You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@netbeans.apache.org by Matthias Bläsing <mb...@doppel-helix.eu> on 2018/05/23 18:22:36 UTC
Handling of "non-modifiable, but redistributable" third party
artifacts
Hey all,
we have artifacts we will need to distribute, but (potentially) can't
hold in the repository. Apache has a statement on this:
https://www.apache.org/legal/resolved.html#no-modification
I consider this bad practise, as it means the project will depend on
potentially fragile third party hosting.
Legal tickets for these files/licenses are opened, but I'd like to
prepare for the worst-case.
My suggestion is this:
I'll package the files with correct license attribution as maven
artifacts and get them published to maven central. The artifacts would
be packed as jars/zips and this would happen under a personal group id.
The artifacts would not be under the control of the netbeans project,
but they are not expected to be changing (html DTDs, entity
definitions, WSDL Definitions,...) and won't be removed from it.
We are already using maven central to access common artifacts and I
think this would be a good middle ground.
Thoughts?
Matthias
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@netbeans.incubator.apache.org
For additional commands, e-mail: dev-help@netbeans.incubator.apache.org
For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
Re: Handling of "non-modifiable, but redistributable" third party artifacts
Posted by Emilian Bold <em...@protonmail.ch>.
You are talking about https://issues.apache.org/jira/browse/NETBEANS-856
I have opened https://issues.apache.org/jira/browse/LEGAL-387 to clarify what they meant in https://issues.apache.org/jira/browse/LEGAL-111
Let's see what legal says. Maybe we just remove those files from the source zip but we keep it in the repo/binaries. It will be a bit ugly but...
--emi
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On 23 May 2018 9:22 PM, Matthias Bläsing <mb...@doppel-helix.eu> wrote:
> Hey all,
>
> we have artifacts we will need to distribute, but (potentially) can't
>
> hold in the repository. Apache has a statement on this:
>
> https://www.apache.org/legal/resolved.html#no-modification
>
> I consider this bad practise, as it means the project will depend on
>
> potentially fragile third party hosting.
>
> Legal tickets for these files/licenses are opened, but I'd like to
>
> prepare for the worst-case.
>
> My suggestion is this:
>
> I'll package the files with correct license attribution as maven
>
> artifacts and get them published to maven central. The artifacts would
>
> be packed as jars/zips and this would happen under a personal group id.
>
> The artifacts would not be under the control of the netbeans project,
>
> but they are not expected to be changing (html DTDs, entity
>
> definitions, WSDL Definitions,...) and won't be removed from it.
>
> We are already using maven central to access common artifacts and I
>
> think this would be a good middle ground.
>
> Thoughts?
>
> Matthias
>
>
> ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
> To unsubscribe, e-mail: dev-unsubscribe@netbeans.incubator.apache.org
>
> For additional commands, e-mail: dev-help@netbeans.incubator.apache.org
>
> For further information about the NetBeans mailing lists, visit:
>
> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@netbeans.incubator.apache.org
For additional commands, e-mail: dev-help@netbeans.incubator.apache.org
For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
Re: Handling of "non-modifiable, but redistributable" third party
artifacts
Posted by Antonio <an...@vieiro.net>.
Hi Matthias,
Some comments inlined below.
El 23/05/2018 a las 20:22, Matthias Bläsing escribió:
> Hey all,
>
> we have artifacts we will need to distribute, but (potentially) can't
> hold in the repository. Apache has a statement on this:
> [...]
> I'll package the files with correct license attribution as maven
> artifacts and get them published to maven central. The artifacts would
> be packed as jars/zips and this would happen under a personal group id.
> [...]
I think this is the way to go as well. I would extend this from
"artifacts we need to distribute" to (in case of need) "artifacts we
need to compile".
Later on we may want to consider extending "artifacts we need to
compile" to "Third party NBM modules (non APLv2 compatible) that users
want to install".
Finally, I wouldn't use a "personal group id" but a "group of personal
ids". This is, I think we should be creating a github repo, have people
involved, and then sign those artifacts together, if possible.
Kind regards,
Antonio
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@netbeans.incubator.apache.org
For additional commands, e-mail: dev-help@netbeans.incubator.apache.org
For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists