I tend to look at the LICENCE file on one screen and the list of libraries in the archive on another and try and match each bit up. Takes ages and makes my eyes go a bit square after a while. Took about 2 hours to find those points yesterday.
I had started to look at http://mojo.codehaus.org/license-maven-plugin/ to get a list of the licenses in the dependencies (seems to be scoped at test though, so includes libraries that aren't part of the final binary distribution) and https://wiki.jasig.org/display/LIC/maven-notice-plugin to generate a NOTICE file from the dependencies. Was going to cross-reference these against the jar included in each artifact. I'm happy to carry on with that, or provide support in any way I can. I was hoping to work on this over my lunch here, but have had something crop up, but can carry on this evening. I think the archive html file we have is really useful, but we could probably put in some more tooling in this area. I'd definitely be interested in hacking on that. Jon On Thu, Aug 7, 2014 at 9:13 AM, Andy Gumbrecht <[email protected]> wrote: > No worries Jon, I'll get on it - Thanks for you input on this. Much better > to get it right now. > > Just wondering if you have some tools for these findings as I have been > staring at the notices for that last two days at least and still missed > those! > > Andy. > > > On 07/08/2014 01:30, Jonathan Gallimore wrote: > >> I'm happy to go through all of the jar included in these packages, check >> and double check and modify the LICENCE and NOTICE files. I'm conscious of >> doubling up on work though, so if someone else is working on this, please >> shout. Its getting late where I am, but I'll make a start now and pick up >> tomorrow. >> >> Jon >> >> >> On Wed, Aug 6, 2014 at 11:37 PM, Andy Gumbrecht <[email protected] >> > >> wrote: >> >> OK, this is going to be a cancel by the looks of it. We should therefore >>> fix the issue Thiago mentioned while we can: >>> >>> - It looks like the "maven-dependency-plugin" defined on >>> >>> https://svn.apache.org/repos/asf/tomee/tomee/tags/tomee-1. >>> 7.0/tomee/tomee-webapp/pom.xml >>> didn't work properly. The "webapps\tomee\webjars" directory is missing >>> from >>> the resulting "zip/tar.gz". >>> >>> I'll see how much more info we have in the morning, and cancel then. >>> >>> Andy. >>> >>> >>> On 06/08/2014 23:59, Jonathan Gallimore wrote: >>> >>> Just looking at this at the moment, in particular checking out some >>>> licence >>>> headers. I have the following notes, not sure if any are show-stoppers >>>> or >>>> not: >>>> >>>> 1. openejb-standalone has references to jansi, javassist, serp, wsdl4j, >>>> slf4j even though these libraries are not included in the final zip. I >>>> guess that's not a problem, but just something I spotted. Its a similar >>>> case for the other .wars and .zips too. >>>> >>>> 2. The javaee-api jar includes a copyright W3C for XMLSchema.dtd. Should >>>> this be reflected in the notice or licence file for openejb-standalone? >>>> >>>> 3. tomee-webaccess.war's licence/notice files don't include the >>>> copyright >>>> from code mirror (Copyright (C) 2013 by Marijn Haverbeke < >>>> [email protected]> >>>> and others). Is that a problem? >>>> >>>> 4. Do we need to include the Eclipse Public Licence for ECJ in the TomEE >>>> plus zip? >>>> >>>> I couldn't see anything else, but my eyes are starting to go a bit >>>> square. >>>> I've spun it up with a few apps, and it looks good. >>>> >>>> Jon >>>> >>>> >>>> On Tue, Aug 5, 2014 at 4:26 PM, Andy Gumbrecht < >>>> [email protected]> >>>> wrote: >>>> >>>> Hi everyone. >>>> >>>>> Here it is, the first official vote on Apache TomEE 1.7.0 feature >>>>> release. >>>>> >>>>> Well done to you all for getting us this far. You all deserve a huge >>>>> pat >>>>> on the back - Go ahead and give yourself one. >>>>> >>>>> As you know this release has been a bit of an uphill battle, and it may >>>>> not be over yet. However, the preview went well and only a few license >>>>> fixes were required. >>>>> >>>>> The TCK passes and we have a consistent green build on the Buildbot. >>>>> >>>>> Please take the time to scrutinise the release files and cast your >>>>> vote. >>>>> >>>>> SVN Tag: >>>>> >>>>> https://svn.apache.org/repos/asf/tomee/tomee/tags/tomee-1.7.0/ >>>>> >>>>> Maven Repo: >>>>> >>>>> https://repository.apache.org/content/repositories/ >>>>> orgapachetomee-1036 >>>>> >>>>> Binaries & Source: >>>>> >>>>> https://dist.apache.org/repos/dist/dev/tomee/staging-1036/ >>>>> tomee-1.7.0/ >>>>> >>>>> Legal: >>>>> >>>>> http://tomee.staging.apache.org/legal/archives.html >>>>> >>>>> Vote will be open for 72 hours or as needed. >>>>> >>>>> Thanks for your time. >>>>> >>>>> Andy. >>>>> >>>>> -- >>>>> Andy Gumbrecht >>>>> >>>>> http://www.tomitribe.com >>>>> [email protected] >>>>> https://twitter.com/AndyGeeDe >>>>> >>>>> TomEE treibt Tomitribe! | http://tomee.apache.org >>>>> >>>>> >>>>> >>>>> -- >>> Andy Gumbrecht >>> >>> http://www.tomitribe.com >>> [email protected] >>> https://twitter.com/AndyGeeDe >>> >>> TomEE treibt Tomitribe! | http://tomee.apache.org >>> >>> >>> > -- > Andy Gumbrecht > > http://www.tomitribe.com > [email protected] > https://twitter.com/AndyGeeDe > > TomEE treibt Tomitribe! | http://tomee.apache.org > >
