On Mon, Mar 18, 2019 at 4:03 PM Marcelo Vanzin <van...@cloudera.com.invalid> wrote: > > On Mon, Mar 18, 2019 at 2:23 PM Luciano Resende <luckbr1...@gmail.com> wrote: > > Also, there are lots of version mismatching between the included jars > > and the third-party license file > > Could you be a little more explicit about this one? I don't even see a > 3rd party license file. What exactly is the expectation here? > > -- > Marcelo
When you extract the binary distro, there is a THIRD-PARTY file which lists the external dependencies and their licenses. I tried to validate some and noticed a few mismatches on the version: jars/jackson-jaxrs-1.9.13.jar * JAX-RS provider for JSON content type (org.codehaus.jackson:jackson-jaxrs:1.8.3 - http://jackson.codehaus.org) Also, I just noticed the following (L)GPL dependencies. Are these new ? Were it introduced since the previous release? Or are these dual-licensed? GNU General Public Library: * Streaming API for XML (javax.xml.stream:stax-api:1.0-2 - no url defined) GNU Lesser General Public License (LGPL), Version 2.1: * JAX-RS provider for JSON content type (org.codehaus.jackson:jackson-jaxrs:1.8.3 - http://jackson.codehaus.org) * Xml Compatibility extensions for Jackson (org.codehaus.jackson:jackson-xc:1.8.3 - http://jackson.codehaus.org) GPL: * JTransforms (com.github.rwl:jtransforms:2.4.0 - http://sourceforge.net/projects/jtransforms/) GPL2 w/ CPE: * JAXB API bundle for GlassFish V3 (javax.xml.bind:jaxb-api:2.2.2 - https://jaxb.dev.java.net/) * JAXB RI (com.sun.xml.bind:jaxb-impl:2.2.3-1 - http://jaxb.java.net/) * javax.ws.rs-api (javax.ws.rs:javax.ws.rs-api:2.0.1 - http://jax-rs-spec.java.net) * jersey-client (com.sun.jersey:jersey-client:1.9 - https://jersey.java.net/jersey-client/) * jersey-core (com.sun.jersey:jersey-core:1.9 - https://jersey.java.net/jersey-core/) * jersey-guice (com.sun.jersey.contribs:jersey-guice:1.9 - https://jersey.java.net/jersey-contribs/jersey-guice/) * jersey-json (com.sun.jersey:jersey-json:1.9 - https://jersey.java.net/jersey-json/) * jersey-server (com.sun.jersey:jersey-server:1.9 - https://jersey.java.net/jersey-server/) GPLv2+CE: * JavaMail API (compat) (javax.mail:mail:1.4.7 - http://kenai.com/projects/javamail/mail) LGPL: * JTransforms (com.github.rwl:jtransforms:2.4.0 - http://sourceforge.net/projects/jtransforms/) LGPL 2.1: * Javassist (org.javassist:javassist:3.18.1-GA - http://www.javassist.org/) -- Luciano Resende http://twitter.com/lresende1975 http://lresende.blogspot.com/
