[
https://issues.apache.org/jira/browse/NUTCH-2290?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17579596#comment-17579596
]
Sebastian Nagel commented on NUTCH-2290:
----------------------------------------
Note that the licenses of some dependencies failed to classify automatically
(see the lists in the notebook). But maybe we want first focus on upgrading old
dependencies in plugins (eg. NUTCH-2961) and see whether the newer (transitive)
deps are automatically classified. Also note that in some plugins (NUTCH-2960)
license issued need to be addressed.
> Update licenses of bundled libraries
> ------------------------------------
>
> Key: NUTCH-2290
> URL: https://issues.apache.org/jira/browse/NUTCH-2290
> Project: Nutch
> Issue Type: Bug
> Components: deployment
> Affects Versions: 2.3.1, 1.12
> Reporter: Sebastian Nagel
> Assignee: Sebastian Nagel
> Priority: Major
> Labels: help-wanted
> Fix For: 1.19
>
> Attachments: 3rd-party-license-report.sh,
> 3rd-party-licenses-nutch-1.15.txt, apache-nutch-license-report.ipynb,
> apache_nutch_1.17_3rd_party_licenses.txt
>
>
> The files LICENSE.txt and NOTICE.txt were last edited 5 years ago and should
> be updated to include all licenses of dependencies (and their dependencies)
> in accordance to [Assembling LICENSE and NOTICE
> HOWTO|http://www.apache.org/dev/licensing-howto.html]:
> # check for missing or obsolete licenses due to added or removed dependencies
> # update year in NOTICE.txt -- should be a range according to the licensing
> HOWTO
> # bundled libraries are referenced with path and version number, e.g
> {{lib/icu4j-4_0_1.jar}}. This would require to update the LICENSE.txt with
> every dependency upgrade. A more generic reference ("ICU4J") would be easier
> to maintain but the HOWTO requires to "specify the version of the dependency
> as licenses are sometimes changed".
> # try to reduce the size of LICENSE.txt (currently 5800 lines). Mainly,
> according to the HOWTO there is no need to repeat the Apache license again
> and again.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
