LGPL dependency

[Jeff Dasch <hc...@gmail.com>]

Hi,

I'm a contributor to Apache Rya (incubating), and during our release
process we came across an incompatible LGPL dependency that appears to
originate from Apache Giraph's dependency on the Findbugs Annotations
library.  Our plan [1] right now is to just make Giraph an optional module
within our project, but I was wondering if you knew any more about that
license compatibility.  Based on some quick searches, it looks like
Findbugs has since become SpotBugs which is still LGPL.

(GNU Lesser Public License) FindBugs-Annotations
(com.google.code.findbugs:annotations:2.0.2 - http://findbugs.sourceforge.ne
t/)

[INFO] org.apache.rya:rya.giraph:jar:3.2.12-incubating
[INFO] +- org.apache.giraph:giraph-core:jar:1.2.0:compile
[INFO] |  +- com.google.code.findbugs:annotations:jar:2.0.2:compile

thanks,
-Jeff

[1] https://github.com/apache/incubator-rya/pull/274

Re: LGPL dependency

[Jeff Dasch <hc...@gmail.com>]

Owen,

I added a JIRA [1] to track this and put up a PR [2].  I had to skip
checkstyle and couldn't skip rat, but it appears to build ok.  You should
probably verify on your end before pulling it in.

Also, I'm new to this list and unfamiliar with your roadmap, but do you
have a time frame in mind for a 1.3.0 release?

-Jeff

[1] https://issues.apache.org/jira/browse/GIRAPH-1172
[2] https://github.com/apache/giraph/pull/61

On Fri, Feb 16, 2018 at 1:24 PM, Owen O'Malley <ow...@gmail.com>
wrote:

> *sigh* Yeah, we'll need to fix that.
>
> Does someone have time to remove the problematic dependency?
>
> .. Owen
>
>
>
> On Fri, Feb 16, 2018 at 9:37 AM, Jeff Dasch <hc...@gmail.com> wrote:
>
> > Hi,
> >
> > I'm a contributor to Apache Rya (incubating), and during our release
> > process we came across an incompatible LGPL dependency that appears to
> > originate from Apache Giraph's dependency on the Findbugs Annotations
> > library.  Our plan [1] right now is to just make Giraph an optional
> module
> > within our project, but I was wondering if you knew any more about that
> > license compatibility.  Based on some quick searches, it looks like
> > Findbugs has since become SpotBugs which is still LGPL.
> >
> > (GNU Lesser Public License) FindBugs-Annotations
> > (com.google.code.findbugs:annotations:2.0.2 -
> > http://findbugs.sourceforge.ne
> > t/)
> >
> > [INFO] org.apache.rya:rya.giraph:jar:3.2.12-incubating
> > [INFO] +- org.apache.giraph:giraph-core:jar:1.2.0:compile
> > [INFO] |  +- com.google.code.findbugs:annotations:jar:2.0.2:compile
> >
> > thanks,
> > -Jeff
> >
> > [1] https://github.com/apache/incubator-rya/pull/274
> >
>

Re: LGPL dependency

[Owen O'Malley <ow...@gmail.com>]

*sigh* Yeah, we'll need to fix that.

Does someone have time to remove the problematic dependency?

.. Owen



On Fri, Feb 16, 2018 at 9:37 AM, Jeff Dasch <hc...@gmail.com> wrote:

> Hi,
>
> I'm a contributor to Apache Rya (incubating), and during our release
> process we came across an incompatible LGPL dependency that appears to
> originate from Apache Giraph's dependency on the Findbugs Annotations
> library.  Our plan [1] right now is to just make Giraph an optional module
> within our project, but I was wondering if you knew any more about that
> license compatibility.  Based on some quick searches, it looks like
> Findbugs has since become SpotBugs which is still LGPL.
>
> (GNU Lesser Public License) FindBugs-Annotations
> (com.google.code.findbugs:annotations:2.0.2 -
> http://findbugs.sourceforge.ne
> t/)
>
> [INFO] org.apache.rya:rya.giraph:jar:3.2.12-incubating
> [INFO] +- org.apache.giraph:giraph-core:jar:1.2.0:compile
> [INFO] |  +- com.google.code.findbugs:annotations:jar:2.0.2:compile
>
> thanks,
> -Jeff
>
> [1] https://github.com/apache/incubator-rya/pull/274
>