noel 2004/03/12 21:57:05
Added: site/projects/success/tapestry addendum audit-2003-02
audit-2003-03 audit-2003-04
Log:
Added some incubation related information that turned up post-incubation
Revision Changes Path
1.1 incubator/site/projects/success/tapestry/addendum
Index: addendum
===================================================================
Subsequent to Tapestry's release from the Incubator, information
related to its incubation was culled from the Apache Wiki and recorded
here in the audit-* files.
Also, the HiveMind project derived from code in Tapestry. HiveMind
was developed as work-for-hire for WebCT, Inc., who subsequently
provided a Software Grant (signed by Christopher M. Vento), which is
recorded with the ASF Secretary.
1.1 incubator/site/projects/success/tapestry/audit-2003-02
Index: audit-2003-02
===================================================================
*** This is an Archival Record taken from the Apache Wiki
----------------
A code audit started on Feb 20 2003. It is based on the 2.4 code branch
(which is nearing the 2.4-alpha-3 release).
The following external JARs are in CVS. All are redistributed with the
Tapestry distribution (except as noted). All are needed to compile the
framework, and at runtime (except as noted).
* jcommon-0.6.5.jar -- LGPL -- Used to compile and run some examples.
* jdom-b8.jar -- -- Used only to build and run JUnit test suite. <b>Not
redistributed</b>
* jfreechart-0.9.2.jar -- LGPL -- Used to compile and run some examples.
* junit.jar -- -- Used only to build and run JUnit test suite. <b>Not
redistributed</b>
* mckoidb-0.94h.jar -- GPL -- Used to compile the contrib framework, used in
demos. <b>See note below</b>.
* ognl-2.3.0-opt.jar -- Modern BSD
* org.apache.crimson.jar -- ASL
* bcel-5.0.jar -- ASL
* bsf-2.3.0.jar -- ASL
* commons-lang-1.0.jar -- ASL
* commons-logging-1.0.2.jar -- ASL
* ejb.jar -- LGPL -- <b>To be removed shortly, in 2.4-alpha-3++</b>
* jakarta-oro-2.0.6.jar -- ASL
* javax.servlet.jar -- ASL
* javax.xml.jaxp.jar -- ASL
<b>mckoidb-0.94h.jar</b>: McKoi is GPL. The tiny amount of code in contrib
that calls into McKoi has been transfered to the McKoi project. My
understanding of the GPL is that the current code is not in violation, since
McKoi is distributed with Tapestry ... but I'm easily confused.
It is expected that the next release of McKoi will have the necessary code
changes (its JMX code to allow a McKoi instance to run inside JBoss), and we
will be able to strip out the code from contrib, fully resolving the conflict.
I expect to be able to redistribute McKoi, without any Tapestry code compiled
against it, with a clear concience.
''gstein: LGPL and GPL code cannot reside in the Apache repository. Those
need to be removed ASAP. Developers and users will need to fetch them from
somewhere else, manually. Note that there are still questions about even using
LPGL code; that is being resolved on the [email protected] list right now, I
believe. The table above is missing licenses for several components. That must
also be cleared up. Java code cannot 'import' any code that is GPL'd. That
creates a specific dependency on the GPL'd code, which then infects the calling
code. Thus, I don't see any way that we could use McKoi in any fashion.''
''HLS:Although I could direct users to download McKoi separately, I need the
JMX code that imports McKoi, or I have to scrap the turn-key demos. I believe
the next release of McKoi will include these code contributions and I'll be
able to strip out the offending code at that time.''
''HLS:I will look into removing jfreechart and jcommon. Probably have to
direct users to download it separately.''
''AndrewCOliver: Howard, you don't undestand, you need to remove the McKoi
code immediately and any code which links to it. This isn't even grey area.
It is clearly in violation of the GPL license.''
----
I've been trying to avoid doing this, but looks like I'm going to have to
pull the McKoi JMX code out entirely. I've been hoping I could wait it out
until Toby (the McKoi guy) rolls the JMX stuff into McKoi -- then it just is a
matter of directing users to pick up right version of McKoi.
My plan is:
# Remove the McKoi JMX code from CVS
# Create a new module at Tapestry @ SourceForge containing the code (all
twenty lines or so) as a GPL framework.
# Direct people to download the new framework.
ETA on this is 3/7/2003.
----
I thought JAXP was under that funky sun license... - AndrewCOliver
1.1 incubator/site/projects/success/tapestry/audit-2003-03
Index: audit-2003-03
===================================================================
*** This is an Archival Record taken from the Apache Wiki
----------------
A lot has changed after Tapestry 2.4-alpha-4, here's the new audit (Mar 12
2003).
Category 1: In CVS and included in the distribution. Needed at framework
build, at runtime and potentially at application build time.
* lib/ext/bcel-5.0.jar (ASL)
* lib/ext/bsf-2.3.0.jar (ASL)
* lib/ext/commons-logging-1.0.2.jar (ASL)
* lib/ext/jakarta-oro-2.0.6.jar (ASL)
* lib/ext/ognl-2.3.0-opt.jar (Modern BSD)
* lib/ext/commons-lang-1.0.jar (ASL)
* lib/runtime/log4j-1.2.6.jar (ASL)
Category 2: <b>Not</b> in CVS, needed at framework build. Not part of
Tapestry distribution. Typically provided by application server at runtime.
* jboss-j2ee.jar (LPGL, from JBoss distribution)
* mail.jar (???, from JBoss distribution)
* crimson.jar (ASL, from Jetty distribution)
* javax.xml.jaxp.jar (Sun BCLA, from Jetty distribution)
* javax.servlet.jar (ASL, from Jetty distribution)
Tapestry does not contain any Jetty- or JBoss- specific code (not in the
frameworks, not in the example code, nowhere).
Tapestry code imports from javax.ejb, javax.xml, javax.servlet and so forth.
The Jetty and JBoss distributions are handy places to obtain that code from,
and are also used for some Tapestry demos.
Category 3: External distributions. Not in CVS, not part of Tapestry
distribution.
* ext-dist/jdom-b8.jar (Modified ASL?) Build time only (part of test suite)
* ext-dist/junit.jar (CPL) Build time only (part of test suite)
* ext-dist/jCharts-0.6.0.jar (BSD) Build time and runtime
* ext-dist/docbkx412.zip (???) For documentation build
* ext-dist/docbook-xsl-1.59.2.zip (???) For documentation build
====
HowardLewisShip: The /Feb2003 audit pointed out problems I knew about that
could not be deferred (McKoi) and problems I didn't know about (other LPGL
modules). I've factored out McKoi completely ... the code is needed at runtime
to support the examples but not at compile time. The big LGPL offender was
JFreeChart, which has been replaced with jCharts.
There's some grumbling currently about JBoss and/or Jetty (both LGPL), but
the code being imported is all from javax packages; the Jetty and JBoss
distributions are just handy places to get that code from. The turn-key demos
are structured to automatically configure JBoss, so it makes sense that
Tapestry users will have JBoss handy.
1.1 incubator/site/projects/success/tapestry/audit-2003-04
Index: audit-2003-04
===================================================================
*** This is an Archival Record taken from the Apache Wiki
----------------
We're on the eve of 3.0-beta-1 (we voted to call the next release 3.0 instead
of 2.4). Tapestry is now building continuously under Gump.
Category 1: In CVS and included in the distribution. Needed at framework
build, at runtime and potentially at application build time.
* lib/ext/bcel-5.0.jar (ASL)
* lib/ext/bsf-2.3.0.jar (ASL)
* lib/ext/commons-logging-1.0.2.jar (ASL)
* lib/ext/jakarta-oro-2.0.6.jar (ASL)
* lib/ext/ognl-2.4.2.jar (Modern BSD)
* lib/ext/commons-lang-1.0.jar (ASL)
* lib/runtime/log4j-1.2.6.jar (ASL)
* examples/Workbench/lib/jCharts-0.6.0.jar (BSD)
Category 2: <b>Not</b> in CVS, needed at framework build. Not part of
Tapestry distribution. Typically provided by application server at runtime.
* jboss-j2ee.jar (LPGL, from JBoss distribution)
* crimson.jar (ASL, from Jetty distribution)
* javax.xml.jaxp.jar (Sun BCLA, from Jetty distribution)
* javax.servlet.jar (ASL, from Jetty distribution)
Tapestry does not contain any Jetty- or JBoss- specific code (not in the
frameworks, not in the example code, nowhere).
Tapestry code imports from javax.ejb, javax.xml, javax.servlet and so forth.
The Jetty and JBoss distributions are handy places to obtain that code from,
and are also used for some Tapestry demos.
Category 3: External distributions. Not in CVS, not part of Tapestry
distribution.
* ext-dist/jdom-b8.jar (Modified ASL?) Build time only (part of test suite)
* ext-dist/junit.jar (CPL) Build time only (part of test suite)
* ext-dist/docbkx412.zip (MIT/X Consortium License ) For documentation build
* ext-dist/docbook-xsl-1.59.2.zip (MIT/X Consortium License) For
documentation build
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
