[ 
https://issues.apache.org/jira/browse/SYNCOPE-252?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13557261#comment-13557261
 ] 

Francesco Chicchiriccò commented on SYNCOPE-252:
------------------------------------------------

About javax.ws.rs-api, according to [1], license is CDDL 1.0 (or GPL, but this 
is not allowed): since the CDDL 1.0 has already been included in LICENSE and 
legal_ext/LICENSE, you don't need to change these.
You still need, however, to update legal_ext/NOTICE with a copyright 
attribution to "Oracle Corporation" (read from [1]).

About the rest (e.g. examine core / console / build-tools WAR files' 
WEB-INF/lib content), this has still to be done.
This because, even though you haven't added anything but CXF deps, the Maven 
dependency resolution mechanism might have ended with some JAR file in 
WEB-INF/lib not yet captured in legal_ext's LICENSE and NOTICE. As said, any 
ASF JAR file can be skipped.

[1] 
http://search.maven.org/remotecontent?filepath=javax/ws/rs/javax.ws.rs-api/2.0-m15/javax.ws.rs-api-2.0-m15.pom
                
> Update LICENSE / NOTICE files for any added or removed Maven dependency
> -----------------------------------------------------------------------
>
>                 Key: SYNCOPE-252
>                 URL: https://issues.apache.org/jira/browse/SYNCOPE-252
>             Project: Syncope
>          Issue Type: Sub-task
>          Components: console, core
>            Reporter: Francesco Chicchiriccò
>             Fix For: 1.2.0
>
>
> If you are adding (or removing) any non-ASF dependency, please take also care 
> of LICENSE and NOTICE content either at root (included in source and JAR 
> release files) and under legal_ext (for WAR and ZIP release files).

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to