[jira] [Created] (FLINK-33075) Notice files for Statefun are outdated

["Martijn Visser (Jira)" <ji...@apache.org>]

Martijn Visser created FLINK-33075:
--------------------------------------

             Summary: Notice files for Statefun are outdated
                 Key: FLINK-33075
                 URL: https://issues.apache.org/jira/browse/FLINK-33075
             Project: Flink
          Issue Type: Bug
          Components: Stateful Functions
    Affects Versions: statefun-3.3.0
            Reporter: Martijn Visser
            Assignee: Martijn Visser


{code:java}
- NOTICE files are present
  - Note: The copyright year is out of data (2020)
  - Concern: we bundle AnchorJS (MIT) v3.1.0 and this is not listed in the
NOTICE file
  - Concern: "statefun-sdk-java" bundles
"com.google.auto.service:auto-service-annotations:jar:1.0-rc6" but does not
declare it in the NOTICE
  - Concern: "statefun-flink-distribution"
    - bundles "org.apache.kafka:kafka-clients:3.2.3" but declares
"org.apache.kafka:kafka-clients:2.4.1"
    - bundles "com.github.luben:zstd-jni:1.5.2-1" but declares
"com.github.luben:zstd-jni:1.4.3-1"
    - bundles "com.fasterxml.jackson.core:jackson-core:2.13.4" but declares
"com.fasterxml.jackson.core:jackson-core:2.12.1"
    - bundles "com.fasterxml.jackson.core:jackson-annotations:2.13.4" but
declares "com.fasterxml.jackson.core:jackson-annotations:2.12.1"
    - bundles "com.fasterxml.jackson.core:jackson-databind:2.13.4.2" but
declares "com.fasterxml.jackson.core:jackson-databind:2.12.1"
    - bundles
"com.fasterxml.jackson.dataformat:jackson-dataformat-cbor:2.13.4" but
declares "com.fasterxml.jackson.dataformat:jackson-dataformat-cbor:2.12.1"
    - bundles "commons-io:commons-io:jar:2.11.0" but declares
"commons-io:commons-io:jar:2.8.0"
    - bundles "commons-codec:commons-codec:1.15" but declares
"commons-codec:commons-codec:1.13"
    - bundles "com.esotericsoftware.minlog:minlog:1.2" but does not declare
it
    - bundles "com.ibm.icu:icu4j:jar:67.1" but does not declare it
    - bundles "org.objenesis:objenesis:jar:2.1" but does not declare it
    - bundles "com.esotericsoftware.kryo:kryo:2.24.0" but does not declare
it
    - bundles "commons-collections:commons-collections:3.2.2" but does not
declare it
    - bundles "org.apache.commons:commons-compress:1.21" but does not
declare it
{code}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)