To give you an idea of what I am talking about; niclas@devdesk:~/dev/incubator-weex$ git log | grep ^Author | sort -u | wc 154 479 6246
154 different Author "names" is in the repository right now. You might in the future get a question like; Who of your 154 contributors do not have an ICLA with the [email protected] ? And what in the current codebase is still from their contributions? These kinds of questions MAY arise out of legal action, or just people wanting to make sure that there is nothing improper going on. Niclas On Sat, Mar 4, 2017 at 6:03 PM, Niclas Hedhman <[email protected]> wrote: > Hi, > I am wondering if Weex is really keeping the IP provenance audit trail in > order. > > For each GitHub Pull Requests coming in, you need to be able to show which > ICLA that leads back to preferably in an automated fashion. > > Easiest would be to ensure that every commit has a "@apache.org" address > in every commit, instead of the private mail addresses that are currently > in use. > > IF commits are done to the Apache Git server, the audit trail is automatic > (because it captures the Apache ID making the push), but I don't think that > it capable of handling Pull Requests and 'transitive contributors'. > > So, I would suggest that all committers on the project makes a change to > their local git > > git config user.email <apache-id>@apache.org > git config user.name "My Real Name" > > inside the Weex project local clone. > > This would simplify audit trail management a lot, going forward, and make > it much more clear whether any contributions came from elsewhere. > > > Cheers > -- > Niclas Hedhman, Software Developer > http://polygene.apache.org <http://zest.apache.org> - New Energy for Java > -- Niclas Hedhman, Software Developer http://polygene.apache.org <http://zest.apache.org> - New Energy for Java
