[ 
https://issues.apache.org/jira/browse/YARN-5433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15606711#comment-15606711
 ] 

Xiao Chen commented on YARN-5433:
---------------------------------

Thanks [~sjlee0] for working on this (and the ping).

For HADOOP-12893, the 
[spreadsheet|https://docs.google.com/spreadsheets/d/1HL2b4PSdQMZDVJmum1GIKrteFr2oainApTLiJTPnfd4/edit#gid=1060066002]
 has a 'generate.py' tab, containing the code used to generate the L&N (which 
license to skip L&N etc.). Probably an overkill here, but that's more accurate 
than my memory. :)

So:
- No need to add NOTICE for BSD here. See 
https://issues.apache.org/jira/browse/HADOOP-12893?focusedCommentId=15284739&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15284739
 for details.
- MPL and CDDL are ok. We should add it to LICENSE.txt under corresponding 
license. There's already {{servlet-api 2.5}} in there under CPPL1.0, so we can 
skip that.
- Didn't check all, but if there're any dependency with multiple licenses, we 
can choose the most friendly one.

> Audit dependencies for Category-X
> ---------------------------------
>
>                 Key: YARN-5433
>                 URL: https://issues.apache.org/jira/browse/YARN-5433
>             Project: Hadoop YARN
>          Issue Type: Bug
>          Components: timelineserver
>    Affects Versions: 3.0.0-alpha1
>            Reporter: Sean Busbey
>            Assignee: Sangjin Lee
>            Priority: Blocker
>         Attachments: YARN-5433.01.patch
>
>
> Recently phoenix has found some category-x dependencies in their build 
> (PHOENIX-3084, PHOENIX-3091), which also showed some problems in HBase 
> (HBASE-16260).
> Since the Timeline Server work brought in both of these as dependencies, we 
> should make sure we don't have any cat-x dependencies either. From what I've 
> seen in those projects, our choice of HBase version shouldn't be impacted but 
> our Phoenix one is.
> Greping our current dependency list for the timeline server component shows 
> some LGPL:
> {code}
> ...
> [INFO]    net.sourceforge.findbugs:annotations:jar:1.3.2:compile
> ...
> {code}
> I haven't checked the rest of the dependencies that have changed since 
> HADOOP-12893 went in, so ATM I've filed this against YARN since that's where 
> this one example came in.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to