Hi,

On Wed, Mar 6, 2019 at 4:12 AM Justin Mclean <[email protected]> wrote:
>
> Hi,
>
> > For javascript it is a bit more tricky, because all the javascript
> > dependencies will be merged into one single and minimized javascript.
>
> Yep JS causes all sort of issues, also that some JS file are not obviously 
> licensed, and they are often missing license headers.

What I did it is to check the package.json file in the source code,
and make sure all the packages listed in the dependencies are
mentioned in LICENSE.

>
> > I doubt this can be done in a practical way. If do it manually, it
> > might be done for once, but check every jar for each release, that
> > looks impossible to me.
>
> In can be done in a piratical way, once you done it once you just need to 
> check teh differences on future releases. BTW I usually just use vi for this 
> as it understands comprised files so there no need to manually unpack the 
> jars.

Fair enough. I used jar -tvf xxx.jar to check it.

>
> Thanks,
> Justin



-- 
Best Regards!
Huxing

Reply via email to