[
https://issues.apache.org/jira/browse/HBASE-16321?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15407154#comment-15407154
]
Nick Dimiduk commented on HBASE-16321:
--------------------------------------
Yeah I can't find any site or source code for the google project, so... strike
it for now. Maybe there's some way to get provenance from central? Asa for
Oracle Binary License, I'd leave that to legal@.
bq. except in the hbase-spark module since apparently spark-core can't function
without it.
So, umm, what then? There's a ticket to be filed vs. spark that blocks this
one? Without that, we can't not include this jar in our dist, right?
> Ensure findbugs jsr305 jar isn't present
> ----------------------------------------
>
> Key: HBASE-16321
> URL: https://issues.apache.org/jira/browse/HBASE-16321
> Project: HBase
> Issue Type: Sub-task
> Components: dependencies
> Reporter: Sean Busbey
> Assignee: Sean Busbey
> Priority: Blocker
> Fix For: 2.0.0, 1.3.0, 1.4.0, 1.1.6, 1.2.3
>
> Attachments: HBASE-16321.1.patch, HBASE-16321.2.patch
>
>
> we should be using
> {code}
> <dependencies>
> <dependency>
> <groupId>com.github.stephenc.findbugs</groupId>
> <artifactId>findbugs-annotations</artifactId>
> <version>${findbugs-annotations}</version>
> <scope>compile</scope>
> </dependency>
> {code}
> to ensure we don't have a prohibited dependency, but it looks like we're
> still bringing in
> {code}
> <dependency>
> <groupId>com.google.code.findbugs</groupId>
> <artifactId>jsr305</artifactId>
> <version>${jsr305.version}</version>
> </dependency>
> {code}
> remove the findbugs version (even though the maven central pom claims the
> license is ALv2, that doesn't line up with the referenced project sites).
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
