There are various threads at @board, @legal-discuss and other places where people are saying that Gradle wrapper jar is no exception to the rule and should be excluded from the releases.
I understand that there disadvantages in removing the wrapper from our repos but doing that solves the debate and potential conflicts with legal. If legal gives it's blessings to include the jar in the release then great but I am afraid this will take time and freezing the release for this is not ideal. Best, Stamatis On Fri, Apr 9, 2021, 12:29 PM Vladimir Sitnikov <[email protected]> wrote: > Stamatis, > > Thank you for the reference. > Cassandra case is vastly different: they included all the third-party > dependencies into the source package. > > However, in the thread you mention [1] there's a link that makes "build > tools" special: > https://apache.org/legal/resolved.html#build-tools > > That page explicitly permits the inclusion of the build tools if they are > used for build purposes. > > The removal of gradle-wrapper.jar from the source release would reduce > security, and it would lower the release vote count > as the number of steps to build and verify the code increases. > > [1]: > > https://lists.apache.org/thread.html/r1d7330da3c90eb4f2bb8555249572d85615c0f866b45ce04a30c00f2%40%3Cdev.cassandra.apache.org%3E > > Vladimir >
