[
https://issues.apache.org/jira/browse/SYNCOPE-252?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13557261#comment-13557261
]
Francesco Chicchiriccò commented on SYNCOPE-252:
------------------------------------------------
About javax.ws.rs-api, according to [1], license is CDDL 1.0 (or GPL, but this
is not allowed): since the CDDL 1.0 has already been included in LICENSE and
legal_ext/LICENSE, you don't need to change these.
You still need, however, to update legal_ext/NOTICE with a copyright
attribution to "Oracle Corporation" (read from [1]).
About the rest (e.g. examine core / console / build-tools WAR files'
WEB-INF/lib content), this has still to be done.
This because, even though you haven't added anything but CXF deps, the Maven
dependency resolution mechanism might have ended with some JAR file in
WEB-INF/lib not yet captured in legal_ext's LICENSE and NOTICE. As said, any
ASF JAR file can be skipped.
[1]
http://search.maven.org/remotecontent?filepath=javax/ws/rs/javax.ws.rs-api/2.0-m15/javax.ws.rs-api-2.0-m15.pom
> Update LICENSE / NOTICE files for any added or removed Maven dependency
> -----------------------------------------------------------------------
>
> Key: SYNCOPE-252
> URL: https://issues.apache.org/jira/browse/SYNCOPE-252
> Project: Syncope
> Issue Type: Sub-task
> Components: console, core
> Reporter: Francesco Chicchiriccò
> Fix For: 1.2.0
>
>
> If you are adding (or removing) any non-ASF dependency, please take also care
> of LICENSE and NOTICE content either at root (included in source and JAR
> release files) and under legal_ext (for WAR and ZIP release files).
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira