[
https://issues.apache.org/jira/browse/TAPESTRY-1249?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12472140
]
Jesse Kuhnert commented on TAPESTRY-1249:
-----------------------------------------
I've fixed the maven configuration to not include dependencies now, I'm not
sure what to do about the 4.1.1 binaries.
It should work if I just modify the binaries and re-sign them again right ?
> 4.1.1 binary downloads include non-Apache modules (including OGNL and
> Javassist).
> ---------------------------------------------------------------------------------
>
> Key: TAPESTRY-1249
> URL: https://issues.apache.org/jira/browse/TAPESTRY-1249
> Project: Tapestry
> Issue Type: Bug
> Components: Build
> Affects Versions: 4.1.1
> Reporter: Howard M. Lewis Ship
> Priority: Blocker
> Fix For: 4.1.2
>
>
> I was just building the download pages for Tapestry 5.0.1 and noticed that
> the 4.1.1 binaries include ognl.jar, etc. This is absolutely against Apache
> guidelines (only Apache software may be downloaded from the Apache mirrors,
> directly or otherwise). Tapestry 4.0.x went to great measures to download
> the necessary dependencies (OGNL, Javassist) as needed, a pain for users,
> but part of the cost of going outside the Apache fold.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
