Am 03.10.19 um 17:32 schrieb Martin:
> Hi,
>
> we have to include the NOTICE file in archiva, that contains information
> about the code origin and additional
> licensing information ("legally required") about products that are bundled
> with the download.
> I'm not sure, if we have to add additional information apart from the apache
> licensing. The runnable download with the web container contains
> a lot of libraries and api jars from java EE.
> Does anyone know how to handle this? Are there any tools to retrieve this
> information?
Have a look at "Maven License Plugin". It can create a report with the
licenses of all dependencies, check that there are no unwanted types of
licenses (for example, GPL'd or proprietary code) and download the
licenses of all dependencies into a folder.
Note that this is a messy process; you'll probably find a bunch of
dependencies with missing or weird licenses. Sometimes it's enough to
just update to the latest version.
Good luck :-)
--
Aaron "Optimizer" Digulla a.k.a. Philmann Dark "It's not the universe
that's limited, it's our imagination. Follow me and I'll show you
something beyond the limits." http://blog.pdark.de/
