[
https://issues.apache.org/jira/browse/RAT-523?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18040043#comment-18040043
]
Philipp Ottlinger commented on RAT-523:
---------------------------------------
Thanks for your interest in RAT and the request :)
I assume that some of the stuff you requested is part of tooling's initiative
for Apache trusted releases so I guess this will need some coordination to
avoid double-programming.
Some of the requests were the reason for Creadur's subprojects (Whisker,
Tentacles), but currently most of the development happens in RAT - just fyi.
> extension to do full check of source release tar/zip
> ----------------------------------------------------
>
> Key: RAT-523
> URL: https://issues.apache.org/jira/browse/RAT-523
> Project: Apache RAT
> Issue Type: Improvement
> Components: Tools
> Reporter: PJ Fanning
> Priority: Major
>
> We might be able to get people from outside the RAT team involved so this
> isn't a request for you to do work, more of a request for a home for this
> feature.
> The Rat tool is useful and is regularly used. But an extension might have
> these features.
> * starts with the source release tar/zip and checks its name includes
> 'apache' and 'incubating' for Incubator podlings
> * checks the checksum file is valid for the tar/zip
> * checks the signing of the tar/zip
> * checks that there are LICENSE and NOTICE files and maybe even does some
> basic checks on them
> * for Incubator releases, checks there is a DISCLAIMER or DISCLAIMER-WIP
> * also runs the existing Rat checks for source headers and binary files
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
