zabetak opened a new issue, #700: URL: https://github.com/apache/incubator-xtable/issues/700
### Search before asking - [x] I had searched in the [issues](https://github.com/apache/incubator-xtable/issues?q=is%3Aissue) and found no similar issues. ### Please describe the bug 🐞 The LICENSE file in some bundled jars is not complete notably `xtable-aws-0.3.0-incubating-bundled.jar`. Currently the file lists the following 3rd party dependencies: ``` BSD 3-Clause ------------ com.thoughtworks.paranamer:paranamer:2.8 org.antlr:antlr4-runtime:4.9.2 MIT License ----------- org.checkerframework:checker-qual:3.37.0 org.slf4j:slf4j-api:2.0.0 org.jruby.jcodings:jcodings:1.0.55 org.jruby.joni:joni:2.1.31 CDDL + GPLv2 with classpath exception ----------- javax.annotation:javax.annotation-api:1.3.2 javax.activation:javax.activation-api:1.2.0 javax.xml.bind:jaxb-api:2.2.11 javax.servlet:javax.servlet-api:3.1.0 org.glassfish.web:javax.servlet.jsp:2.3.2 ``` Doing a rough check on the content of the jar, I see many 3rd party entries which are not listed: ``` jar tf xtable-aws-0.3.0-incubating-bundled.jar | grep "class" | awk -F '/' '{print $1,$2,$3}' | grep -v "class" | sort -u ``` For 3rd party code in `org/apache` group it's fine to not mention anything. Outside the apache group, it's probably OK to not mention classes under AL2 although it may be helpful when reviewing the license. However, I spotted also classes under different groups that are not under AL2 and should be mentioned. For instance: * org.jamon, Mozilla Public License, v. 2.0 * com.sun.el, CDDL ?? * javassist, Mozilla Public License * com.google.protobuf, BSD 3 Some other bundled jars may also be affected by this. ### Are you willing to submit PR? - [ ] I am willing to submit a PR! - [ ] I am willing to submit a PR but need help getting started! ### Code of Conduct - [x] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: commits-unsubscr...@xtable.apache.org.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
