That's what I have been doing with the legal archive.
I had only looked at our zips though, so missed the war issues.
The standalone contains all of those jars you mentioned less javassist.
I am getting through it though, so no need to worry on your part.
I was already tinkering with tentacles fork to try and get a better
usage from it.
Andy.
On 07/08/2014 13:32, Jonathan Gallimore wrote:
I tend to look at the LICENCE file on one screen and the list of libraries
in the archive on another and try and match each bit up. Takes ages and
makes my eyes go a bit square after a while. Took about 2 hours to find
those points yesterday.
I had started to look at http://mojo.codehaus.org/license-maven-plugin/ to
get a list of the licenses in the dependencies (seems to be scoped at test
though, so includes libraries that aren't part of the final binary
distribution) and https://wiki.jasig.org/display/LIC/maven-notice-plugin to
generate a NOTICE file from the dependencies. Was going to cross-reference
these against the jar included in each artifact.
I'm happy to carry on with that, or provide support in any way I can. I was
hoping to work on this over my lunch here, but have had something crop up,
but can carry on this evening.
I think the archive html file we have is really useful, but we could
probably put in some more tooling in this area. I'd definitely be
interested in hacking on that.
Jon
On Thu, Aug 7, 2014 at 9:13 AM, Andy Gumbrecht <[email protected]>
wrote:
No worries Jon, I'll get on it - Thanks for you input on this. Much better
to get it right now.
Just wondering if you have some tools for these findings as I have been
staring at the notices for that last two days at least and still missed
those!
Andy.
On 07/08/2014 01:30, Jonathan Gallimore wrote:
I'm happy to go through all of the jar included in these packages, check
and double check and modify the LICENCE and NOTICE files. I'm conscious of
doubling up on work though, so if someone else is working on this, please
shout. Its getting late where I am, but I'll make a start now and pick up
tomorrow.
Jon
On Wed, Aug 6, 2014 at 11:37 PM, Andy Gumbrecht <[email protected]
wrote:
OK, this is going to be a cancel by the looks of it. We should therefore
fix the issue Thiago mentioned while we can:
- It looks like the "maven-dependency-plugin" defined on
https://svn.apache.org/repos/asf/tomee/tomee/tags/tomee-1.
7.0/tomee/tomee-webapp/pom.xml
didn't work properly. The "webapps\tomee\webjars" directory is missing
from
the resulting "zip/tar.gz".
I'll see how much more info we have in the morning, and cancel then.
Andy.
On 06/08/2014 23:59, Jonathan Gallimore wrote:
Just looking at this at the moment, in particular checking out some
licence
headers. I have the following notes, not sure if any are show-stoppers
or
not:
1. openejb-standalone has references to jansi, javassist, serp, wsdl4j,
slf4j even though these libraries are not included in the final zip. I
guess that's not a problem, but just something I spotted. Its a similar
case for the other .wars and .zips too.
2. The javaee-api jar includes a copyright W3C for XMLSchema.dtd. Should
this be reflected in the notice or licence file for openejb-standalone?
3. tomee-webaccess.war's licence/notice files don't include the
copyright
from code mirror (Copyright (C) 2013 by Marijn Haverbeke <
[email protected]>
and others). Is that a problem?
4. Do we need to include the Eclipse Public Licence for ECJ in the TomEE
plus zip?
I couldn't see anything else, but my eyes are starting to go a bit
square.
I've spun it up with a few apps, and it looks good.
Jon
On Tue, Aug 5, 2014 at 4:26 PM, Andy Gumbrecht <
[email protected]>
wrote:
Hi everyone.
Here it is, the first official vote on Apache TomEE 1.7.0 feature
release.
Well done to you all for getting us this far. You all deserve a huge
pat
on the back - Go ahead and give yourself one.
As you know this release has been a bit of an uphill battle, and it may
not be over yet. However, the preview went well and only a few license
fixes were required.
The TCK passes and we have a consistent green build on the Buildbot.
Please take the time to scrutinise the release files and cast your
vote.
SVN Tag:
https://svn.apache.org/repos/asf/tomee/tomee/tags/tomee-1.7.0/
Maven Repo:
https://repository.apache.org/content/repositories/
orgapachetomee-1036
Binaries & Source:
https://dist.apache.org/repos/dist/dev/tomee/staging-1036/
tomee-1.7.0/
Legal:
http://tomee.staging.apache.org/legal/archives.html
Vote will be open for 72 hours or as needed.
Thanks for your time.
Andy.
--
Andy Gumbrecht
http://www.tomitribe.com
[email protected]
https://twitter.com/AndyGeeDe
TomEE treibt Tomitribe! | http://tomee.apache.org
--
Andy Gumbrecht
http://www.tomitribe.com
[email protected]
https://twitter.com/AndyGeeDe
TomEE treibt Tomitribe! | http://tomee.apache.org
--
Andy Gumbrecht
http://www.tomitribe.com
[email protected]
https://twitter.com/AndyGeeDe
TomEE treibt Tomitribe! | http://tomee.apache.org
--
Andy Gumbrecht
http://www.tomitribe.com
[email protected]
https://twitter.com/AndyGeeDe
TomEE treibt Tomitribe! | http://tomee.apache.org
