Hi Folks!

I'm sorry, but I fear we need to fix a few things and before we can ship it. 


The Good:

 * LICENSE is fine
 * NOTICE is fine
 * checksums are fine
 * PGP is fine
 * source release artifact exists


The Bad:

Dependencies:

I found the following dependencies which we should check.

 - aopalliance (http://aopalliance.sourceforge.net/aopalliance) 
aopalliance:aopalliance:jar:1.0:compile
    License: Public Domain. 
This one might be fine, but I need to dig those licenses further.
    
- Glassfish Jasper (http://jetty.mortbay.org/project/modules/jsp-2.1) 
org.mortbay.jetty:jsp-2.1:jar:6.1.14
    License: CDDL 1.0  (https://glassfish.dev.java.net/public/CDDLv1.0.html)
    
- Servlet Specification 2.5 API 
(http://jetty.mortbay.org/project/modules/servlet-api-2.5) 
org.mortbay.jetty:servlet-api-2.5:jar:6.1.14
    License: CDDL 1.0  (https://glassfish.dev.java.net/public/CDDLv1.0.html)

Where does this come from? I thought we use org.apache.geronimo.specs APIs 
instead now? Are they coming in as transitive dependency?
    
    
RAT (Release Audit Tool):

$> mvn apache-rat:check
$> less target/rat.txt

RAT shows 720 unapproved licenses. Mainly xml files e.g. 
core/commons/core-commons.java.hsp
Those should get an ALv2 header as well. Same with docbook and a few others. 
Basically all which is not generated.

Btw, this file also contains a local file path  
<classpathentry kind="lib" 
path="D:\SVN\ai\isis\trunk\core\commons\target\classes" />
Is this really needed? This is checked in to our SVN, but Isis still builds 
fine over here. And since I (almost) only use Linux and Mac, I'm pretty sure 
such a directory doen't exist over here ;)


Thus a 

-1


and sorry for being so picky ;)
(and also for taking so long)

LieGrue,
strub



----- Original Message -----
> From: Dan Haywood <[email protected]>
> To: [email protected]
> Cc: 
> Sent: Thursday, January 26, 2012 5:49 PM
> Subject: [VOTE] Apache Isis 0.2.0-incubating (RC1)
> 
> All,
> 
> I've staged a release for Apache Isis, namely 0.2.0-incubating.The
> artifacts have been staged to staging repository onrepository.apache.org:
> *
> https://repository.apache.org/content/repositories/orgapacheisis-139/org/apache/isis/isis/0.2.0-incubating/isis-0.2.0-incubating-source-release.zip
> (zip
> file)
> *
> https://repository.apache.org/content/repositories/orgapacheisis-139/org/apache/isis/isis/0.2.0-incubating/isis-0.2.0-incubating-source-release.zip.asc
> (signature)
> 
> In Subversion the code has been tagged as tags/isis-0.2.0-incubating.
> 
> I've also uploaded a new version of the site at
> http://incubator.apache.org/isis-0.2.0-incubating.
> 
> The contributors guide on the site contains some suggestions of how to
> verify the release, see
> http://incubator.apache.org/isis-0.2.0-incubating/docbkx/html/guide/ch12.html
> 
> Please verify the release and cast your vote.  The vote will be open for at
> least 72 hours.
> 
> [ ] +1
> [ ]  0
> [ ] -1
>

Reply via email to