> http://www.apache.org/dev/release.html#what-must-every-release-contain > says: > "In particular, every artifact distributed must contain appropriate > LICENSE and NOTICE files." > > That's probably why Niall voted -1 on the first release attempt. > > I guess, in the times of Maven repositories where JAR files are > individually published and downloaded on demand, that would apply to > fontbox-0.8.0-incubating.jar, too, not just the source distribution. After reading the ASF-policy several times and rereading Nialls -1-voting I came to the conclusion, that it is a major issue.
> A few years ago, that wasn't practice and before Niall's -1 I wasn't > even aware of this myself. Sometimes new "policy" creeps in. ;-) We're > not very good inside the ASF to make policy changes public and widely > known. I guess circulating new/changing informations is a general issue not only an ASF one .... > Anyway, I think it makes sense and it is definitely hugely > convenient to find the license files right in JAR when you want to know > what licenses are used in your application. I've recently started with > OSGi and I found it VERY handy browse the licenses of each bundle via > the admin interface. And that's only possible if everyone (not just > Apache projects) add the license files to the binary JARs. When I said > +1 I thought it would be ok to let this through this time but from now > on, every JAR must contains the license. Not sure what the other mentors > think. You don't have to convince me. I'll redo the release. After doing it twice I've some pratice, so that it won't take me too long do put everthing together ;-)) So stay tuned, for my last attempt to create the first apache release of fontbox. Andreas Lehmkühler > On 22.04.2009 13:28:10 Andreas Lehmkühler wrote: > > > +1, but the license files are still missing from the JAR. Fixed in > > > http://svn.apache.org/viewvc?view=rev&revision=767424 > > GRMPF, I thought I'd doublechecked everything but obviusly I've missed > that point. :-( > > > > I've tried to determine if the missing license files from the precompiled > jar is a major or a minor issue? I'm not sure > > if I understood everything in [1]. As the ASF primarily distributes source > is it sufficient that the src-jar has all the required license files or do I > have to add them to the precompiled jar, too? > > > > Andreas Lehmkühler > > > > [1] > http://www.apache.org/dev/release.html#what-must-every-release-contain > > > > > > > > On 20.04.2009 20:19:59 Andreas Lehmkühler wrote: > > > > Hi, > > > > > > > > I have posted my second candidate for the first Apache release of the > > > > FontBox library developed within the PDFBox podling. I've fixed the > > > > minor issues of my first candidate and all required files concerning > the > > > > ASF policy are now included. > > > > > > > > The candidate can be found at > > > > > > > > http://people.apache.org/~lehmi/pdfbox/fontbox-0.8.0-incubating/ > > > > > > > > See the RELEASE-NOTES.txt file (also included at the end of this > > > > message) for details on release contents. The release candidate is a > > > > jar archive of the sources in > > > > > > > > > > > > http://svn.apache.org/repos/asf/incubator/pdfbox/fontbox/tags/0.8.0-incubati > > > > ng > > > > > > > > The MD5 checksum of the fontbox-0.8.0-incubating-src.jar release > package > > > > is 4ba795a7e4298d95d24822f329e29475. > > > > > > > > Please vote on releasing this package as Apache FontBox > > > > 0.8.0-incubating. The vote is open for the next 72 hours and passes > if > > > > a majority of at least three +1 PDFBox PPMC votes is reached. > Assuming > > > > the vote passes, I will ask the Incubator PMC to approve the release. > > > > > > > > [ ] +1 Release this package as Apache FontBox 0.8.0-incubating > > > > [ ] -1 Do not release this package because... > > > > > > > > With the source release I have also included a pre-compiled jar file. > > > > The Maven POM file from the source release is also included so that > we > > > > can deploy the released jar to the central Maven repository if the > > > > release vote passes. > > > > > > > > Here's my +1. > > > > > > > > > > > > Andreas Lehmkühler > > > > > > > > > > > > > > > > Release Notes -- Apache FontBox -- Version 0.8.0-incubating > > > > > > > > Introduction > > > > ------------ > > > > > > > > Apache FontBox is an open source Java library for working with PDF > fonts. > > > > > > > > This 0.8.0-incubating release is the first FontBox release made at > the > > > > Apache Software Foundation. The most notable change since the > previous > > > > release (0.2.0) is the renaming of all Java packages from org.fontbox > to > > > > org.apache.fontbox. If you've used FontBox before, you need to update > all > > > > your client code to use the renamed FontBox packages. > > > > > > > > The version number of FontBox was upgraded from 0.2.0 to 0.8.0 to > better > > > > match the version numbering of Apache PDFBox. The -incubating label > > > included > > > > in the version number reflects the incubation status of the project. > See > > > > the disclaimer below for more about incubation. > > > > > > > > See the Apache PDFBox website at http://incubator.apache.org/pdfbox/ > for > > > > more information. > > > > > > > > Release Contents > > > > ---------------- > > > > > > > > This release consists of a source archive > > > > (fontbox-0.8.0-incubating-src.jar). > > > > You can build the release with Apache Ant like this: > > > > > > > > jar xf fontbox-0.8.0-incubating-src.jar > > > > cd fontbox-0.8.0 > > > > ant > > > > > > > > The source archive is accompanied by SHA1 and MD5 checksums and a PGP > > > > signature that you can use to verify the authenticity of your > download. > > > > The public key used for the PGP signature can be found at > > > > https://svn.apache.org/repos/asf/incubator/pdfbox/KEYS. > > > > > > > > Disclaimer > > > > ---------- > > > > > > > > Apache PDFBox is an effort undergoing incubation at The Apache > Software > > > > Foundation (ASF), sponsored by the Apache Incubator PMC. Incubation > is > > > > required of all newly accepted projects until a further review > indicates > > > > that the infrastructure, communications, and decision making process > have > > > > stabilized in a manner consistent with other successful ASF projects. > > > While > > > > incubation status is not necessarily a reflection of the completeness > or > > > > stability of the code, it does indicate that the project has yet to > be > > > fully > > > > endorsed by the ASF. > > > > > > > > See http://incubator.apache.org/projects/pdfbox.html for the current > > > > incubation status of the Apache PDFBox project. > > > > > > > > > > > > > > > Jeremias Maerki > > > > > > > > > > --- original Nachricht Ende ---- > > > > > Jeremias Maerki > > --- original Nachricht Ende ----