You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@helix.apache.org by kishore g <g....@gmail.com> on 2015/04/13 03:57:13 UTC

helix-ui dependency

Helix-ui module has the following dependencies (close to 100).

Are the licenses are compatible. Also do we need all these jars, can we
eclude the ones we don't need?

validation-api-1.1.0.Final.jar
javax.servlet-api-3.1.0.jar
javax.ws.rs-api-2.0.1.jar
javax.annotation-api-1.2.jar
dropwizard-core-0.8.0.jar
dropwizard-util-0.8.0.jar
jackson-annotations-2.5.0.jar
guava-18.0.jar
jsr305-3.0.0.jar
joda-time-2.7.jar
dropwizard-jackson-0.8.0.jar
jackson-core-2.5.1.jar
jackson-databind-2.5.1.jar
jackson-datatype-jdk7-2.5.1.jar
jackson-datatype-guava-2.5.1.jar
jackson-module-afterburner-2.5.1.jar
jackson-datatype-joda-2.5.1.jar
slf4j-api-1.7.10.jar
logback-classic-1.1.2.jar
logback-core-1.1.2.jar
dropwizard-validation-0.8.0.jar
hibernate-validator-5.1.3.Final.jar
jboss-logging-3.1.3.GA.jar
classmate-1.0.0.jar
javax.el-3.0.0.jar
dropwizard-configuration-0.8.0.jar
jackson-dataformat-yaml-2.5.1.jar
snakeyaml-1.12.jar
commons-lang3-3.3.2.jar
dropwizard-logging-0.8.0.jar
metrics-logback-3.1.0.jar
metrics-core-3.1.0.jar
jul-to-slf4j-1.7.10.jar
log4j-over-slf4j-1.7.10.jar
jcl-over-slf4j-1.7.10.jar
jetty-util-9.2.9.v20150224.jar
dropwizard-metrics-0.8.0.jar
dropwizard-lifecycle-0.8.0.jar
jetty-server-9.2.9.v20150224.jar
jetty-http-9.2.9.v20150224.jar
jetty-io-9.2.9.v20150224.jar
dropwizard-jersey-0.8.0.jar
jersey-server-2.16.jar
jersey-common-2.16.jar
jersey-guava-2.16.jar
hk2-api-2.4.0-b09.jar
hk2-utils-2.4.0-b09.jar
aopalliance-repackaged-2.4.0-b09.jar
javax.inject-2.4.0-b09.jar
hk2-locator-2.4.0-b09.jar
javassist-3.18.1-GA.jar
osgi-resource-locator-1.0.1.jar
jersey-client-2.16.jar
jersey-media-jaxb-2.16.jar
jersey-metainf-services-2.16.jar
metrics-jersey2-3.1.0.jar
metrics-annotation-3.1.0.jar
jackson-jaxrs-json-provider-2.5.1.jar
jackson-jaxrs-base-2.5.1.jar
jackson-module-jaxb-annotations-2.5.1.jar
jersey-container-servlet-2.16.jar
jersey-container-servlet-core-2.16.jar
jetty-webapp-9.2.9.v20150224.jar
jetty-xml-9.2.9.v20150224.jar
jetty-servlet-9.2.9.v20150224.jar
jetty-security-9.2.9.v20150224.jar
jetty-continuation-9.2.9.v20150224.jar
dropwizard-servlets-0.8.0.jar
dropwizard-jetty-0.8.0.jar
metrics-jetty9-3.1.0.jar
jetty-servlets-9.2.9.v20150224.jar
metrics-jvm-3.1.0.jar
metrics-servlets-3.1.0.jar
metrics-healthchecks-3.1.0.jar
metrics-json-3.1.0.jar
argparse4j-0.4.4.jar
jetty-setuid-java-1.0.2.jar
dropwizard-assets-0.8.0.jar
dropwizard-views-freemarker-0.8.0.jar
dropwizard-views-0.8.0.jar
freemarker-2.3.21.jar
zookeeper-3.3.4.jar
jline-0.9.94.jar
jackson-core-asl-1.8.5.jar
jackson-mapper-asl-1.8.5.jar
commons-io-2.2.jar
commons-cli-1.2.jar
zkclient-0.1.jar
commons-math-2.1.jar
commons-codec-1.6.jar
testng-6.0.1.jar
junit-4.11.jar
hamcrest-core-1.3.jar
bsh-2.0b4.jar
jcommander-1.12.jar

Re: helix-ui dependency

Posted by Olivier Lamy <ol...@apache.org>.
Dual license are not problem (as long as there is a conform one) (not we
could easily use log4j2 and maybe cxf instead of logback and jersey but
those are not a problem :-) ).

But beanshell is a problem.

Olivier

On 13 April 2015 at 12:40, Greg Brandt <br...@gmail.com> wrote:

> I've attached licenses.xml result of running "mvn
> license:download-licenses -f helix-ui/pom.xml"
>
> There are some with LGPL, so helix-ui is not in accordance with
> https://www.apache.org/legal/resolved.html#category-x
>
> It may make sense to move helix-ui to contributors/helix-ui.
>
> -Greg
>
> On Sun, Apr 12, 2015 at 6:57 PM, kishore g <g....@gmail.com> wrote:
>
>> Helix-ui module has the following dependencies (close to 100).
>>
>> Are the licenses are compatible. Also do we need all these jars, can we
>> eclude the ones we don't need?
>>
>> validation-api-1.1.0.Final.jar
>> javax.servlet-api-3.1.0.jar
>> javax.ws.rs-api-2.0.1.jar
>> javax.annotation-api-1.2.jar
>> dropwizard-core-0.8.0.jar
>> dropwizard-util-0.8.0.jar
>> jackson-annotations-2.5.0.jar
>> guava-18.0.jar
>> jsr305-3.0.0.jar
>> joda-time-2.7.jar
>> dropwizard-jackson-0.8.0.jar
>> jackson-core-2.5.1.jar
>> jackson-databind-2.5.1.jar
>> jackson-datatype-jdk7-2.5.1.jar
>> jackson-datatype-guava-2.5.1.jar
>> jackson-module-afterburner-2.5.1.jar
>> jackson-datatype-joda-2.5.1.jar
>> slf4j-api-1.7.10.jar
>> logback-classic-1.1.2.jar
>> logback-core-1.1.2.jar
>> dropwizard-validation-0.8.0.jar
>> hibernate-validator-5.1.3.Final.jar
>> jboss-logging-3.1.3.GA.jar
>> classmate-1.0.0.jar
>> javax.el-3.0.0.jar
>> dropwizard-configuration-0.8.0.jar
>> jackson-dataformat-yaml-2.5.1.jar
>> snakeyaml-1.12.jar
>> commons-lang3-3.3.2.jar
>> dropwizard-logging-0.8.0.jar
>> metrics-logback-3.1.0.jar
>> metrics-core-3.1.0.jar
>> jul-to-slf4j-1.7.10.jar
>> log4j-over-slf4j-1.7.10.jar
>> jcl-over-slf4j-1.7.10.jar
>> jetty-util-9.2.9.v20150224.jar
>> dropwizard-metrics-0.8.0.jar
>> dropwizard-lifecycle-0.8.0.jar
>> jetty-server-9.2.9.v20150224.jar
>> jetty-http-9.2.9.v20150224.jar
>> jetty-io-9.2.9.v20150224.jar
>> dropwizard-jersey-0.8.0.jar
>> jersey-server-2.16.jar
>> jersey-common-2.16.jar
>> jersey-guava-2.16.jar
>> hk2-api-2.4.0-b09.jar
>> hk2-utils-2.4.0-b09.jar
>> aopalliance-repackaged-2.4.0-b09.jar
>> javax.inject-2.4.0-b09.jar
>> hk2-locator-2.4.0-b09.jar
>> javassist-3.18.1-GA.jar
>> osgi-resource-locator-1.0.1.jar
>> jersey-client-2.16.jar
>> jersey-media-jaxb-2.16.jar
>> jersey-metainf-services-2.16.jar
>> metrics-jersey2-3.1.0.jar
>> metrics-annotation-3.1.0.jar
>> jackson-jaxrs-json-provider-2.5.1.jar
>> jackson-jaxrs-base-2.5.1.jar
>> jackson-module-jaxb-annotations-2.5.1.jar
>> jersey-container-servlet-2.16.jar
>> jersey-container-servlet-core-2.16.jar
>> jetty-webapp-9.2.9.v20150224.jar
>> jetty-xml-9.2.9.v20150224.jar
>> jetty-servlet-9.2.9.v20150224.jar
>> jetty-security-9.2.9.v20150224.jar
>> jetty-continuation-9.2.9.v20150224.jar
>> dropwizard-servlets-0.8.0.jar
>> dropwizard-jetty-0.8.0.jar
>> metrics-jetty9-3.1.0.jar
>> jetty-servlets-9.2.9.v20150224.jar
>> metrics-jvm-3.1.0.jar
>> metrics-servlets-3.1.0.jar
>> metrics-healthchecks-3.1.0.jar
>> metrics-json-3.1.0.jar
>> argparse4j-0.4.4.jar
>> jetty-setuid-java-1.0.2.jar
>> dropwizard-assets-0.8.0.jar
>> dropwizard-views-freemarker-0.8.0.jar
>> dropwizard-views-0.8.0.jar
>> freemarker-2.3.21.jar
>> zookeeper-3.3.4.jar
>> jline-0.9.94.jar
>> jackson-core-asl-1.8.5.jar
>> jackson-mapper-asl-1.8.5.jar
>> commons-io-2.2.jar
>> commons-cli-1.2.jar
>> zkclient-0.1.jar
>> commons-math-2.1.jar
>> commons-codec-1.6.jar
>> testng-6.0.1.jar
>> junit-4.11.jar
>> hamcrest-core-1.3.jar
>> bsh-2.0b4.jar
>> jcommander-1.12.jar
>>
>
>


-- 
Olivier Lamy
http://twitter.com/olamy | http://linkedin.com/in/olamy

Re: helix-ui dependency

Posted by Greg Brandt <br...@gmail.com>.
Also, it looks like helix-core has same issue (though my guess is test
scope makes it not matter):

[INFO]
------------------------------------------------------------------------
[INFO] Building Apache Helix :: Core 0.7.2-SNAPSHOT
[INFO]
------------------------------------------------------------------------
[INFO]
[INFO] --- maven-dependency-plugin:2.8:tree (default-cli) @ helix-core ---
[INFO] org.apache.helix:helix-core:bundle:0.7.2-SNAPSHOT
[INFO] +- log4j:log4j:jar:1.2.15:compile
[INFO] +- org.apache.zookeeper:zookeeper:jar:3.3.4:compile
[INFO] |  \- jline:jline:jar:0.9.94:compile
[INFO] +- org.codehaus.jackson:jackson-core-asl:jar:1.8.5:compile
[INFO] +- org.codehaus.jackson:jackson-mapper-asl:jar:1.8.5:compile
[INFO] +- commons-io:commons-io:jar:2.2:compile
[INFO] +- commons-cli:commons-cli:jar:1.2:compile
[INFO] +- com.github.sgroschupf:zkclient:jar:0.1:compile
[INFO] +- org.testng:testng:jar:6.0.1:test
*[INFO] |  +- org.beanshell:bsh:jar:2.0b4:test*
[INFO] |  \- com.beust:jcommander:jar:1.12:test
[INFO] +- org.mockito:mockito-all:jar:1.9.5:test
[INFO] +- org.apache.commons:commons-math:jar:2.1:compile
[INFO] +- commons-codec:commons-codec:jar:1.6:compile
[INFO] +- com.google.guava:guava:jar:15.0:compile
[INFO] \- org.yaml:snakeyaml:jar:1.12:compile


On Sun, Apr 12, 2015 at 7:53 PM, Greg Brandt <br...@gmail.com> wrote:

> org.beanshell.bsh is being pulled in by testng:
>
> [INFO] \- org.testng:testng:jar:6.0.1:provided
> [INFO]    +- junit:junit:jar:4.11:test
> [INFO]    |  \- org.hamcrest:hamcrest-core:jar:1.3:test
> [INFO]    +- org.beanshell:bsh:jar:2.0b4:provided
> [INFO]    \- com.beust:jcommander:jar:1.12:provided
>
> For better or worse, there are no tests for helix-ui (yet), but if we
> change the scope of org.testng:testng to test, does that solve the problem?
>
> -Greg
>
> On Sun, Apr 12, 2015 at 7:50 PM, Kanak Biscuitwala <ka...@hotmail.com>
> wrote:
>
>> Taking a quick look, the only dependency that is LGPL and isn't
>> dual-license with Apache, Eclipse, or similar is org.beanshell.bsh. Is this
>> dependency critical? If not, we can just add a Maven exclusion.
>>
>> ________________________________
>> > From: brandt.greg@gmail.com
>> > Date: Sun, 12 Apr 2015 19:40:44 -0700
>> > Subject: Re: helix-ui dependency
>> > To: dev@helix.apache.org
>> >
>> > I've attached licenses.xml result of running "mvn
>> > license:download-licenses -f helix-ui/pom.xml"
>> >
>> > There are some with LGPL, so helix-ui is not in accordance with
>> > https://www.apache.org/legal/resolved.html#category-x
>> >
>> > It may make sense to move helix-ui to contributors/helix-ui.
>> >
>> > -Greg
>> >
>> > On Sun, Apr 12, 2015 at 6:57 PM, kishore g
>> > <g....@gmail.com>> wrote:
>> > Helix-ui module has the following dependencies (close to 100).
>> >
>> > Are the licenses are compatible. Also do we need all these jars, can we
>> > eclude the ones we don't need?
>> >
>> > validation-api-1.1.0.Final.jar
>> > javax.servlet-api-3.1.0.jar
>> > javax.ws.rs-api-2.0.1.jar
>> > javax.annotation-api-1.2.jar
>> > dropwizard-core-0.8.0.jar
>> > dropwizard-util-0.8.0.jar
>> > jackson-annotations-2.5.0.jar
>> > guava-18.0.jar
>> > jsr305-3.0.0.jar
>> > joda-time-2.7.jar
>> > dropwizard-jackson-0.8.0.jar
>> > jackson-core-2.5.1.jar
>> > jackson-databind-2.5.1.jar
>> > jackson-datatype-jdk7-2.5.1.jar
>> > jackson-datatype-guava-2.5.1.jar
>> > jackson-module-afterburner-2.5.1.jar
>> > jackson-datatype-joda-2.5.1.jar
>> > slf4j-api-1.7.10.jar
>> > logback-classic-1.1.2.jar
>> > logback-core-1.1.2.jar
>> > dropwizard-validation-0.8.0.jar
>> > hibernate-validator-5.1.3.Final.jar
>> > jboss-logging-3.1.3.GA.jar
>> > classmate-1.0.0.jar
>> > javax.el-3.0.0.jar
>> > dropwizard-configuration-0.8.0.jar
>> > jackson-dataformat-yaml-2.5.1.jar
>> > snakeyaml-1.12.jar
>> > commons-lang3-3.3.2.jar
>> > dropwizard-logging-0.8.0.jar
>> > metrics-logback-3.1.0.jar
>> > metrics-core-3.1.0.jar
>> > jul-to-slf4j-1.7.10.jar
>> > log4j-over-slf4j-1.7.10.jar
>> > jcl-over-slf4j-1.7.10.jar
>> > jetty-util-9.2.9.v20150224.jar
>> > dropwizard-metrics-0.8.0.jar
>> > dropwizard-lifecycle-0.8.0.jar
>> > jetty-server-9.2.9.v20150224.jar
>> > jetty-http-9.2.9.v20150224.jar
>> > jetty-io-9.2.9.v20150224.jar
>> > dropwizard-jersey-0.8.0.jar
>> > jersey-server-2.16.jar
>> > jersey-common-2.16.jar
>> > jersey-guava-2.16.jar
>> > hk2-api-2.4.0-b09.jar
>> > hk2-utils-2.4.0-b09.jar
>> > aopalliance-repackaged-2.4.0-b09.jar
>> > javax.inject-2.4.0-b09.jar
>> > hk2-locator-2.4.0-b09.jar
>> > javassist-3.18.1-GA.jar
>> > osgi-resource-locator-1.0.1.jar
>> > jersey-client-2.16.jar
>> > jersey-media-jaxb-2.16.jar
>> > jersey-metainf-services-2.16.jar
>> > metrics-jersey2-3.1.0.jar
>> > metrics-annotation-3.1.0.jar
>> > jackson-jaxrs-json-provider-2.5.1.jar
>> > jackson-jaxrs-base-2.5.1.jar
>> > jackson-module-jaxb-annotations-2.5.1.jar
>> > jersey-container-servlet-2.16.jar
>> > jersey-container-servlet-core-2.16.jar
>> > jetty-webapp-9.2.9.v20150224.jar
>> > jetty-xml-9.2.9.v20150224.jar
>> > jetty-servlet-9.2.9.v20150224.jar
>> > jetty-security-9.2.9.v20150224.jar
>> > jetty-continuation-9.2.9.v20150224.jar
>> > dropwizard-servlets-0.8.0.jar
>> > dropwizard-jetty-0.8.0.jar
>> > metrics-jetty9-3.1.0.jar
>> > jetty-servlets-9.2.9.v20150224.jar
>> > metrics-jvm-3.1.0.jar
>> > metrics-servlets-3.1.0.jar
>> > metrics-healthchecks-3.1.0.jar
>> > metrics-json-3.1.0.jar
>> > argparse4j-0.4.4.jar
>> > jetty-setuid-java-1.0.2.jar
>> > dropwizard-assets-0.8.0.jar
>> > dropwizard-views-freemarker-0.8.0.jar
>> > dropwizard-views-0.8.0.jar
>> > freemarker-2.3.21.jar
>> > zookeeper-3.3.4.jar
>> > jline-0.9.94.jar
>> > jackson-core-asl-1.8.5.jar
>> > jackson-mapper-asl-1.8.5.jar
>> > commons-io-2.2.jar
>> > commons-cli-1.2.jar
>> > zkclient-0.1.jar
>> > commons-math-2.1.jar
>> > commons-codec-1.6.jar
>> > testng-6.0.1.jar
>> > junit-4.11.jar
>> > hamcrest-core-1.3.jar
>> > bsh-2.0b4.jar
>> > jcommander-1.12.jar
>> >
>>
>>
>
>

Re: helix-ui dependency

Posted by Greg Brandt <br...@gmail.com>.
org.beanshell.bsh is being pulled in by testng:

[INFO] \- org.testng:testng:jar:6.0.1:provided
[INFO]    +- junit:junit:jar:4.11:test
[INFO]    |  \- org.hamcrest:hamcrest-core:jar:1.3:test
[INFO]    +- org.beanshell:bsh:jar:2.0b4:provided
[INFO]    \- com.beust:jcommander:jar:1.12:provided

For better or worse, there are no tests for helix-ui (yet), but if we
change the scope of org.testng:testng to test, does that solve the problem?

-Greg

On Sun, Apr 12, 2015 at 7:50 PM, Kanak Biscuitwala <ka...@hotmail.com>
wrote:

> Taking a quick look, the only dependency that is LGPL and isn't
> dual-license with Apache, Eclipse, or similar is org.beanshell.bsh. Is this
> dependency critical? If not, we can just add a Maven exclusion.
>
> ________________________________
> > From: brandt.greg@gmail.com
> > Date: Sun, 12 Apr 2015 19:40:44 -0700
> > Subject: Re: helix-ui dependency
> > To: dev@helix.apache.org
> >
> > I've attached licenses.xml result of running "mvn
> > license:download-licenses -f helix-ui/pom.xml"
> >
> > There are some with LGPL, so helix-ui is not in accordance with
> > https://www.apache.org/legal/resolved.html#category-x
> >
> > It may make sense to move helix-ui to contributors/helix-ui.
> >
> > -Greg
> >
> > On Sun, Apr 12, 2015 at 6:57 PM, kishore g
> > <g....@gmail.com>> wrote:
> > Helix-ui module has the following dependencies (close to 100).
> >
> > Are the licenses are compatible. Also do we need all these jars, can we
> > eclude the ones we don't need?
> >
> > validation-api-1.1.0.Final.jar
> > javax.servlet-api-3.1.0.jar
> > javax.ws.rs-api-2.0.1.jar
> > javax.annotation-api-1.2.jar
> > dropwizard-core-0.8.0.jar
> > dropwizard-util-0.8.0.jar
> > jackson-annotations-2.5.0.jar
> > guava-18.0.jar
> > jsr305-3.0.0.jar
> > joda-time-2.7.jar
> > dropwizard-jackson-0.8.0.jar
> > jackson-core-2.5.1.jar
> > jackson-databind-2.5.1.jar
> > jackson-datatype-jdk7-2.5.1.jar
> > jackson-datatype-guava-2.5.1.jar
> > jackson-module-afterburner-2.5.1.jar
> > jackson-datatype-joda-2.5.1.jar
> > slf4j-api-1.7.10.jar
> > logback-classic-1.1.2.jar
> > logback-core-1.1.2.jar
> > dropwizard-validation-0.8.0.jar
> > hibernate-validator-5.1.3.Final.jar
> > jboss-logging-3.1.3.GA.jar
> > classmate-1.0.0.jar
> > javax.el-3.0.0.jar
> > dropwizard-configuration-0.8.0.jar
> > jackson-dataformat-yaml-2.5.1.jar
> > snakeyaml-1.12.jar
> > commons-lang3-3.3.2.jar
> > dropwizard-logging-0.8.0.jar
> > metrics-logback-3.1.0.jar
> > metrics-core-3.1.0.jar
> > jul-to-slf4j-1.7.10.jar
> > log4j-over-slf4j-1.7.10.jar
> > jcl-over-slf4j-1.7.10.jar
> > jetty-util-9.2.9.v20150224.jar
> > dropwizard-metrics-0.8.0.jar
> > dropwizard-lifecycle-0.8.0.jar
> > jetty-server-9.2.9.v20150224.jar
> > jetty-http-9.2.9.v20150224.jar
> > jetty-io-9.2.9.v20150224.jar
> > dropwizard-jersey-0.8.0.jar
> > jersey-server-2.16.jar
> > jersey-common-2.16.jar
> > jersey-guava-2.16.jar
> > hk2-api-2.4.0-b09.jar
> > hk2-utils-2.4.0-b09.jar
> > aopalliance-repackaged-2.4.0-b09.jar
> > javax.inject-2.4.0-b09.jar
> > hk2-locator-2.4.0-b09.jar
> > javassist-3.18.1-GA.jar
> > osgi-resource-locator-1.0.1.jar
> > jersey-client-2.16.jar
> > jersey-media-jaxb-2.16.jar
> > jersey-metainf-services-2.16.jar
> > metrics-jersey2-3.1.0.jar
> > metrics-annotation-3.1.0.jar
> > jackson-jaxrs-json-provider-2.5.1.jar
> > jackson-jaxrs-base-2.5.1.jar
> > jackson-module-jaxb-annotations-2.5.1.jar
> > jersey-container-servlet-2.16.jar
> > jersey-container-servlet-core-2.16.jar
> > jetty-webapp-9.2.9.v20150224.jar
> > jetty-xml-9.2.9.v20150224.jar
> > jetty-servlet-9.2.9.v20150224.jar
> > jetty-security-9.2.9.v20150224.jar
> > jetty-continuation-9.2.9.v20150224.jar
> > dropwizard-servlets-0.8.0.jar
> > dropwizard-jetty-0.8.0.jar
> > metrics-jetty9-3.1.0.jar
> > jetty-servlets-9.2.9.v20150224.jar
> > metrics-jvm-3.1.0.jar
> > metrics-servlets-3.1.0.jar
> > metrics-healthchecks-3.1.0.jar
> > metrics-json-3.1.0.jar
> > argparse4j-0.4.4.jar
> > jetty-setuid-java-1.0.2.jar
> > dropwizard-assets-0.8.0.jar
> > dropwizard-views-freemarker-0.8.0.jar
> > dropwizard-views-0.8.0.jar
> > freemarker-2.3.21.jar
> > zookeeper-3.3.4.jar
> > jline-0.9.94.jar
> > jackson-core-asl-1.8.5.jar
> > jackson-mapper-asl-1.8.5.jar
> > commons-io-2.2.jar
> > commons-cli-1.2.jar
> > zkclient-0.1.jar
> > commons-math-2.1.jar
> > commons-codec-1.6.jar
> > testng-6.0.1.jar
> > junit-4.11.jar
> > hamcrest-core-1.3.jar
> > bsh-2.0b4.jar
> > jcommander-1.12.jar
> >
>
>

RE: helix-ui dependency

Posted by Kanak Biscuitwala <ka...@hotmail.com>.
Taking a quick look, the only dependency that is LGPL and isn't dual-license with Apache, Eclipse, or similar is org.beanshell.bsh. Is this dependency critical? If not, we can just add a Maven exclusion.

________________________________
> From: brandt.greg@gmail.com 
> Date: Sun, 12 Apr 2015 19:40:44 -0700 
> Subject: Re: helix-ui dependency 
> To: dev@helix.apache.org 
> 
> I've attached licenses.xml result of running "mvn 
> license:download-licenses -f helix-ui/pom.xml" 
> 
> There are some with LGPL, so helix-ui is not in accordance with 
> https://www.apache.org/legal/resolved.html#category-x 
> 
> It may make sense to move helix-ui to contributors/helix-ui. 
> 
> -Greg 
> 
> On Sun, Apr 12, 2015 at 6:57 PM, kishore g 
> <g....@gmail.com>> wrote: 
> Helix-ui module has the following dependencies (close to 100). 
> 
> Are the licenses are compatible. Also do we need all these jars, can we 
> eclude the ones we don't need? 
> 
> validation-api-1.1.0.Final.jar 
> javax.servlet-api-3.1.0.jar 
> javax.ws.rs-api-2.0.1.jar 
> javax.annotation-api-1.2.jar 
> dropwizard-core-0.8.0.jar 
> dropwizard-util-0.8.0.jar 
> jackson-annotations-2.5.0.jar 
> guava-18.0.jar 
> jsr305-3.0.0.jar 
> joda-time-2.7.jar 
> dropwizard-jackson-0.8.0.jar 
> jackson-core-2.5.1.jar 
> jackson-databind-2.5.1.jar 
> jackson-datatype-jdk7-2.5.1.jar 
> jackson-datatype-guava-2.5.1.jar 
> jackson-module-afterburner-2.5.1.jar 
> jackson-datatype-joda-2.5.1.jar 
> slf4j-api-1.7.10.jar 
> logback-classic-1.1.2.jar 
> logback-core-1.1.2.jar 
> dropwizard-validation-0.8.0.jar 
> hibernate-validator-5.1.3.Final.jar 
> jboss-logging-3.1.3.GA.jar 
> classmate-1.0.0.jar 
> javax.el-3.0.0.jar 
> dropwizard-configuration-0.8.0.jar 
> jackson-dataformat-yaml-2.5.1.jar 
> snakeyaml-1.12.jar 
> commons-lang3-3.3.2.jar 
> dropwizard-logging-0.8.0.jar 
> metrics-logback-3.1.0.jar 
> metrics-core-3.1.0.jar 
> jul-to-slf4j-1.7.10.jar 
> log4j-over-slf4j-1.7.10.jar 
> jcl-over-slf4j-1.7.10.jar 
> jetty-util-9.2.9.v20150224.jar 
> dropwizard-metrics-0.8.0.jar 
> dropwizard-lifecycle-0.8.0.jar 
> jetty-server-9.2.9.v20150224.jar 
> jetty-http-9.2.9.v20150224.jar 
> jetty-io-9.2.9.v20150224.jar 
> dropwizard-jersey-0.8.0.jar 
> jersey-server-2.16.jar 
> jersey-common-2.16.jar 
> jersey-guava-2.16.jar 
> hk2-api-2.4.0-b09.jar 
> hk2-utils-2.4.0-b09.jar 
> aopalliance-repackaged-2.4.0-b09.jar 
> javax.inject-2.4.0-b09.jar 
> hk2-locator-2.4.0-b09.jar 
> javassist-3.18.1-GA.jar 
> osgi-resource-locator-1.0.1.jar 
> jersey-client-2.16.jar 
> jersey-media-jaxb-2.16.jar 
> jersey-metainf-services-2.16.jar 
> metrics-jersey2-3.1.0.jar 
> metrics-annotation-3.1.0.jar 
> jackson-jaxrs-json-provider-2.5.1.jar 
> jackson-jaxrs-base-2.5.1.jar 
> jackson-module-jaxb-annotations-2.5.1.jar 
> jersey-container-servlet-2.16.jar 
> jersey-container-servlet-core-2.16.jar 
> jetty-webapp-9.2.9.v20150224.jar 
> jetty-xml-9.2.9.v20150224.jar 
> jetty-servlet-9.2.9.v20150224.jar 
> jetty-security-9.2.9.v20150224.jar 
> jetty-continuation-9.2.9.v20150224.jar 
> dropwizard-servlets-0.8.0.jar 
> dropwizard-jetty-0.8.0.jar 
> metrics-jetty9-3.1.0.jar 
> jetty-servlets-9.2.9.v20150224.jar 
> metrics-jvm-3.1.0.jar 
> metrics-servlets-3.1.0.jar 
> metrics-healthchecks-3.1.0.jar 
> metrics-json-3.1.0.jar 
> argparse4j-0.4.4.jar 
> jetty-setuid-java-1.0.2.jar 
> dropwizard-assets-0.8.0.jar 
> dropwizard-views-freemarker-0.8.0.jar 
> dropwizard-views-0.8.0.jar 
> freemarker-2.3.21.jar 
> zookeeper-3.3.4.jar 
> jline-0.9.94.jar 
> jackson-core-asl-1.8.5.jar 
> jackson-mapper-asl-1.8.5.jar 
> commons-io-2.2.jar 
> commons-cli-1.2.jar 
> zkclient-0.1.jar 
> commons-math-2.1.jar 
> commons-codec-1.6.jar 
> testng-6.0.1.jar 
> junit-4.11.jar 
> hamcrest-core-1.3.jar 
> bsh-2.0b4.jar 
> jcommander-1.12.jar 
> 
 		 	   		  

Re: helix-ui dependency

Posted by Greg Brandt <br...@gmail.com>.
I've attached licenses.xml result of running "mvn license:download-licenses
-f helix-ui/pom.xml"

There are some with LGPL, so helix-ui is not in accordance with
https://www.apache.org/legal/resolved.html#category-x

It may make sense to move helix-ui to contributors/helix-ui.

-Greg

On Sun, Apr 12, 2015 at 6:57 PM, kishore g <g....@gmail.com> wrote:

> Helix-ui module has the following dependencies (close to 100).
>
> Are the licenses are compatible. Also do we need all these jars, can we
> eclude the ones we don't need?
>
> validation-api-1.1.0.Final.jar
> javax.servlet-api-3.1.0.jar
> javax.ws.rs-api-2.0.1.jar
> javax.annotation-api-1.2.jar
> dropwizard-core-0.8.0.jar
> dropwizard-util-0.8.0.jar
> jackson-annotations-2.5.0.jar
> guava-18.0.jar
> jsr305-3.0.0.jar
> joda-time-2.7.jar
> dropwizard-jackson-0.8.0.jar
> jackson-core-2.5.1.jar
> jackson-databind-2.5.1.jar
> jackson-datatype-jdk7-2.5.1.jar
> jackson-datatype-guava-2.5.1.jar
> jackson-module-afterburner-2.5.1.jar
> jackson-datatype-joda-2.5.1.jar
> slf4j-api-1.7.10.jar
> logback-classic-1.1.2.jar
> logback-core-1.1.2.jar
> dropwizard-validation-0.8.0.jar
> hibernate-validator-5.1.3.Final.jar
> jboss-logging-3.1.3.GA.jar
> classmate-1.0.0.jar
> javax.el-3.0.0.jar
> dropwizard-configuration-0.8.0.jar
> jackson-dataformat-yaml-2.5.1.jar
> snakeyaml-1.12.jar
> commons-lang3-3.3.2.jar
> dropwizard-logging-0.8.0.jar
> metrics-logback-3.1.0.jar
> metrics-core-3.1.0.jar
> jul-to-slf4j-1.7.10.jar
> log4j-over-slf4j-1.7.10.jar
> jcl-over-slf4j-1.7.10.jar
> jetty-util-9.2.9.v20150224.jar
> dropwizard-metrics-0.8.0.jar
> dropwizard-lifecycle-0.8.0.jar
> jetty-server-9.2.9.v20150224.jar
> jetty-http-9.2.9.v20150224.jar
> jetty-io-9.2.9.v20150224.jar
> dropwizard-jersey-0.8.0.jar
> jersey-server-2.16.jar
> jersey-common-2.16.jar
> jersey-guava-2.16.jar
> hk2-api-2.4.0-b09.jar
> hk2-utils-2.4.0-b09.jar
> aopalliance-repackaged-2.4.0-b09.jar
> javax.inject-2.4.0-b09.jar
> hk2-locator-2.4.0-b09.jar
> javassist-3.18.1-GA.jar
> osgi-resource-locator-1.0.1.jar
> jersey-client-2.16.jar
> jersey-media-jaxb-2.16.jar
> jersey-metainf-services-2.16.jar
> metrics-jersey2-3.1.0.jar
> metrics-annotation-3.1.0.jar
> jackson-jaxrs-json-provider-2.5.1.jar
> jackson-jaxrs-base-2.5.1.jar
> jackson-module-jaxb-annotations-2.5.1.jar
> jersey-container-servlet-2.16.jar
> jersey-container-servlet-core-2.16.jar
> jetty-webapp-9.2.9.v20150224.jar
> jetty-xml-9.2.9.v20150224.jar
> jetty-servlet-9.2.9.v20150224.jar
> jetty-security-9.2.9.v20150224.jar
> jetty-continuation-9.2.9.v20150224.jar
> dropwizard-servlets-0.8.0.jar
> dropwizard-jetty-0.8.0.jar
> metrics-jetty9-3.1.0.jar
> jetty-servlets-9.2.9.v20150224.jar
> metrics-jvm-3.1.0.jar
> metrics-servlets-3.1.0.jar
> metrics-healthchecks-3.1.0.jar
> metrics-json-3.1.0.jar
> argparse4j-0.4.4.jar
> jetty-setuid-java-1.0.2.jar
> dropwizard-assets-0.8.0.jar
> dropwizard-views-freemarker-0.8.0.jar
> dropwizard-views-0.8.0.jar
> freemarker-2.3.21.jar
> zookeeper-3.3.4.jar
> jline-0.9.94.jar
> jackson-core-asl-1.8.5.jar
> jackson-mapper-asl-1.8.5.jar
> commons-io-2.2.jar
> commons-cli-1.2.jar
> zkclient-0.1.jar
> commons-math-2.1.jar
> commons-codec-1.6.jar
> testng-6.0.1.jar
> junit-4.11.jar
> hamcrest-core-1.3.jar
> bsh-2.0b4.jar
> jcommander-1.12.jar
>