That explains it! Thanks for all your hard work on the release. Sorry that I've caused a re-roll :(
Jon On Thu, Aug 7, 2014 at 2:13 PM, Andy Gumbrecht <[email protected]> wrote: > 'Only' if the jar contains either a LICENCE or NOTICE file (or txt file). > The report does not notify of jar files with neither, which is a pain - > That's what I am working on. > Also the report links are broken and have to be search/replaced by hand. > > Andy. > > > On 07/08/2014 14:59, Jonathan Gallimore wrote: > >> Cool. Let me know if I can do anything to help. I can't see jansi, serp, >> wsdl4j etc on this page: >> http://tomee.staging.apache.org/legal/content/http_/ >> repository.apache.org/content/repositories/orgapachetomee- >> 1036/org/apache/openejb/openejb-standalone/4.7.0/ >> openejb-standalone-4.7.0.zip.contents/apache-openejb-4.7.0/lib/ >> >> I see that they are present in the actual zip file though - should that >> page match up with the jars in the zip? >> >> Cheers >> >> Jon >> >> >> On Thu, Aug 7, 2014 at 1:50 PM, Andy Gumbrecht <[email protected]> >> wrote: >> >> That's what I have been doing with the legal archive. >>> I had only looked at our zips though, so missed the war issues. >>> >>> The standalone contains all of those jars you mentioned less javassist. >>> I am getting through it though, so no need to worry on your part. >>> >>> I was already tinkering with tentacles fork to try and get a better usage >>> from it. >>> >>> Andy. >>> >>> >>> On 07/08/2014 13:32, Jonathan Gallimore wrote: >>> >>> I tend to look at the LICENCE file on one screen and the list of >>>> libraries >>>> in the archive on another and try and match each bit up. Takes ages and >>>> makes my eyes go a bit square after a while. Took about 2 hours to find >>>> those points yesterday. >>>> >>>> I had started to look at http://mojo.codehaus.org/license-maven-plugin/ >>>> to >>>> get a list of the licenses in the dependencies (seems to be scoped at >>>> test >>>> though, so includes libraries that aren't part of the final binary >>>> distribution) and https://wiki.jasig.org/display/LIC/maven-notice- >>>> plugin >>>> to >>>> generate a NOTICE file from the dependencies. Was going to >>>> cross-reference >>>> these against the jar included in each artifact. >>>> >>>> I'm happy to carry on with that, or provide support in any way I can. I >>>> was >>>> hoping to work on this over my lunch here, but have had something crop >>>> up, >>>> but can carry on this evening. >>>> >>>> I think the archive html file we have is really useful, but we could >>>> probably put in some more tooling in this area. I'd definitely be >>>> interested in hacking on that. >>>> >>>> Jon >>>> >>>> >>>> >>>> >>>> On Thu, Aug 7, 2014 at 9:13 AM, Andy Gumbrecht < >>>> [email protected]> >>>> wrote: >>>> >>>> No worries Jon, I'll get on it - Thanks for you input on this. Much >>>> >>>>> better >>>>> to get it right now. >>>>> >>>>> Just wondering if you have some tools for these findings as I have been >>>>> staring at the notices for that last two days at least and still missed >>>>> those! >>>>> >>>>> Andy. >>>>> >>>>> >>>>> On 07/08/2014 01:30, Jonathan Gallimore wrote: >>>>> >>>>> I'm happy to go through all of the jar included in these packages, >>>>> check >>>>> >>>>>> and double check and modify the LICENCE and NOTICE files. I'm >>>>>> conscious >>>>>> of >>>>>> doubling up on work though, so if someone else is working on this, >>>>>> please >>>>>> shout. Its getting late where I am, but I'll make a start now and pick >>>>>> up >>>>>> tomorrow. >>>>>> >>>>>> Jon >>>>>> >>>>>> >>>>>> On Wed, Aug 6, 2014 at 11:37 PM, Andy Gumbrecht < >>>>>> [email protected] >>>>>> wrote: >>>>>> >>>>>> OK, this is going to be a cancel by the looks of it. We should >>>>>> therefore >>>>>> >>>>>> fix the issue Thiago mentioned while we can: >>>>>>> >>>>>>> - It looks like the "maven-dependency-plugin" defined on >>>>>>> >>>>>>> https://svn.apache.org/repos/asf/tomee/tomee/tags/tomee-1. >>>>>>> 7.0/tomee/tomee-webapp/pom.xml >>>>>>> didn't work properly. The "webapps\tomee\webjars" directory is >>>>>>> missing >>>>>>> from >>>>>>> the resulting "zip/tar.gz". >>>>>>> >>>>>>> I'll see how much more info we have in the morning, and cancel then. >>>>>>> >>>>>>> Andy. >>>>>>> >>>>>>> >>>>>>> On 06/08/2014 23:59, Jonathan Gallimore wrote: >>>>>>> >>>>>>> Just looking at this at the moment, in particular checking out >>>>>>> some >>>>>>> >>>>>>> licence >>>>>>>> headers. I have the following notes, not sure if any are >>>>>>>> show-stoppers >>>>>>>> or >>>>>>>> not: >>>>>>>> >>>>>>>> 1. openejb-standalone has references to jansi, javassist, serp, >>>>>>>> wsdl4j, >>>>>>>> slf4j even though these libraries are not included in the final >>>>>>>> zip. I >>>>>>>> guess that's not a problem, but just something I spotted. Its a >>>>>>>> similar >>>>>>>> case for the other .wars and .zips too. >>>>>>>> >>>>>>>> 2. The javaee-api jar includes a copyright W3C for XMLSchema.dtd. >>>>>>>> Should >>>>>>>> this be reflected in the notice or licence file for >>>>>>>> openejb-standalone? >>>>>>>> >>>>>>>> 3. tomee-webaccess.war's licence/notice files don't include the >>>>>>>> copyright >>>>>>>> from code mirror (Copyright (C) 2013 by Marijn Haverbeke < >>>>>>>> [email protected]> >>>>>>>> and others). Is that a problem? >>>>>>>> >>>>>>>> 4. Do we need to include the Eclipse Public Licence for ECJ in the >>>>>>>> TomEE >>>>>>>> plus zip? >>>>>>>> >>>>>>>> I couldn't see anything else, but my eyes are starting to go a bit >>>>>>>> square. >>>>>>>> I've spun it up with a few apps, and it looks good. >>>>>>>> >>>>>>>> Jon >>>>>>>> >>>>>>>> >>>>>>>> On Tue, Aug 5, 2014 at 4:26 PM, Andy Gumbrecht < >>>>>>>> [email protected]> >>>>>>>> wrote: >>>>>>>> >>>>>>>> Hi everyone. >>>>>>>> >>>>>>>> Here it is, the first official vote on Apache TomEE 1.7.0 feature >>>>>>>> >>>>>>>>> release. >>>>>>>>> >>>>>>>>> Well done to you all for getting us this far. You all deserve a >>>>>>>>> huge >>>>>>>>> pat >>>>>>>>> on the back - Go ahead and give yourself one. >>>>>>>>> >>>>>>>>> As you know this release has been a bit of an uphill battle, and it >>>>>>>>> may >>>>>>>>> not be over yet. However, the preview went well and only a few >>>>>>>>> license >>>>>>>>> fixes were required. >>>>>>>>> >>>>>>>>> The TCK passes and we have a consistent green build on the >>>>>>>>> Buildbot. >>>>>>>>> >>>>>>>>> Please take the time to scrutinise the release files and cast your >>>>>>>>> vote. >>>>>>>>> >>>>>>>>> SVN Tag: >>>>>>>>> >>>>>>>>> https://svn.apache.org/repos/asf/tomee/tomee/tags/tomee-1. >>>>>>>>> 7.0/ >>>>>>>>> >>>>>>>>> Maven Repo: >>>>>>>>> >>>>>>>>> https://repository.apache.org/content/repositories/ >>>>>>>>> orgapachetomee-1036 >>>>>>>>> >>>>>>>>> Binaries & Source: >>>>>>>>> >>>>>>>>> https://dist.apache.org/repos/dist/dev/tomee/staging-1036/ >>>>>>>>> tomee-1.7.0/ >>>>>>>>> >>>>>>>>> Legal: >>>>>>>>> >>>>>>>>> http://tomee.staging.apache.org/legal/archives.html >>>>>>>>> >>>>>>>>> Vote will be open for 72 hours or as needed. >>>>>>>>> >>>>>>>>> Thanks for your time. >>>>>>>>> >>>>>>>>> Andy. >>>>>>>>> >>>>>>>>> -- >>>>>>>>> Andy Gumbrecht >>>>>>>>> >>>>>>>>> http://www.tomitribe.com >>>>>>>>> [email protected] >>>>>>>>> https://twitter.com/AndyGeeDe >>>>>>>>> >>>>>>>>> TomEE treibt Tomitribe! | http://tomee.apache.org >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> -- >>>>>>>>> >>>>>>>>> Andy Gumbrecht >>>>>>>> >>>>>>> http://www.tomitribe.com >>>>>>> [email protected] >>>>>>> https://twitter.com/AndyGeeDe >>>>>>> >>>>>>> TomEE treibt Tomitribe! | http://tomee.apache.org >>>>>>> >>>>>>> >>>>>>> >>>>>>> -- >>>>>>> >>>>>> Andy Gumbrecht >>>>> >>>>> http://www.tomitribe.com >>>>> [email protected] >>>>> https://twitter.com/AndyGeeDe >>>>> >>>>> TomEE treibt Tomitribe! | http://tomee.apache.org >>>>> >>>>> >>>>> >>>>> -- >>> Andy Gumbrecht >>> >>> http://www.tomitribe.com >>> [email protected] >>> https://twitter.com/AndyGeeDe >>> >>> TomEE treibt Tomitribe! | http://tomee.apache.org >>> >>> >>> > -- > Andy Gumbrecht > > http://www.tomitribe.com > [email protected] > https://twitter.com/AndyGeeDe > > TomEE treibt Tomitribe! | http://tomee.apache.org > >
