[ 
https://issues.apache.org/jira/browse/HADOOP-12893?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15365201#comment-15365201
 ] 

Andrew Wang commented on HADOOP-12893:
--------------------------------------

So one thing I could use clarification is if we need to include NOTICE entries 
if the downstream project has incorrectly constructed their NOTICE file, or 
we've already captured their transitive dependencies.

* Jetty spends a lot of space listing out their deps and licenses, but that's 
supposed to go in LICENSE, not NOTICE. We also already look at all of Jetty's 
transitive dependencies ourselves.
* Xerces is another Apache project, so we don't need the Apache copyright. Also 
considering the Xerces code was donated to Apache, are they legally required to 
list the IBM/Sun/iClick copyright attributions?
* None of snappy-java's entries look like legally required attributions either

The jcip changes look good though, nice catch.

> Verify LICENSE.txt and NOTICE.txt
> ---------------------------------
>
>                 Key: HADOOP-12893
>                 URL: https://issues.apache.org/jira/browse/HADOOP-12893
>             Project: Hadoop Common
>          Issue Type: Bug
>    Affects Versions: 2.8.0, 2.7.3, 2.6.5, 3.0.0-alpha1
>            Reporter: Allen Wittenauer
>            Assignee: Xiao Chen
>            Priority: Blocker
>             Fix For: 2.7.3, 2.6.5
>
>         Attachments: HADOOP-12893-addendum-branch-2.7.01.patch, 
> HADOOP-12893.002.patch, HADOOP-12893.003.patch, HADOOP-12893.004.patch, 
> HADOOP-12893.005.patch, HADOOP-12893.006.patch, HADOOP-12893.007.patch, 
> HADOOP-12893.008.patch, HADOOP-12893.009.patch, HADOOP-12893.01.patch, 
> HADOOP-12893.011.patch, HADOOP-12893.012.patch, HADOOP-12893.10.patch, 
> HADOOP-12893.addendum-trunk.01.patch, HADOOP-12893.branch-2.01.patch, 
> HADOOP-12893.branch-2.6.01.patch, HADOOP-12893.branch-2.7.01.patch, 
> HADOOP-12893.branch-2.7.02.patch, HADOOP-12893.branch-2.7.3.01.patch
>
>
> We have many bundled dependencies in both the source and the binary artifacts 
> that are not in LICENSE.txt and NOTICE.txt.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to