-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Guillame,
I see eighty six (86) jar files in the non-source kit. Assuming that the project.properties file describes their origins, I see a number of them with non-AL licences (not necessarily an issue), and I don't see that attribution is given for *any* of them. Much less any notice concerning their IP and licensing terms. There is no NOTICE file. Some of these jars are apparently licensed under CPL or CDDL, which most definitely cannot be bundled without clear notice. - -1, at least until a proper and complete NOTICE file is included. - -- #ken P-)} Ken Coar, Sanagendamgagwedweinini http://Ken.Coar.Org/ Author, developer, opinionist http://Apache-Server.Com/ "Millennium hand and shrimp!" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iQCVAwUBREeJvZrNPMCpn3XdAQKf0gP/W/hO7xx9kit9bxjhlCHa4zqfegu2YUqr 1jEgUQ8VZSawiA8EuvY/AmyXPtP6ucamLDC4sDOXTALXTN3rp1XTuM88Pp6QiDgs I64w2mEkhD0Gl03uRVW+BPCvRAF7Xy8M/A8NotSIw3vGfOeGuWOMWA+757Its0E/ Pk2Bg+vj/to= =+Lpx -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
