[
https://issues.apache.org/jira/browse/HADOOP-12893?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15230575#comment-15230575
]
Sean Busbey commented on HADOOP-12893:
--------------------------------------
copying my comments from common-dev@
{quote}
Each artifact that the PMC publishes must abide by the ASF licensing
policy. That includes
* Source release artifact
* any convenience binary artifacts places on dist.apache
* any convenience jars put into the ASF Nexus repository
That likely means that we bundle much more than just what's in the source tree.
{quote}
So we might end up needing different LICENSE/NOTICE entries for source and
binary tarballs and for some of our jars. They do end up being very large (I
could attach an example from HBase if folks like, or NiFi, if it would help to
see what projects that have spent a fair bit of time on this ended up doing).
One option is to have a directory with various license files and then reference
them in our LICENSE file. There's no such shortcut available for things that
require a NOTICE entry.
In HBase this took a long time to get right and we largely had to do it by
manually reviewing every artifact and leveraging the assembly and
remote-resources plugins. I had wanted to use Apache Whisker, but I ran into
the same kind of problems as [~ajisakaa] mentioned.
> Verify LICENSE.txt and NOTICE.txt
> ---------------------------------
>
> Key: HADOOP-12893
> URL: https://issues.apache.org/jira/browse/HADOOP-12893
> Project: Hadoop Common
> Issue Type: Bug
> Affects Versions: 2.8.0, 3.0.0, 2.7.3, 2.6.5
> Reporter: Allen Wittenauer
> Priority: Blocker
>
> We have many bundled dependencies in both the source and the binary artifacts
> that are not in LICENSE.txt and NOTICE.txt.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
