[
https://issues.apache.org/jira/browse/XALANJ-2635?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17732689#comment-17732689
]
Joe Kesselman commented on XALANJ-2635:
---------------------------------------
True; misread.
I'm not wild about importing the source code, if any other option can be found.
I'd be much happier if we could persuade the authors/maintainers to publish it
somewhere stable (or permit us to do it) and import it from that, as a normal
external dependency. I've attempted to contact the maintainer of record; no
response yet. If we can't get an answer from them, their (nonstandard)
opensource license seems to be to permit copy-with-attribution. (Actually,
their license might permit *_us_* to post it to git...!) But I Am Not A Lawyer.
Apache *HAS* lawyers on staff, and I'd suggest checking with them before
copying the JLex source anywhere just to make sure there aren't lurking horrors
in the fine print.
I've been told recently that we have been using a modified version of JLex. I'm
not clear on what the modification was, but if we take a fresh copy we'd have
to re-apply that modification.
(Yeah, I know, you can't spell IANAL without...)
> Remove JLex.jar from the source repository
> ------------------------------------------
>
> Key: XALANJ-2635
> URL: https://issues.apache.org/jira/browse/XALANJ-2635
> Project: XalanJ2
> Issue Type: Task
> Security Level: No security risk; visible to anyone(Ordinary problems in
> Xalan projects. Anybody can view the issue.)
> Components: XSLTC
> Reporter: Vladimir Sitnikov
> Assignee: Gary D. Gregory
> Priority: Major
>
> https://github.com/apache/xalan-java/tree/master/tools contains JLex.jar
> which is a binary file, and its provenance is unknown.
> The ASF rules forbid compiled including compiled code to the source
> repository (see
> https://lists.apache.org/thread/otx07h6vbjrsqd9r9sqpcpjscvjwtmfc), and in
> this case, there's no real need to have JLex.jar in the source repository.
> At the same time, the generated
> {{xalan-java/src/org/apache/xalan/xsltc/compiler/XPathLexer.java}} should be
> removed from the source control.
> I suggest that JLex.jar should be removed and it should be replaced with
> something else.
> For instance, the source code of JLex could be added as a separate subfolder,
> and xalan could compile JLex from sources.
> It looks like the official distribution is not maintained:
> https://www.cs.princeton.edu/~appel/modern/java/JLex/
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@xalan.apache.org
For additional commands, e-mail: dev-h...@xalan.apache.org
