Hi, I just checked the License files which are unknown to the tool that you use. Most of them are BSD 3-Clause license, the uber-go are MIT license. We should be fine with these third dependencies. I guess there maybe some format change on the License so the tool cannot recognize it.
@xiaoliang tian <[email protected]> Do you mind start a vote for accepting mesher as new subproject of ServiceComb? Willem Jiang Twitter: willemjiang Weibo: 姜宁willem On Fri, Jun 21, 2019 at 11:00 AM Xiaoliang Tian <[email protected]> wrote: > That list include all the indirect and direct deps, 🚫means I am not sure > the License, so I give a link to let you review > > > github.com/beorn7/perks MIT License > github.com/fsnotify/fsnotify BSD 3-Clause "New" or > "Revised" License > github.com/go-chassis/go-restful-swagger20 MIT License > github.com/go-chassis/go-chassis-config Apache License 2.0 > github.com/gogo/googleapis Apache License 2.0 > github.com/go-chassis/paas-lager Apache License 2.0 > github.com/go-chassis/gohessian Apache License 2.0 > github.com/go-mesh/openlogging Apache License 2.0 > github.com/golang/glog Apache License 2.0 > github.com/golang/protobuf BSD 3-Clause "New" or > "Revised" License > github.com/google/gofuzz Apache License 2.0 > 🚫 github.com/gogo/protobuf > https://github.com/gogo/protobuf/blob/master/LICENSE > github.com/gorilla/websocket BSD 2-Clause "Simplified" > License > github.com/hashicorp/go-version Mozilla Public License > 2.0 > github.com/cenkalti/backoff MIT License > github.com/imdario/mergo BSD 3-Clause "New" or > "Revised" License > github.com/json-iterator/go MIT License > github.com/matttproud/golang_protobuf_extensions Apache License 2.0 > github.com/modern-go/concurrent Apache License 2.0 > github.com/patrickmn/go-cache MIT License > github.com/opentracing/opentracing-go Apache License 2.0 > github.com/pkg/errors BSD 2-Clause "Simplified" > License > github.com/modern-go/reflect2 Apache License 2.0 > github.com/emicklei/go-restful MIT License > github.com/lyft/protoc-gen-validate Apache License 2.0 > github.com/envoyproxy/go-control-plane Apache License 2.0 > github.com/prometheus/client_golang Apache License 2.0 > github.com/prometheus/common Apache License 2.0 > github.com/prometheus/client_model Apache License 2.0 > github.com/prometheus/procfs Apache License 2.0 > github.com/spf13/cast MIT License > github.com/spf13/pflag BSD 3-Clause "New" or > "Revised" License > 🚫 github.com/rcrowley/go-metrics > https://github.com/rcrowley/go-metrics/blob/master/LICENSE > github.com/urfave/cli MIT License > github.com/golang/text BSD 3-Clause "New" or > "Revised" License > github.com/golang/time BSD 3-Clause "New" or > "Revised" License > k8s.io/client-go Apache License 2.0 > 🚫 golang.org/x/net > https://github.com/golang/net/blob/master/LICENSE > 🚫 golang.org/x/oauth2 > https://github.com/golang/oauth2/blob/master/LICENSE > 🚫 golang.org/x/sys > https://github.com/golang/sys/blob/master/LICENSE > github.com/go-chassis/go-archaius Apache License 2.0 > google.golang.org/genproto Apache License 2.0 > gopkg.in/inf.v0 BSD 3-Clause "New" or > "Revised" License > github.com/ghodss/yaml MIT License > github.com/go-chassis/foundation Apache License 2.0 > github.com/go-chassis/go-cc-client Apache License 2.0 > github.com/go-chassis/go-chassis Apache License 2.0 > gopkg.in/yaml.v2 Apache License 2.0 > 🚫 go.uber.org/ratelimit > https://github.com/uber-go/ratelimit/blob/master/LICENSE > 🚫 golang.org/x/crypto > https://github.com/golang/crypto/blob/master/LICENSE > google.golang.org/grpc Apache License 2.0 > k8s.io/apimachinery Apache License 2.0 > > Willem Jiang <[email protected]> 于2019年6月20日周四 上午9:18写道： > > > Hi Xiaoliang, > > > > Any update for the proposal? > > > > Willem Jiang > > > > Twitter: willemjiang > > Weibo: 姜宁willem > > > > On Sat, Jun 15, 2019 at 10:38 AM Willem Jiang <[email protected]> > > wrote: > > > > > > It looks good from the feedback of the community. > > > I just have a quick question about the third party dependencies of > > > mesher. It's quite important for us when we move the project into > > > Apache. > > > > > > Tian Xiaoliang do you mind show us the list of third party > > > dependenices projects and their license? > > > > > > Willem Jiang > > > > > > Twitter: willemjiang > > > Weibo: 姜宁willem > > > > > > On Mon, Jun 10, 2019 at 2:11 PM Xiaoliang Tian < > [email protected]> > > wrote: > > > > > > > > Hi All, > > > > > > > > Service mesh is a solution for microservice, mesher is a service mesh > > > > implementation. > > > > > > > > if servicecomb introduce mesher, it will get some benifits. > > > > > > > > 1. user of servicecomb can choose any language and leverage same > > service > > > > center and govenance policy. > > > > > > > > 2. user can gain better performance by using java chassis and mesher, > > than > > > > user use service mesh solution only. > > > > > > > > the first one is most important reason why service mesh is important > to > > > > service comb > > > > > > > > The mesher feature has been finished [1] > > > > > > > > there is the list of features: > > > > 1. service discovery, load balancing, circuit breaker, rate limiting, > > most > > > > of features that java chassis has > > > > 2. An admin API to expose runtime imformation of mesher > > > > 3. support grpc and http1 and http2 > > > > 4. support transparent TLS communication > > > > 5. run as a sidecar proxy for a service > > > > 6. a sidecar injector to automattically inject mesher into k8s pod > > > > > > > > [1] https://github.com/go-mesh/mesher > > > > > > > > Regards > > >
