On 07/09/15 14:32, Reto Gmür wrote:
>The binaries have had the NOTICE and LICENSE files replaced in both jar
>and sources.jar. These miss the necessary declarations.
>
I don't think anything changed here. Do you think something need to be
changed for the release candidate to be acceptable (the vote is on the
source zip linked in the original mail).

There are two strands of issue here. A general one about approving binaries and a point about distributing modified Jena as binary without it's NOTICE and LICENSE files.


Approving binaries:

Binaries must correspond to a release.

The distribution mechanism for binaries is via repository.ao/content/repositories/releases/org/apache/...

Note "releases".

Material that is published through the Apache maven repository needs sort of VOTE. It transfers the legal liability from the RM to the foundation for one thing.

Surely, a "+1" ought to include checking what is produced is correct.


Removing NOTICE and LICENSE:

Clerezza is redistributing modified Jena binaries via repository.ao/content/*releases* without the NOTICE and LICENSE from Jena. Xerces, for example, cause material in LICENSE and some BSD code causes material in NOTICE.

        Andy

http://www.apache.org/dev/release.html#what

Reply via email to