[ 
https://issues.apache.org/jira/browse/XALANJ-2731?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17886447#comment-17886447
 ] 

Samael Bate commented on XALANJ-2731:
-------------------------------------

thanks, I can confirm that adding
{code:java}
<licenses>
  <license>
    <name>Apache-2.0</name>
  </license>
</licenses> {code}
to the pom has fixed the issue.

It's really important for all maven projects to include this in the pom as it 
helps users to ensure they are only adding dependencies with a compatible 
license. Tooling such as _org.codehaus.mojo:license-maven-plugin_ can be used 
to fail a build if dependencies are added with a clashing license. 

This issue can be closed (please add fix version).

> the xalan 2.7.3 is missing license info
> ---------------------------------------
>
>                 Key: XALANJ-2731
>                 URL: https://issues.apache.org/jira/browse/XALANJ-2731
>             Project: XalanJ2
>          Issue Type: Bug
>      Security Level: No security risk; visible to anyone(Ordinary problems in 
> Xalan projects.  Anybody can view the issue.) 
>    Affects Versions: 2.7.3
>            Reporter: Samael Bate
>            Priority: Major
>
> I use the license-maven-plugin with failOnMissing set to true but this is 
> causing me an issue due to the Xalan jars not having license info defined:
> {noformat}
> There are 2 dependencies with no license :
>  - xalan--serializer--2.7.3
>  - xalan--xalan--2.7.3{noformat}
>  
> I'm working around this be adding
> {code:java}
> <excludedGroups>xalan</excludedGroups> {code}
> please fix the missing license info and release a bugfix version



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@xalan.apache.org
For additional commands, e-mail: dev-h...@xalan.apache.org

Reply via email to