On 08/13/11 02:28, Gavin McDonald wrote:
-----Original Message-----
From: Marshall Schor [mailto:[email protected]]
Sent: Tuesday, 9 August 2011 6:20 AM
To: [email protected]
Subject: ideas for automation
We recently did an exercise whereby for some projects for which we
distribute binaries that include "dependencies", we looked inside the
dependency Jars being distributed to see if there was any unusual license
and notice (and other) files, and we found several; we then manually
merged these into the binary distribution's License and Notice files.
We even found one where there was a "crypto notice" - which of course
required that we add a crypto notice (and update the
apache.org/licenses/exports page).
Some kind of tooling that helps with this process would be a nice addition
-
basically it has to open up dependent Jars that ship with a distribution
and
see if finds anything "interesting" there. It would also be nice if it
mostly
automatically merged the Licenses and Notices while eliminating
duplicates.
Hi Marshall,
thanks, I think if no-one replies soon, it's likely it isn't their itch
'currently' and
best to open a RAT jira ticket so that these ideas don't get lost.
(Apologies for dropping the ball on this one: been recovering and
rebuilding my development boxes)
I recently commit a new component ('Whisker') for this space developed
to help release Apache James 3.0 when we found it too difficult to
manually maintain the legal stuff.
I'll follow up with some more details soon.
Robert
