WTFPL / New BSD, but the 0.9.11 tag publishes only COPYING.txt (the WTFPL 
text); no filled-in
BSD text exists at that tag or at 0.9.12, and 0.10 switched to Apache-2.0, 
which does not apply
to 0.9.11. The SPDX BSD-3 template carries Copyright (c) [year], [fullname] and 
upstream never
published a filled copy, so it is not a grant to anyone and cannot ship. The 
verbatim WTFPL text
is kept instead, the determination carries a review note, and every build now 
warns that WTFPL is
not named in the ASF license categories and needs PMC/legal confirmation before 
3.0.0 GA — or
that the transitive dependency (org.apache.rocketmq:rocketmq-tools) should be 
excluded.

legal.py: any determination may carry a review note, not only Category B ones, 
and it is printed
as a WARNING and recorded on the manifest component.

Report URL: 
https://github.com/apache/rocketmq-dashboard/actions/runs/38235921724

With regards,
GitHub Actions via GitBox

Reply via email to