Re: LGPL dependency

[Jeff Dasch]

Owen,

I added a JIRA [1] to track this and put up a PR [2].  I had to skip
checkstyle and couldn't skip rat, but it appears to build ok.  You should
probably verify on your end before pulling it in.

Also, I'm new to this list and unfamiliar with your roadmap, but do you
have a time frame in mind for a 1.3.0 release?

-Jeff

[1] https://issues.apache.org/jira/browse/GIRAPH-1172
[2] https://github.com/apache/giraph/pull/61

On Fri, Feb 16, 2018 at 1:24 PM, Owen O'Malley 
wrote:

> *sigh* Yeah, we'll need to fix that.
>
> Does someone have time to remove the problematic dependency?
>
> .. Owen
>
>
>
> On Fri, Feb 16, 2018 at 9:37 AM, Jeff Dasch  wrote:
>
> > Hi,
> >
> > I'm a contributor to Apache Rya (incubating), and during our release
> > process we came across an incompatible LGPL dependency that appears to
> > originate from Apache Giraph's dependency on the Findbugs Annotations
> > library.  Our plan [1] right now is to just make Giraph an optional
> module
> > within our project, but I was wondering if you knew any more about that
> > license compatibility.  Based on some quick searches, it looks like
> > Findbugs has since become SpotBugs which is still LGPL.
> >
> > (GNU Lesser Public License) FindBugs-Annotations
> > (com.google.code.findbugs:annotations:2.0.2 -
> > http://findbugs.sourceforge.ne
> > t/)
> >
> > [INFO] org.apache.rya:rya.giraph:jar:3.2.12-incubating
> > [INFO] +- org.apache.giraph:giraph-core:jar:1.2.0:compile
> > [INFO] |  +- com.google.code.findbugs:annotations:jar:2.0.2:compile
> >
> > thanks,
> > -Jeff
> >
> > [1] https://github.com/apache/incubator-rya/pull/274
> >
>

Re: LGPL dependency

[Owen O'Malley]

*sigh* Yeah, we'll need to fix that.

Does someone have time to remove the problematic dependency?

.. Owen



On Fri, Feb 16, 2018 at 9:37 AM, Jeff Dasch  wrote:

> Hi,
>
> I'm a contributor to Apache Rya (incubating), and during our release
> process we came across an incompatible LGPL dependency that appears to
> originate from Apache Giraph's dependency on the Findbugs Annotations
> library.  Our plan [1] right now is to just make Giraph an optional module
> within our project, but I was wondering if you knew any more about that
> license compatibility.  Based on some quick searches, it looks like
> Findbugs has since become SpotBugs which is still LGPL.
>
> (GNU Lesser Public License) FindBugs-Annotations
> (com.google.code.findbugs:annotations:2.0.2 -
> http://findbugs.sourceforge.ne
> t/)
>
> [INFO] org.apache.rya:rya.giraph:jar:3.2.12-incubating
> [INFO] +- org.apache.giraph:giraph-core:jar:1.2.0:compile
> [INFO] |  +- com.google.code.findbugs:annotations:jar:2.0.2:compile
>
> thanks,
> -Jeff
>
> [1] https://github.com/apache/incubator-rya/pull/274
>