Hi,

> I think there are 2 things that need to be checked:
> a) ensure all the binary dependencies are listed in LICENSE, this
> includes jar files under BOOT-INF/lib, and javascript dependencies
> which can be found in package.json

Dependancies should not be listed just what in included in the releases, if 
it’s not in the release there's no need to list it even if it is a dependancy.

the other thing you may need to do is look inside each jar and see what it 
contains and it may bundle other 3rd party code inside that’s under different 
licenses, usually this is fairly obvious froth package name.

Thanks,
Justin

Reply via email to