> > 2016. 4. 8. 오전 9:25에 "Justin Mclean" <[email protected]>님이 작성: > > > > > Currently we have several jars checked into version control that’s rather > > unusual. Jars can’t be included in a source release, are are usually > > included at build time, and are usually not stored in version control. > > > > I can see the following 3rd party code in the repo: > > - D3 Legend MIT licensed > > - D3 BSD licensed > > - JQuery UI MIT licensed > > - Sankey [2] may be based on this [3] whose license is BSD but is missing > > a header > > - Apache Commons Math. This has a notice file that would effect our > notice > > file if bundled [4] > > - Google Gson Apache licensed missing NOTICE file > > - Metrics Apache license with NOTICE file [5] > > - slf4j MIT licensed > > > > Is there anything I’ve missed? > > > > Depending on how this code is used i.e. bundled or brought in at run time > > it’s going to change the contents of our LICENSE and NOTICE files. > > > > I didn’t look at the jars in detail. I can see mostly Apache with a Scala > > BSD and there also some EPL and MPL licensed code in that that may need > to > > be handled carefully [6] > > > > Thanks, > > Justin >
Hi Justin, I actually have been looking into the various 3rd party jar files in our code base in order to work on the NOTICE file. There are more than you mentioned. The first one I was looking at is Metrics under ext/metrics-3.1.2, which is an Apache license but has Notices that I think we would need to add to our NOTICE file. I opened https://issues.apache.org/jira/browse/QUARKS-132 and was going to make the update to NOTICE. My plan was to research 3rd party jar files one at a time and create pull requests for the Quarks NOTICE If needed. I guess a good question is whether we should remove the jar files completely and set up Maven or something like it instead. Do others in the community have an opinion on this topic? If we do remove the jar files and use Maven, would we still need to have an updated NOTICE file when we create a binary release? Some of these jar files will need to be included in a Quarks release. I did a quick search on Maven and it looks like there are plugins that help manage license files. How do projects usually handle binary releases? I don't have any experience with Maven, so don't know how this works. Thank you very much for your guidance. Kathy
