[jira] [Commented] (ARTEMIS-3241) binary archive LICENSE file contains improper (and possibly stale) entries for management console deps

["ASF subversion and git services (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/ARTEMIS-3241?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17329145#comment-17329145 ] 

ASF subversion and git services commented on ARTEMIS-3241:
----------------------------------------------------------

Commit 52c5608cc692a00a02f3a05f382e5ea9675e0891 in activemq-artemis's branch refs/heads/main from Domenico Francesco Bruscino
[ https://gitbox.apache.org/repos/asf?p=activemq-artemis.git;h=52c5608 ]

ARTEMIS-3241 Update console packages licenses


> binary archive LICENSE file contains improper (and possibly stale) entries for management console deps
> ------------------------------------------------------------------------------------------------------
>
>                 Key: ARTEMIS-3241
>                 URL: https://issues.apache.org/jira/browse/ARTEMIS-3241
>             Project: ActiveMQ Artemis
>          Issue Type: Bug
>          Components: Web Console
>    Affects Versions: 2.17.0
>            Reporter: Robbie Gemmell
>            Priority: Blocker
>             Fix For: 2.18.0
>
>          Time Spent: 4h 20m
>  Remaining Estimate: 0h
>
> The licence file shipped with the binary distribution contains a lot of improper, and possibly stale (see later), entries relating to the management console deps:
> https://github.com/apache/activemq-artemis/blob/2.17.0/artemis-distribution/src/main/resources/licenses/bin/LICENSE#L256-L435
> These entries added mostly link to a file in an external repository, on its master branch. This applicable licences should actually be in the distribution itself (either directly in LICENCE, or in another file referenced from it), links arent sufficient because their contents can change over time (e.g licence and/or version changes) or even go away entirely or just be broken (e.g branch changes) and so may not actually reflect the needed detail or the state that existed when the dependency was used and the LICENCE file entry added.
> Further, these entries could also be somewhat stale now, because they were added in ARTEMIS-1270 back in 2017 but the console has been overhauled recently in ARTEMIS-2838. In addition to being updated to actually ship the licence, the entries should be verified as still applying, and that there aren't any new ones needed from the console update.
> (Noticed during discussion of LICENSE changes on https://github.com/apache/activemq-artemis/pull/3527 / ARTEMIS-3221)



--
This message was sent by Atlassian Jira
(v8.3.4#803005)