Hi,
I am wondering if Weex is really keeping the IP provenance audit trail in
order.

For each GitHub Pull Requests coming in, you need to be able to show which
ICLA that leads back to preferably in an automated fashion.

Easiest would be to ensure that every commit has a "@apache.org" address in
every commit, instead of the private mail addresses that are currently in
use.

IF commits are done to the Apache Git server, the audit trail is automatic
(because it captures the Apache ID making the push), but I don't think that
it capable of handling Pull Requests and 'transitive contributors'.

So, I would suggest that all committers on the project makes a change to
their local git

git config user.email <apache-id>@apache.org
git config user.name "My Real Name"

inside the Weex project local clone.

This would simplify audit trail management a lot, going forward, and make
it much more clear whether any contributions came from elsewhere.


Cheers
-- 
Niclas Hedhman, Software Developer
http://polygene.apache.org <http://zest.apache.org> - New Energy for Java

Reply via email to