Hi,
-1 (binding)
So I tried teh new release skill on the release candidate:
Must fix issue:
• Category X code. The core LICENSE declares its own BSD-4-Clause
(University of California-Specific)section covering src/port/glob.c,
src/port/glob.h, src/include/port/win32_msvc/glob.h. All three are in the
archive with the advertising clause intact. resolved.html lists that exact
variant under Category X, which may not be distributed in source or binary
form. Inherited from PostgreSQL and shipped in 2.0.0 and 2.1.0 too, so it is a
standing issue, not a regression.
• Xuanwo's -1, confirmed and wider.
contrib/pax_storage/src/cpp/contrib/tabulate is covered as MIT only, but
bundles optional-lite, variant-lite and string_view-lite (Boost-1.0) and
termcolor (BSD-3), all also concatenated into
single_include/tabulate/tabulate.hpp. Both licences are Category A, so it is
LICENSE completeness, not compatibility.
• Same gap in the yyjson docs. dependency/yyjson/doc/doxygen/html/jquery.js
bundles jQuery, Sizzle, jQuery UI and jQuery UI Touch Punch 0.2.3 (dual
MIT/GPLv2), plus doxygen-awesome-css. The LICENSE entry points only at yyjson's
MIT.
However, note this re the 4-clause BSD license [1]
Should fix:
• backup and go-libs NOTICE carry the full Apache-2.0 boilerplate;
licensing-howto reserves NOTICE for required notifications.
• LICENSE says dependencies/yyjson; the path is dependency/yyjson.
• Three Thumbs.db files in the core archive.
• RAT config excludes **/*.md, **/*.sql and gpcontrib/gpcloud/src/**.cpp
wholesale, so the clean mvn apache-rat:check in the dev@ vote says nothing
about those.
• No crypto export notice despite contrib/pgcrypto, and Cloudberry is
absent from apache.org/licenses/exports/.
Kind Regards,
Justin
1.
https://ipira.berkeley.edu/sites/default/files/amendment_of_4-clause_bsd_software_license.pdf
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
