On Thu, Jan 8, 2015 at 2:17 PM, John D. Ament <[email protected]> wrote:
> I would recommend checking w/ Justin on what he wanted done with that file.
>
Yeah... I reviewed that email again from Justin, realized that I did not
fix what Justin wanted fixed and found a bunch of other problems.
Justin mentioned the Dot-Net acknowledgements.txt file as just one instance
of a file that is not under a ASL license, but we have added an ASL header.
On closer inspection, I see a bunch of problems with our Dot-Net SDK. The
dependencies are the problem. The SDK depends on four libraries:
1. NSubstitute - BSD license
2. NUnit - one off "provided as is" license
3. Newtonsoft.Json - no license information
4. RestSharp - no license information
Here are the problems:
* All of the four dependencies above include binary DLL files. We can't
ship those.
* They all include .nupkg files, which are binary files that contain DLLs.
We can't ship those.
* And they all include XML files and .nuspec files with an Apache header,
but they are not Apache files, they were copied from the dependencies. We
need to remove the headers and change our header-checker (RAT) so that it
will ignore anything in the packages directory.
* We don't know the licenses for two dependencies, and the "as is" license
may need legal review.
I thought we dealt with the DLL problem before. Did those DLLs sneak back
in somehow? Can we use some Maven type thing that can download dependencies
at build time, instead of bundling this stuff?
We should fix all of the above, but perhaps, instead, we should omit the
Dot-Net SDK from this release.
Thoughts?
- Dave
>
> On Thu Jan 08 2015 at 2:11:28 PM Dave <[email protected]> wrote:
>
> > On Thu, Jan 8, 2015 at 12:57 PM, John D. Ament <[email protected]>
> > wrote:
> >
> > > I'm still seeing the issues w/ the acknowledgements.txt file.
> > >
> >
> > I left that file in place and copied the contents to the NOTICE file at
> the
> > top of the dot-net SDK. I think that is the right thing to do. Was there
> > some other issue?
> >
> > - Dave
> >
> >
> >
> > >
> > > John
> > >
> > > On Thu Jan 08 2015 at 10:36:54 AM Dave <[email protected]> wrote:
> > >
> > > > All,
> > > >
> > > > I propose that we accept the following release candidate as the
> > official
> > > > Apache Usergrid 1.0.1 release.
> > > >
> > > >
> > > > Usergrid 1.0.1-rc4 includes the following:
> > > > ---
> > > > The CHANGELOG for the release is available at:
> > > > https://git-wip-us.apache.org/repos/asf?p=incubator-
> > > > usergrid.git&f=CHANGELOG&hb=1.0.1-rc4
> > > >
> > > > The branch used to create the release candidate is:
> > > > https://git-wip-us.apache.org/repos/asf?p=incubator-
> > > > usergrid.git&hb=1.0.1-rc4
> > > >
> > > > The current Git commit ID is 145bbbeb44fa7d759eae5818694f47da4c2cca65
> > > >
> > > > The release candidate is available at:
> > > > https://dist.apache.org/repos/dist/dev/incubator/usergrid/1.
> > > > 0.1-rc4/apache-usergrid-1.0.1-rc4-incubating.tar.gz
> > > >
> > > > The MD5 checksum of the release candidate can be found at:
> > > > https://dist.apache.org/repos/dist/dev/incubator/usergrid/1.
> > > > 0.1-rc4/apache-usergrid-1.0.1-rc4-incubating.tar.gz.md5
> > > >
> > > > The signature of the release candidate can be found at:
> > > > https://dist.apache.org/repos/dist/dev/incubator/usergrid/1.
> > > > 0.1-rc4/apache-usergrid-1.0.1-rc4-incubating.tar.gz.asc
> > > >
> > > > The GPG key used to sign the release are available at:
> > > > https://dist.apache.org/repos/dist/dev/incubator/usergrid/KEYS
> > > >
> > > > Please download, verify, and test.
> > > >
> > > > The vote will close on Sun Jan 11 10:31:58 EST 2015
> > > >
> > > > [ ] +1 Release this as Apache Usergrid 1.0.1
> > > > [ ] +0
> > > > [ ] -1 Do not release this as Apache Usergrid 1.0.1 because...
> > > >
> > >
> >
>
