On 09/06/2015 02:46 PM, Zheng, Kai wrote: > I checked again the release source package with a clean folder. > > unzip kerby-all-1.0.0-RC1-source-release.zip > > In it there is a new file DEPENDENCIES that doesn't have the license info so > failed the rat check. Maybe we just remove it and update the package?
This file is generated by the maven-assembly-plugin when running the release. I think it is safe to add DEPENDENCIES to the ignore list of the apache-rat plugin, did so in commit b571be3777e17edf5e47aa6f377e04c3291c6dfb. Kind Regards, Stefan
