On Wed, Mar 26, 2008 at 10:07 AM, Stefano Bagnara <[EMAIL PROTECTED]> wrote: > Robert Burrell Donkin ha scritto: > > looks good > > > > only possible issue are those PITA poms without license headers in the > > stage directory :-/ > > IIRC the issue has been raised [1] in legal-discuss and in repository > lists but we had no solution to the fact that most poms in the maven > repository have no license headers.
the real problem is the complete lack of auditable process involved: there's no way to track down who did what when > For jSieve you found that we had false dependencies and worked out a > good solution that allowed us to remove the whole stage folder (that I > repeat we simply introduced to satisfy a request by Noel to not use > remote repositories to retrieve dependencies during a build). I'm not > sure this can be done for jSPF. > > I can raise the issue again on legal discuss but I don't think it is > good to stop releasing because of this issue while all of other PMC are > releasing. the members delegate supervision of each project to it's PMC. the JAMES PPMC is responsible for it's releases. in addition, i'm unaware of any other projects that ship staging repositories in the way that JAMES does. > Given the current answers we have on the topic I'm not even > sure that the jSieve solution is ok: is it ok for an ASF product to > require remote inclusion of artifacts (POM/metadata) under an unknown > license? distributing documents of unknown provenance within a release is clearly and simply unacceptable jsieve does not do this. a user may download temporary POMs without licenses but maven does this all the time anyway. jsieve has an ant build and anyone who wants to avoid this problem can use that instead. > Either the ASF board take a position on the maven repository poms/xmls > or IMHO we can *temporarily* ignore the issue as everyone else is doing. i'm on the legal committee so that's hard for me to ignore the issue > Maybe you, Noel, Danny or other more experienced ASF members are more > entitled in understanding the entity of this issue and ask the Board to > take this issue into consideration and give us an answer about what to do. no experience is requried to take this to the board, anyone on the PPMC can do ot. indeed, it would probably be better if you did it. - robert --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
