You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@weex.apache.org by sospartan <so...@apache.org> on 2017/04/13 10:24:21 UTC
[VOTE] Release of Apache Weex (incubating) 0.12.0-RC0
Hi Weex PPMC,
I'm calling this vote to release Apache Weex 0.12.0-RC0.
The tag to be voted upon:
https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git;a=shortlog;h=refs/tags/0.12.0-rc0
The commit hash:
https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git;a=commit;h=1f7ed8880cf0938ba079b57aa2dc46ee484983d2
The source tarball can be found at:
https://dist.apache.org/repos/dist/dev/incubator/weex/0.12.0-incubating/RC0/
The fingerprint of key to sign release artifacts:
97B9 6598 A6A3 B63C 53BD 77E9 44C5 2286 22B9 7784
Release artifacts are signed with the following key:
https://dist.apache.org/repos/dist/dev/incubator/weex/KEYS
Release note about this version:
https://issues.apache.org/jira/browse/WEEX-26
This vote will remain open for at least 72 hours.
Please vote on releasing this RC.
[ ] +1 approve
[ ] +0 no opinion
[ ] -1 disapprove (and reason why)
--
Best Regards!
------------------------------
sospartan
https://weex-project.io
Re: [VOTE] Release of Apache Weex (incubating) 0.12.0-RC0
Posted by Luke Han <lu...@gmail.com>.
+1
Best Regards!
---------------------
Luke Han
On Fri, Apr 14, 2017 at 9:46 AM, Jack Pu <ka...@gmail.com> wrote:
> +1
>
> 2017-04-13 19:42 GMT+08:00 Tancy Ni <ro...@gmail.com>:
>
> > +1
> > > 在 2017年4月13日，下午7:41，张星 <zh...@gmail.com> 写道：
> > >
> > > +1 I have been looking forward to it for a long time.
> > >
> > >> On 13 Apr 2017, at 19:37, 申远 <sh...@gmail.com> wrote:
> > >>
> > >> +1
> > >>> 在 2017年4月13日，18:24，sospartan <so...@apache.org> 写道：
> > >>>
> > >>> Hi Weex PPMC,
> > >>>
> > >>> I'm calling this vote to release Apache Weex 0.12.0-RC0.
> > >>>
> > >>> The tag to be voted upon:
> > >>> https://git-wip-us.apache.org/repos/asf?p=incubator-weex.
> > git;a=shortlog;h=refs/tags/0.12.0-rc0
> > >>>
> > >>> The commit hash:
> > >>> https://git-wip-us.apache.org/repos/asf?p=incubator-weex.
> > git;a=commit;h=1f7ed8880cf0938ba079b57aa2dc46ee484983d2
> > >>>
> > >>> The source tarball can be found at:
> > >>> https://dist.apache.org/repos/dist/dev/incubator/weex/0.12.
> > 0-incubating/RC0/
> > >>>
> > >>> The fingerprint of key to sign release artifacts:
> > >>> 97B9 6598 A6A3 B63C 53BD 77E9 44C5 2286 22B9 7784
> > >>>
> > >>> Release artifacts are signed with the following key:
> > >>> https://dist.apache.org/repos/dist/dev/incubator/weex/KEYS
> > >>>
> > >>> Release note about this version:
> > >>> https://issues.apache.org/jira/browse/WEEX-26
> > >>>
> > >>> This vote will remain open for at least 72 hours.
> > >>> Please vote on releasing this RC.
> > >>>
> > >>> [ ] +1 approve
> > >>> [ ] +0 no opinion
> > >>> [ ] -1 disapprove (and reason why)
> > >>>
> > >>>
> > >>> --
> > >>> Best Regards!
> > >>> ------------------------------
> > >>>
> > >>> sospartan
> > >>> https://weex-project.io
> > >>
> > >
> >
> >
>
>
> --
>
> *来自* *Jack*
>
Re: [VOTE] Release of Apache Weex (incubating) 0.12.0-RC0
Posted by Jack Pu <ka...@gmail.com>.
+1
2017-04-13 19:42 GMT+08:00 Tancy Ni <ro...@gmail.com>:
> +1
> > 在 2017年4月13日，下午7:41，张星 <zh...@gmail.com> 写道：
> >
> > +1 I have been looking forward to it for a long time.
> >
> >> On 13 Apr 2017, at 19:37, 申远 <sh...@gmail.com> wrote:
> >>
> >> +1
> >>> 在 2017年4月13日，18:24，sospartan <so...@apache.org> 写道：
> >>>
> >>> Hi Weex PPMC,
> >>>
> >>> I'm calling this vote to release Apache Weex 0.12.0-RC0.
> >>>
> >>> The tag to be voted upon:
> >>> https://git-wip-us.apache.org/repos/asf?p=incubator-weex.
> git;a=shortlog;h=refs/tags/0.12.0-rc0
> >>>
> >>> The commit hash:
> >>> https://git-wip-us.apache.org/repos/asf?p=incubator-weex.
> git;a=commit;h=1f7ed8880cf0938ba079b57aa2dc46ee484983d2
> >>>
> >>> The source tarball can be found at:
> >>> https://dist.apache.org/repos/dist/dev/incubator/weex/0.12.
> 0-incubating/RC0/
> >>>
> >>> The fingerprint of key to sign release artifacts:
> >>> 97B9 6598 A6A3 B63C 53BD 77E9 44C5 2286 22B9 7784
> >>>
> >>> Release artifacts are signed with the following key:
> >>> https://dist.apache.org/repos/dist/dev/incubator/weex/KEYS
> >>>
> >>> Release note about this version:
> >>> https://issues.apache.org/jira/browse/WEEX-26
> >>>
> >>> This vote will remain open for at least 72 hours.
> >>> Please vote on releasing this RC.
> >>>
> >>> [ ] +1 approve
> >>> [ ] +0 no opinion
> >>> [ ] -1 disapprove (and reason why)
> >>>
> >>>
> >>> --
> >>> Best Regards!
> >>> ------------------------------
> >>>
> >>> sospartan
> >>> https://weex-project.io
> >>
> >
>
>
--
*来自* *Jack*
Re: [VOTE] Release of Apache Weex (incubating) 0.12.0-RC0
Posted by Tancy Ni <ro...@gmail.com>.
+1
> 在 2017年4月13日，下午7:41，张星 <zh...@gmail.com> 写道：
>
> +1 I have been looking forward to it for a long time.
>
>> On 13 Apr 2017, at 19:37, 申远 <sh...@gmail.com> wrote:
>>
>> +1
>>> 在 2017年4月13日，18:24，sospartan <so...@apache.org> 写道：
>>>
>>> Hi Weex PPMC,
>>>
>>> I'm calling this vote to release Apache Weex 0.12.0-RC0.
>>>
>>> The tag to be voted upon:
>>> https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git;a=shortlog;h=refs/tags/0.12.0-rc0
>>>
>>> The commit hash:
>>> https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git;a=commit;h=1f7ed8880cf0938ba079b57aa2dc46ee484983d2
>>>
>>> The source tarball can be found at:
>>> https://dist.apache.org/repos/dist/dev/incubator/weex/0.12.0-incubating/RC0/
>>>
>>> The fingerprint of key to sign release artifacts:
>>> 97B9 6598 A6A3 B63C 53BD 77E9 44C5 2286 22B9 7784
>>>
>>> Release artifacts are signed with the following key:
>>> https://dist.apache.org/repos/dist/dev/incubator/weex/KEYS
>>>
>>> Release note about this version:
>>> https://issues.apache.org/jira/browse/WEEX-26
>>>
>>> This vote will remain open for at least 72 hours.
>>> Please vote on releasing this RC.
>>>
>>> [ ] +1 approve
>>> [ ] +0 no opinion
>>> [ ] -1 disapprove (and reason why)
>>>
>>>
>>> --
>>> Best Regards!
>>> ------------------------------
>>>
>>> sospartan
>>> https://weex-project.io
>>
>
Re: [VOTE] Release of Apache Weex (incubating) 0.12.0-RC0
Posted by 张星 <zh...@gmail.com>.
+1 I have been looking forward to it for a long time.
> On 13 Apr 2017, at 19:37, 申远 <sh...@gmail.com> wrote:
>
> +1
>> 在 2017年4月13日，18:24，sospartan <so...@apache.org> 写道：
>>
>> Hi Weex PPMC,
>>
>> I'm calling this vote to release Apache Weex 0.12.0-RC0.
>>
>> The tag to be voted upon:
>> https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git;a=shortlog;h=refs/tags/0.12.0-rc0
>>
>> The commit hash:
>> https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git;a=commit;h=1f7ed8880cf0938ba079b57aa2dc46ee484983d2
>>
>> The source tarball can be found at:
>> https://dist.apache.org/repos/dist/dev/incubator/weex/0.12.0-incubating/RC0/
>>
>> The fingerprint of key to sign release artifacts:
>> 97B9 6598 A6A3 B63C 53BD 77E9 44C5 2286 22B9 7784
>>
>> Release artifacts are signed with the following key:
>> https://dist.apache.org/repos/dist/dev/incubator/weex/KEYS
>>
>> Release note about this version:
>> https://issues.apache.org/jira/browse/WEEX-26
>>
>> This vote will remain open for at least 72 hours.
>> Please vote on releasing this RC.
>>
>> [ ] +1 approve
>> [ ] +0 no opinion
>> [ ] -1 disapprove (and reason why)
>>
>>
>> --
>> Best Regards!
>> ------------------------------
>>
>> sospartan
>> https://weex-project.io
>
Re: [VOTE] Release of Apache Weex (incubating) 0.12.0-RC0
Posted by 申远 <sh...@gmail.com>.
+1
> 在 2017年4月13日，18:24，sospartan <so...@apache.org> 写道：
>
> Hi Weex PPMC,
>
> I'm calling this vote to release Apache Weex 0.12.0-RC0.
>
> The tag to be voted upon:
> https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git;a=shortlog;h=refs/tags/0.12.0-rc0
>
> The commit hash:
> https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git;a=commit;h=1f7ed8880cf0938ba079b57aa2dc46ee484983d2
>
> The source tarball can be found at:
> https://dist.apache.org/repos/dist/dev/incubator/weex/0.12.0-incubating/RC0/
>
> The fingerprint of key to sign release artifacts:
> 97B9 6598 A6A3 B63C 53BD 77E9 44C5 2286 22B9 7784
>
> Release artifacts are signed with the following key:
> https://dist.apache.org/repos/dist/dev/incubator/weex/KEYS
>
> Release note about this version:
> https://issues.apache.org/jira/browse/WEEX-26
>
> This vote will remain open for at least 72 hours.
> Please vote on releasing this RC.
>
> [ ] +1 approve
> [ ] +0 no opinion
> [ ] -1 disapprove (and reason why)
>
>
> --
> Best Regards!
> ------------------------------
>
> sospartan
> https://weex-project.io
Re: [VOTE] Release of Apache Weex (incubating) 0.12.0-RC0
Posted by 宁栗 <ni...@gmail.com>.
+1
2017-04-13 18:24 GMT+08:00 sospartan <so...@apache.org>:
> Hi Weex PPMC,
>
> I'm calling this vote to release Apache Weex 0.12.0-RC0.
>
> The tag to be voted upon:
> https://git-wip-us.apache.org/repos/asf?p=incubator-weex.
> git;a=shortlog;h=refs/tags/0.12.0-rc0
>
> The commit hash:
> https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git;a=commit;h=
> 1f7ed8880cf0938ba079b57aa2dc46ee484983d2
>
> The source tarball can be found at:
> https://dist.apache.org/repos/dist/dev/incubator/weex/0.12.
> 0-incubating/RC0/
>
> The fingerprint of key to sign release artifacts:
> 97B9 6598 A6A3 B63C 53BD 77E9 44C5 2286 22B9 7784
>
> Release artifacts are signed with the following key:
> https://dist.apache.org/repos/dist/dev/incubator/weex/KEYS
>
> Release note about this version:
> https://issues.apache.org/jira/browse/WEEX-26
>
> This vote will remain open for at least 72 hours.
> Please vote on releasing this RC.
>
> [ ] +1 approve
> [ ] +0 no opinion
> [ ] -1 disapprove (and reason why)
>
>
> --
> Best Regards!
> ------------------------------
>
> sospartan
> https://weex-project.io
>
Re: [VOTE] Release of Apache Weex (incubating) 0.12.0-RC0
Posted by Adam Feng <cx...@gmail.com>.
+1
Thanks.
Adam Feng
On 2017年4月13日 +0800 PM7:19, shihan zheng <zh...@gmail.com>, wrote:
> +1
>
> 2017-04-13 19:18 GMT+08:00 马天翼 <fk...@gmail.com>:
>
> > +1
> >
> > 2017-04-13 18:24 GMT+08:00 sospartan <so...@apache.org>:
> >
> > > Hi Weex PPMC,
> > >
> > > I'm calling this vote to release Apache Weex 0.12.0-RC0.
> > >
> > > The tag to be voted upon:
> > > https://git-wip-us.apache.org/repos/asf?p=incubator-weex.
> > > git;a=shortlog;h=refs/tags/0.12.0-rc0
> > >
> > > The commit hash:
> > > https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git;a=commit;h=
> > > 1f7ed8880cf0938ba079b57aa2dc46ee484983d2
> > >
> > > The source tarball can be found at:
> > > https://dist.apache.org/repos/dist/dev/incubator/weex/0.12.
> > > 0-incubating/RC0/
> > >
> > > The fingerprint of key to sign release artifacts:
> > > 97B9 6598 A6A3 B63C 53BD 77E9 44C5 2286 22B9 7784
> > >
> > > Release artifacts are signed with the following key:
> > > https://dist.apache.org/repos/dist/dev/incubator/weex/KEYS
> > >
> > > Release note about this version:
> > > https://issues.apache.org/jira/browse/WEEX-26
> > >
> > > This vote will remain open for at least 72 hours.
> > > Please vote on releasing this RC.
> > >
> > > [ ] +1 approve
> > > [ ] +0 no opinion
> > > [ ] -1 disapprove (and reason why)
> > >
> > >
> > > --
> > > Best Regards!
> > > ------------------------------
> > >
> > > sospartan
> > > https://weex-project.io
> > >
> >
> >
> >
> > --
> >
>
>
>
> --
>
> Best Regards!
> ---------------------
> Shihan Zheng (Weex project team member )
Re: [VOTE] Release of Apache Weex (incubating) 0.12.0-RC0
Posted by shihan zheng <zh...@gmail.com>.
+1
2017-04-13 19:18 GMT+08:00 马天翼 <fk...@gmail.com>:
> +1
>
> 2017-04-13 18:24 GMT+08:00 sospartan <so...@apache.org>:
>
> > Hi Weex PPMC,
> >
> > I'm calling this vote to release Apache Weex 0.12.0-RC0.
> >
> > The tag to be voted upon:
> > https://git-wip-us.apache.org/repos/asf?p=incubator-weex.
> > git;a=shortlog;h=refs/tags/0.12.0-rc0
> >
> > The commit hash:
> > https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git;a=commit;h=
> > 1f7ed8880cf0938ba079b57aa2dc46ee484983d2
> >
> > The source tarball can be found at:
> > https://dist.apache.org/repos/dist/dev/incubator/weex/0.12.
> > 0-incubating/RC0/
> >
> > The fingerprint of key to sign release artifacts:
> > 97B9 6598 A6A3 B63C 53BD 77E9 44C5 2286 22B9 7784
> >
> > Release artifacts are signed with the following key:
> > https://dist.apache.org/repos/dist/dev/incubator/weex/KEYS
> >
> > Release note about this version:
> > https://issues.apache.org/jira/browse/WEEX-26
> >
> > This vote will remain open for at least 72 hours.
> > Please vote on releasing this RC.
> >
> > [ ] +1 approve
> > [ ] +0 no opinion
> > [ ] -1 disapprove (and reason why)
> >
> >
> > --
> > Best Regards!
> > ------------------------------
> >
> > sospartan
> > https://weex-project.io
> >
>
>
>
> --
>
--
Best Regards!
---------------------
Shihan Zheng (Weex project team member )
Re: [VOTE] Release of Apache Weex (incubating) 0.12.0-RC0
Posted by 马天翼 <fk...@gmail.com>.
+1
2017-04-13 18:24 GMT+08:00 sospartan <so...@apache.org>:
> Hi Weex PPMC,
>
> I'm calling this vote to release Apache Weex 0.12.0-RC0.
>
> The tag to be voted upon:
> https://git-wip-us.apache.org/repos/asf?p=incubator-weex.
> git;a=shortlog;h=refs/tags/0.12.0-rc0
>
> The commit hash:
> https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git;a=commit;h=
> 1f7ed8880cf0938ba079b57aa2dc46ee484983d2
>
> The source tarball can be found at:
> https://dist.apache.org/repos/dist/dev/incubator/weex/0.12.
> 0-incubating/RC0/
>
> The fingerprint of key to sign release artifacts:
> 97B9 6598 A6A3 B63C 53BD 77E9 44C5 2286 22B9 7784
>
> Release artifacts are signed with the following key:
> https://dist.apache.org/repos/dist/dev/incubator/weex/KEYS
>
> Release note about this version:
> https://issues.apache.org/jira/browse/WEEX-26
>
> This vote will remain open for at least 72 hours.
> Please vote on releasing this RC.
>
> [ ] +1 approve
> [ ] +0 no opinion
> [ ] -1 disapprove (and reason why)
>
>
> --
> Best Regards!
> ------------------------------
>
> sospartan
> https://weex-project.io
>
--
Re: [VOTE] Release of Apache Weex (incubating) 0.12.0-RC0
Posted by sospartan <so...@gmail.com>.
I've review all dependencies ( javascript/iOS/android), and update the
NOTICE file
https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git;a=blobdiff;f=NOTICE;h=7b45898e5cc193fa94f056139a43b9d343cdeec3;hp=21e0ee8b937f2653967b2311ae188227f53fa222;hb=b342eca1e6edd1cb66114794497cdcfead1c2b34;hpb=5ea996684b99c64456a480cfb7d02e3cd1006988
There are 31 of them. Most of it is used by Playground application.
And many of them ( 8 at least) is maintained by weex team, I'd like make a
proposal to move these project into weex-incubating project.
On Mon, Apr 17, 2017 at 11:28 AM, sospartan <so...@gmail.com> wrote:
> My pleasure to help that.
>
> I've make some changes to include test code and xml file
> https://github.com/apache/incubator-weex/commit/
> 951f65492f2b37cd90bbac9fd0c30ba5866cc189
>
> And I create a script under 'scripts' folder, you can run
> './scripts/rat-scan.sh' to validate our src-header, the exclude rule is in
> ‘scripts/rat-ant-build.xml'.
>
> I'll call another vote (for RC1) after I fix the 'NOTICE' file with
> dependencies.
>
>
> On Sat, Apr 15, 2017 at 9:30 AM, Niclas Hedhman <ni...@hedhman.org>
> wrote:
>
>> Ok, thanks for taking time to answer my concerns. I withdraw the veto (the
>> GPL concern).
>> I recommend cutting a new release with the changes made, but will not
>> block
>> if you decide to push this release out anyway. Repacking should be quick
>> and automatic...
>>
>> Cheers
>>
>> On Sat, Apr 15, 2017 at 9:03 AM, sospartan <so...@gmail.com> wrote:
>>
>> > These weex-* project is removable, theoretically speaking. We put
>> these in
>> > dependency for building javascript library more
>> > convenient to use. It's kind of like a all-in-one javascript template
>> > framework.
>> > If you suggest moving these project to weex incubating project too, I
>> think
>> > we can discuss that, more things need to be settle. But for the next
>> > release I'll suggest keep current way.
>> >
>> > The 'animationjs' we use from here https://www.npmjs.com/package/
>> > animationjs
>> >
>> > flow-types; I mean these file can be generated by 'flow-type' tool, were
>> > not manual code by us. For saving the time build it, we put it in code
>> repo
>> > in advance.
>> > @Danz can we remove these files? Put it in .gitignore then you can keep
>> use
>> > these file in you local environment.
>> >
>> >
>> >
>> > On Fri, Apr 14, 2017 at 4:54 PM, Niclas Hedhman <ni...@hedhman.org>
>> > wrote:
>> >
>> > > Well, the weexteam projects are listed as direct dependencies...
>> > >
>> > > "dependencies": {
>> > > "animationjs": "^0.1.5",
>> > > "core-js": "^2.4.0",
>> > > "cubicbezier": "^0.1.1",
>> > > "envd": "^0.1.1",
>> > > "httpurl": "^0.1.1",
>> > > "lazyimg": "^0.1.5",
>> > > "modals": "^0.1.6",
>> > > "query-string": "^4.2.3",
>> > > "scroll-to": "0.0.2",
>> > > "semver": "^5.1.0",
>> > > "weex-components": "^0.2.0",
>> > > "weex-picker": "^0.1.0",
>> > > "weex-rax-framework": "0.1.7",
>> > > "weex-styler":"0.1.8",
>> > > "weex-vue-framework": "2.1.8-weex.1"
>> > > },
>> > >
>> > > So, sorry if I don't see that as "not core parts of weex but some
>> > > derivative projects."
>> > >
>> > > animationJs ; my apologies. What showed up in my google search was
>> > > https://github.com/lathoub/AnimationJS.
>> > >
>> > > flow-types; Not sure what you mean. Please elaborate.
>> > >
>> > >
>> > > On Fri, Apr 14, 2017 at 3:24 PM, sospartan <so...@gmail.com>
>> wrote:
>> > >
>> > > > I'll check every dependency, includes npm dependencies in
>> package.json/
>> > > > dependencies import by android's gradle or dependencies imported by
>> > > ios's
>> > > > Pod, and update the NOTICE file.
>> > > >
>> > > > The weex-* project are side project maintain by weex or related
>> teams.
>> > > I'll
>> > > > check licenses of these projects. These projects are not core parts
>> of
>> > > weex
>> > > > but some derivative projects.
>> > > >
>> > > > I'll update other file type like XML/Shell scripts to have a proper
>> src
>> > > > header.
>> > > >
>> > > > Files under 'flow-typed/' are generated to help run lint against js
>> > code.
>> > > > It's not 'source code'. Including js file under android and ios
>> SDK's
>> > > > assets (android/sdk/assets,etc.)
>> > > > @Niclas How do we deal these generate file?
>> > > >
>> > > > 'animationjs' is a library maintained by Danz He. I'm notice this
>> > library
>> > > > is MIT, not GPL.
>> > > >
>> > > >
>> > > > On Fri, Apr 14, 2017 at 10:48 AM, Niclas Hedhman <
>> niclas@hedhman.org>
>> > > > wrote:
>> > > >
>> > > > > -1 ( VETO - dependency on GPL code)
>> > > > >
>> > > > >
>> > > > > The NOTICE file contains notices about 5 dependencies, but the
>> list
>> > of
>> > > > > dependencies in package.json is much bigger, and I would assume
>> that
>> > > most
>> > > > > of them are released under a license that requires attribution.
>> > > > >
>> > > > > Also, what is the relationship with the weex-* dependencies?
>> Looking
>> > at
>> > > > > weex-picker, it doesn't seem to be released with the same rigor
>> as is
>> > > > > expected from Apache projects, such as not stating the license
>> terms
>> > > and
>> > > > > not respecting notices of dependencies.
>> > > > >
>> > > > > Why are these projects not part of Apache Weex (incubating)?
>> > > > >
>> > > > > Furthermore, it is not only .java files that are expected to have
>> the
>> > > > > license headers. We expect that in every source file that allows
>> for
>> > > > > comments. And it is missing all over the place, such as
>> javascripts,
>> > > XML
>> > > > > files, build files, shell script files and so on.
>> > > > >
>> > > > > In the incubator-weex-1f7ed88/flow-typed/npm directory, which is
>> > some
>> > > > type
>> > > > > of "replacements" for other things. What is this, because some of
>> > those
>> > > > > stubs are for GPL'd code, so I want to have a clear understanding
>> of
>> > > what
>> > > > > is going on here...
>> > > > >
>> > > > >
>> > > > > HOLD THE PRESSES; animationjs is listed in package.json as a
>> > > dependency,
>> > > > > and used in html5/render/browser/extend/co
>> mponents/slider/carrousel.
>> > > js.
>> > > > > This is GPL'd code and is viral, meaning that Weex is REQUIRED to
>> be
>> > > > GPL'd
>> > > > > as well, which ASF don't allow.
>> > > > >
>> > > > > What disturbs me right now, because this is the second thing I
>> picked
>> > > at
>> > > > > random. SO how many more unacceptable dependencies do we have in
>> > Weex,
>> > > > > especially considering the transitive dependencies via the
>> > > > weexteam/weex-*
>> > > > > projects?
>> > > > >
>> > > > >
>> > > > > So, this RC CAN NOT BE RELEASED, and I will block until a full
>> review
>> > > of
>> > > > > all dependencies have been done (and if I am doing the review, it
>> > will
>> > > > take
>> > > > > months)
>> > > > >
>> > > > >
>> > > > > Niclas
>> > > > >
>> > > > >
>> > > > > On Thu, Apr 13, 2017 at 6:24 PM, sospartan <so...@apache.org>
>> > > wrote:
>> > > > >
>> > > > > > Hi Weex PPMC,
>> > > > > >
>> > > > > > I'm calling this vote to release Apache Weex 0.12.0-RC0.
>> > > > > >
>> > > > > > The tag to be voted upon:
>> > > > > > https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git
>> > > > > > ;a=shortlog;h=refs/tags/0.12.0-rc0
>> > > > > >
>> > > > > > The commit hash:
>> > > > > > https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git
>> > > > > > ;a=commit;h=1f7ed8880cf0938ba079b57aa2dc46ee484983d2
>> > > > > >
>> > > > > > The source tarball can be found at:
>> > > > > > https://dist.apache.org/repos/dist/dev/incubator/weex/0.12.0
>> > > > > > -incubating/RC0/
>> > > > > >
>> > > > > > The fingerprint of key to sign release artifacts:
>> > > > > > 97B9 6598 A6A3 B63C 53BD 77E9 44C5 2286 22B9 7784
>> > > > > >
>> > > > > > Release artifacts are signed with the following key:
>> > > > > > https://dist.apache.org/repos/dist/dev/incubator/weex/KEYS
>> > > > > >
>> > > > > > Release note about this version:
>> > > > > > https://issues.apache.org/jira/browse/WEEX-26
>> > > > > >
>> > > > > > This vote will remain open for at least 72 hours.
>> > > > > > Please vote on releasing this RC.
>> > > > > >
>> > > > > > [ ] +1 approve
>> > > > > > [ ] +0 no opinion
>> > > > > > [ ] -1 disapprove (and reason why)
>> > > > > >
>> > > > > >
>> > > > > > --
>> > > > > > Best Regards!
>> > > > > > ------------------------------
>> > > > > >
>> > > > > > sospartan
>> > > > > > https://weex-project.io
>> > > > > >
>> > > > >
>> > > > >
>> > > > >
>> > > > > --
>> > > > > Niclas Hedhman, Software Developer
>> > > > > http://polygene.apache.org - New Energy for Java
>> > > > >
>> > > >
>> > > >
>> > > >
>> > > > --
>> > > > sospartan
>> > > > Phone:13588488290
>> > > > HangZhou
>> > > >
>> > >
>> > >
>> > >
>> > > --
>> > > Niclas Hedhman, Software Developer
>> > > http://polygene.apache.org - New Energy for Java
>> > >
>> >
>> >
>> >
>> > --
>> > sospartan
>> > Phone:13588488290
>> > HangZhou
>> >
>>
>>
>>
>> --
>> Niclas Hedhman, Software Developer
>> http://polygene.apache.org - New Energy for Java
>>
>
>
>
> --
> sospartan
> Phone:13588488290
> HangZhou
>
--
sospartan
Phone:13588488290
HangZhou
Re: [VOTE] Release of Apache Weex (incubating) 0.12.0-RC0
Posted by sospartan <so...@gmail.com>.
My pleasure to help that.
I've make some changes to include test code and xml file
https://github.com/apache/incubator-weex/commit/951f65492f2b37cd90bbac9fd0c30ba5866cc189
And I create a script under 'scripts' folder, you can run
'./scripts/rat-scan.sh' to validate our src-header, the exclude rule is in
‘scripts/rat-ant-build.xml'.
I'll call another vote (for RC1) after I fix the 'NOTICE' file with
dependencies.
On Sat, Apr 15, 2017 at 9:30 AM, Niclas Hedhman <ni...@hedhman.org> wrote:
> Ok, thanks for taking time to answer my concerns. I withdraw the veto (the
> GPL concern).
> I recommend cutting a new release with the changes made, but will not block
> if you decide to push this release out anyway. Repacking should be quick
> and automatic...
>
> Cheers
>
> On Sat, Apr 15, 2017 at 9:03 AM, sospartan <so...@gmail.com> wrote:
>
> > These weex-* project is removable, theoretically speaking. We put these
> in
> > dependency for building javascript library more
> > convenient to use. It's kind of like a all-in-one javascript template
> > framework.
> > If you suggest moving these project to weex incubating project too, I
> think
> > we can discuss that, more things need to be settle. But for the next
> > release I'll suggest keep current way.
> >
> > The 'animationjs' we use from here https://www.npmjs.com/package/
> > animationjs
> >
> > flow-types; I mean these file can be generated by 'flow-type' tool, were
> > not manual code by us. For saving the time build it, we put it in code
> repo
> > in advance.
> > @Danz can we remove these files? Put it in .gitignore then you can keep
> use
> > these file in you local environment.
> >
> >
> >
> > On Fri, Apr 14, 2017 at 4:54 PM, Niclas Hedhman <ni...@hedhman.org>
> > wrote:
> >
> > > Well, the weexteam projects are listed as direct dependencies...
> > >
> > > "dependencies": {
> > > "animationjs": "^0.1.5",
> > > "core-js": "^2.4.0",
> > > "cubicbezier": "^0.1.1",
> > > "envd": "^0.1.1",
> > > "httpurl": "^0.1.1",
> > > "lazyimg": "^0.1.5",
> > > "modals": "^0.1.6",
> > > "query-string": "^4.2.3",
> > > "scroll-to": "0.0.2",
> > > "semver": "^5.1.0",
> > > "weex-components": "^0.2.0",
> > > "weex-picker": "^0.1.0",
> > > "weex-rax-framework": "0.1.7",
> > > "weex-styler":"0.1.8",
> > > "weex-vue-framework": "2.1.8-weex.1"
> > > },
> > >
> > > So, sorry if I don't see that as "not core parts of weex but some
> > > derivative projects."
> > >
> > > animationJs ; my apologies. What showed up in my google search was
> > > https://github.com/lathoub/AnimationJS.
> > >
> > > flow-types; Not sure what you mean. Please elaborate.
> > >
> > >
> > > On Fri, Apr 14, 2017 at 3:24 PM, sospartan <so...@gmail.com>
> wrote:
> > >
> > > > I'll check every dependency, includes npm dependencies in
> package.json/
> > > > dependencies import by android's gradle or dependencies imported by
> > > ios's
> > > > Pod, and update the NOTICE file.
> > > >
> > > > The weex-* project are side project maintain by weex or related
> teams.
> > > I'll
> > > > check licenses of these projects. These projects are not core parts
> of
> > > weex
> > > > but some derivative projects.
> > > >
> > > > I'll update other file type like XML/Shell scripts to have a proper
> src
> > > > header.
> > > >
> > > > Files under 'flow-typed/' are generated to help run lint against js
> > code.
> > > > It's not 'source code'. Including js file under android and ios SDK's
> > > > assets (android/sdk/assets,etc.)
> > > > @Niclas How do we deal these generate file?
> > > >
> > > > 'animationjs' is a library maintained by Danz He. I'm notice this
> > library
> > > > is MIT, not GPL.
> > > >
> > > >
> > > > On Fri, Apr 14, 2017 at 10:48 AM, Niclas Hedhman <niclas@hedhman.org
> >
> > > > wrote:
> > > >
> > > > > -1 ( VETO - dependency on GPL code)
> > > > >
> > > > >
> > > > > The NOTICE file contains notices about 5 dependencies, but the list
> > of
> > > > > dependencies in package.json is much bigger, and I would assume
> that
> > > most
> > > > > of them are released under a license that requires attribution.
> > > > >
> > > > > Also, what is the relationship with the weex-* dependencies?
> Looking
> > at
> > > > > weex-picker, it doesn't seem to be released with the same rigor as
> is
> > > > > expected from Apache projects, such as not stating the license
> terms
> > > and
> > > > > not respecting notices of dependencies.
> > > > >
> > > > > Why are these projects not part of Apache Weex (incubating)?
> > > > >
> > > > > Furthermore, it is not only .java files that are expected to have
> the
> > > > > license headers. We expect that in every source file that allows
> for
> > > > > comments. And it is missing all over the place, such as
> javascripts,
> > > XML
> > > > > files, build files, shell script files and so on.
> > > > >
> > > > > In the incubator-weex-1f7ed88/flow-typed/npm directory, which is
> > some
> > > > type
> > > > > of "replacements" for other things. What is this, because some of
> > those
> > > > > stubs are for GPL'd code, so I want to have a clear understanding
> of
> > > what
> > > > > is going on here...
> > > > >
> > > > >
> > > > > HOLD THE PRESSES; animationjs is listed in package.json as a
> > > dependency,
> > > > > and used in html5/render/browser/extend/
> components/slider/carrousel.
> > > js.
> > > > > This is GPL'd code and is viral, meaning that Weex is REQUIRED to
> be
> > > > GPL'd
> > > > > as well, which ASF don't allow.
> > > > >
> > > > > What disturbs me right now, because this is the second thing I
> picked
> > > at
> > > > > random. SO how many more unacceptable dependencies do we have in
> > Weex,
> > > > > especially considering the transitive dependencies via the
> > > > weexteam/weex-*
> > > > > projects?
> > > > >
> > > > >
> > > > > So, this RC CAN NOT BE RELEASED, and I will block until a full
> review
> > > of
> > > > > all dependencies have been done (and if I am doing the review, it
> > will
> > > > take
> > > > > months)
> > > > >
> > > > >
> > > > > Niclas
> > > > >
> > > > >
> > > > > On Thu, Apr 13, 2017 at 6:24 PM, sospartan <so...@apache.org>
> > > wrote:
> > > > >
> > > > > > Hi Weex PPMC,
> > > > > >
> > > > > > I'm calling this vote to release Apache Weex 0.12.0-RC0.
> > > > > >
> > > > > > The tag to be voted upon:
> > > > > > https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git
> > > > > > ;a=shortlog;h=refs/tags/0.12.0-rc0
> > > > > >
> > > > > > The commit hash:
> > > > > > https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git
> > > > > > ;a=commit;h=1f7ed8880cf0938ba079b57aa2dc46ee484983d2
> > > > > >
> > > > > > The source tarball can be found at:
> > > > > > https://dist.apache.org/repos/dist/dev/incubator/weex/0.12.0
> > > > > > -incubating/RC0/
> > > > > >
> > > > > > The fingerprint of key to sign release artifacts:
> > > > > > 97B9 6598 A6A3 B63C 53BD 77E9 44C5 2286 22B9 7784
> > > > > >
> > > > > > Release artifacts are signed with the following key:
> > > > > > https://dist.apache.org/repos/dist/dev/incubator/weex/KEYS
> > > > > >
> > > > > > Release note about this version:
> > > > > > https://issues.apache.org/jira/browse/WEEX-26
> > > > > >
> > > > > > This vote will remain open for at least 72 hours.
> > > > > > Please vote on releasing this RC.
> > > > > >
> > > > > > [ ] +1 approve
> > > > > > [ ] +0 no opinion
> > > > > > [ ] -1 disapprove (and reason why)
> > > > > >
> > > > > >
> > > > > > --
> > > > > > Best Regards!
> > > > > > ------------------------------
> > > > > >
> > > > > > sospartan
> > > > > > https://weex-project.io
> > > > > >
> > > > >
> > > > >
> > > > >
> > > > > --
> > > > > Niclas Hedhman, Software Developer
> > > > > http://polygene.apache.org - New Energy for Java
> > > > >
> > > >
> > > >
> > > >
> > > > --
> > > > sospartan
> > > > Phone:13588488290
> > > > HangZhou
> > > >
> > >
> > >
> > >
> > > --
> > > Niclas Hedhman, Software Developer
> > > http://polygene.apache.org - New Energy for Java
> > >
> >
> >
> >
> > --
> > sospartan
> > Phone:13588488290
> > HangZhou
> >
>
>
>
> --
> Niclas Hedhman, Software Developer
> http://polygene.apache.org - New Energy for Java
>
--
sospartan
Phone:13588488290
HangZhou
Re: [VOTE] Release of Apache Weex (incubating) 0.12.0-RC0
Posted by Niclas Hedhman <ni...@hedhman.org>.
Ok, thanks for taking time to answer my concerns. I withdraw the veto (the
GPL concern).
I recommend cutting a new release with the changes made, but will not block
if you decide to push this release out anyway. Repacking should be quick
and automatic...
Cheers
On Sat, Apr 15, 2017 at 9:03 AM, sospartan <so...@gmail.com> wrote:
> These weex-* project is removable, theoretically speaking. We put these in
> dependency for building javascript library more
> convenient to use. It's kind of like a all-in-one javascript template
> framework.
> If you suggest moving these project to weex incubating project too, I think
> we can discuss that, more things need to be settle. But for the next
> release I'll suggest keep current way.
>
> The 'animationjs' we use from here https://www.npmjs.com/package/
> animationjs
>
> flow-types; I mean these file can be generated by 'flow-type' tool, were
> not manual code by us. For saving the time build it, we put it in code repo
> in advance.
> @Danz can we remove these files? Put it in .gitignore then you can keep use
> these file in you local environment.
>
>
>
> On Fri, Apr 14, 2017 at 4:54 PM, Niclas Hedhman <ni...@hedhman.org>
> wrote:
>
> > Well, the weexteam projects are listed as direct dependencies...
> >
> > "dependencies": {
> > "animationjs": "^0.1.5",
> > "core-js": "^2.4.0",
> > "cubicbezier": "^0.1.1",
> > "envd": "^0.1.1",
> > "httpurl": "^0.1.1",
> > "lazyimg": "^0.1.5",
> > "modals": "^0.1.6",
> > "query-string": "^4.2.3",
> > "scroll-to": "0.0.2",
> > "semver": "^5.1.0",
> > "weex-components": "^0.2.0",
> > "weex-picker": "^0.1.0",
> > "weex-rax-framework": "0.1.7",
> > "weex-styler":"0.1.8",
> > "weex-vue-framework": "2.1.8-weex.1"
> > },
> >
> > So, sorry if I don't see that as "not core parts of weex but some
> > derivative projects."
> >
> > animationJs ; my apologies. What showed up in my google search was
> > https://github.com/lathoub/AnimationJS.
> >
> > flow-types; Not sure what you mean. Please elaborate.
> >
> >
> > On Fri, Apr 14, 2017 at 3:24 PM, sospartan <so...@gmail.com> wrote:
> >
> > > I'll check every dependency, includes npm dependencies in package.json/
> > > dependencies import by android's gradle or dependencies imported by
> > ios's
> > > Pod, and update the NOTICE file.
> > >
> > > The weex-* project are side project maintain by weex or related teams.
> > I'll
> > > check licenses of these projects. These projects are not core parts of
> > weex
> > > but some derivative projects.
> > >
> > > I'll update other file type like XML/Shell scripts to have a proper src
> > > header.
> > >
> > > Files under 'flow-typed/' are generated to help run lint against js
> code.
> > > It's not 'source code'. Including js file under android and ios SDK's
> > > assets (android/sdk/assets,etc.)
> > > @Niclas How do we deal these generate file?
> > >
> > > 'animationjs' is a library maintained by Danz He. I'm notice this
> library
> > > is MIT, not GPL.
> > >
> > >
> > > On Fri, Apr 14, 2017 at 10:48 AM, Niclas Hedhman <ni...@hedhman.org>
> > > wrote:
> > >
> > > > -1 ( VETO - dependency on GPL code)
> > > >
> > > >
> > > > The NOTICE file contains notices about 5 dependencies, but the list
> of
> > > > dependencies in package.json is much bigger, and I would assume that
> > most
> > > > of them are released under a license that requires attribution.
> > > >
> > > > Also, what is the relationship with the weex-* dependencies? Looking
> at
> > > > weex-picker, it doesn't seem to be released with the same rigor as is
> > > > expected from Apache projects, such as not stating the license terms
> > and
> > > > not respecting notices of dependencies.
> > > >
> > > > Why are these projects not part of Apache Weex (incubating)?
> > > >
> > > > Furthermore, it is not only .java files that are expected to have the
> > > > license headers. We expect that in every source file that allows for
> > > > comments. And it is missing all over the place, such as javascripts,
> > XML
> > > > files, build files, shell script files and so on.
> > > >
> > > > In the incubator-weex-1f7ed88/flow-typed/npm directory, which is
> some
> > > type
> > > > of "replacements" for other things. What is this, because some of
> those
> > > > stubs are for GPL'd code, so I want to have a clear understanding of
> > what
> > > > is going on here...
> > > >
> > > >
> > > > HOLD THE PRESSES; animationjs is listed in package.json as a
> > dependency,
> > > > and used in html5/render/browser/extend/components/slider/carrousel.
> > js.
> > > > This is GPL'd code and is viral, meaning that Weex is REQUIRED to be
> > > GPL'd
> > > > as well, which ASF don't allow.
> > > >
> > > > What disturbs me right now, because this is the second thing I picked
> > at
> > > > random. SO how many more unacceptable dependencies do we have in
> Weex,
> > > > especially considering the transitive dependencies via the
> > > weexteam/weex-*
> > > > projects?
> > > >
> > > >
> > > > So, this RC CAN NOT BE RELEASED, and I will block until a full review
> > of
> > > > all dependencies have been done (and if I am doing the review, it
> will
> > > take
> > > > months)
> > > >
> > > >
> > > > Niclas
> > > >
> > > >
> > > > On Thu, Apr 13, 2017 at 6:24 PM, sospartan <so...@apache.org>
> > wrote:
> > > >
> > > > > Hi Weex PPMC,
> > > > >
> > > > > I'm calling this vote to release Apache Weex 0.12.0-RC0.
> > > > >
> > > > > The tag to be voted upon:
> > > > > https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git
> > > > > ;a=shortlog;h=refs/tags/0.12.0-rc0
> > > > >
> > > > > The commit hash:
> > > > > https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git
> > > > > ;a=commit;h=1f7ed8880cf0938ba079b57aa2dc46ee484983d2
> > > > >
> > > > > The source tarball can be found at:
> > > > > https://dist.apache.org/repos/dist/dev/incubator/weex/0.12.0
> > > > > -incubating/RC0/
> > > > >
> > > > > The fingerprint of key to sign release artifacts:
> > > > > 97B9 6598 A6A3 B63C 53BD 77E9 44C5 2286 22B9 7784
> > > > >
> > > > > Release artifacts are signed with the following key:
> > > > > https://dist.apache.org/repos/dist/dev/incubator/weex/KEYS
> > > > >
> > > > > Release note about this version:
> > > > > https://issues.apache.org/jira/browse/WEEX-26
> > > > >
> > > > > This vote will remain open for at least 72 hours.
> > > > > Please vote on releasing this RC.
> > > > >
> > > > > [ ] +1 approve
> > > > > [ ] +0 no opinion
> > > > > [ ] -1 disapprove (and reason why)
> > > > >
> > > > >
> > > > > --
> > > > > Best Regards!
> > > > > ------------------------------
> > > > >
> > > > > sospartan
> > > > > https://weex-project.io
> > > > >
> > > >
> > > >
> > > >
> > > > --
> > > > Niclas Hedhman, Software Developer
> > > > http://polygene.apache.org - New Energy for Java
> > > >
> > >
> > >
> > >
> > > --
> > > sospartan
> > > Phone:13588488290
> > > HangZhou
> > >
> >
> >
> >
> > --
> > Niclas Hedhman, Software Developer
> > http://polygene.apache.org - New Energy for Java
> >
>
>
>
> --
> sospartan
> Phone:13588488290
> HangZhou
>
--
Niclas Hedhman, Software Developer
http://polygene.apache.org - New Energy for Java
Re: [VOTE] Release of Apache Weex (incubating) 0.12.0-RC0
Posted by sospartan <so...@gmail.com>.
These weex-* project is removable, theoretically speaking. We put these in
dependency for building javascript library more
convenient to use. It's kind of like a all-in-one javascript template
framework.
If you suggest moving these project to weex incubating project too, I think
we can discuss that, more things need to be settle. But for the next
release I'll suggest keep current way.
The 'animationjs' we use from here https://www.npmjs.com/package/animationjs
flow-types; I mean these file can be generated by 'flow-type' tool, were
not manual code by us. For saving the time build it, we put it in code repo
in advance.
@Danz can we remove these files? Put it in .gitignore then you can keep use
these file in you local environment.
On Fri, Apr 14, 2017 at 4:54 PM, Niclas Hedhman <ni...@hedhman.org> wrote:
> Well, the weexteam projects are listed as direct dependencies...
>
> "dependencies": {
> "animationjs": "^0.1.5",
> "core-js": "^2.4.0",
> "cubicbezier": "^0.1.1",
> "envd": "^0.1.1",
> "httpurl": "^0.1.1",
> "lazyimg": "^0.1.5",
> "modals": "^0.1.6",
> "query-string": "^4.2.3",
> "scroll-to": "0.0.2",
> "semver": "^5.1.0",
> "weex-components": "^0.2.0",
> "weex-picker": "^0.1.0",
> "weex-rax-framework": "0.1.7",
> "weex-styler":"0.1.8",
> "weex-vue-framework": "2.1.8-weex.1"
> },
>
> So, sorry if I don't see that as "not core parts of weex but some
> derivative projects."
>
> animationJs ; my apologies. What showed up in my google search was
> https://github.com/lathoub/AnimationJS.
>
> flow-types; Not sure what you mean. Please elaborate.
>
>
> On Fri, Apr 14, 2017 at 3:24 PM, sospartan <so...@gmail.com> wrote:
>
> > I'll check every dependency, includes npm dependencies in package.json/
> > dependencies import by android's gradle or dependencies imported by
> ios's
> > Pod, and update the NOTICE file.
> >
> > The weex-* project are side project maintain by weex or related teams.
> I'll
> > check licenses of these projects. These projects are not core parts of
> weex
> > but some derivative projects.
> >
> > I'll update other file type like XML/Shell scripts to have a proper src
> > header.
> >
> > Files under 'flow-typed/' are generated to help run lint against js code.
> > It's not 'source code'. Including js file under android and ios SDK's
> > assets (android/sdk/assets,etc.)
> > @Niclas How do we deal these generate file?
> >
> > 'animationjs' is a library maintained by Danz He. I'm notice this library
> > is MIT, not GPL.
> >
> >
> > On Fri, Apr 14, 2017 at 10:48 AM, Niclas Hedhman <ni...@hedhman.org>
> > wrote:
> >
> > > -1 ( VETO - dependency on GPL code)
> > >
> > >
> > > The NOTICE file contains notices about 5 dependencies, but the list of
> > > dependencies in package.json is much bigger, and I would assume that
> most
> > > of them are released under a license that requires attribution.
> > >
> > > Also, what is the relationship with the weex-* dependencies? Looking at
> > > weex-picker, it doesn't seem to be released with the same rigor as is
> > > expected from Apache projects, such as not stating the license terms
> and
> > > not respecting notices of dependencies.
> > >
> > > Why are these projects not part of Apache Weex (incubating)?
> > >
> > > Furthermore, it is not only .java files that are expected to have the
> > > license headers. We expect that in every source file that allows for
> > > comments. And it is missing all over the place, such as javascripts,
> XML
> > > files, build files, shell script files and so on.
> > >
> > > In the incubator-weex-1f7ed88/flow-typed/npm directory, which is some
> > type
> > > of "replacements" for other things. What is this, because some of those
> > > stubs are for GPL'd code, so I want to have a clear understanding of
> what
> > > is going on here...
> > >
> > >
> > > HOLD THE PRESSES; animationjs is listed in package.json as a
> dependency,
> > > and used in html5/render/browser/extend/components/slider/carrousel.
> js.
> > > This is GPL'd code and is viral, meaning that Weex is REQUIRED to be
> > GPL'd
> > > as well, which ASF don't allow.
> > >
> > > What disturbs me right now, because this is the second thing I picked
> at
> > > random. SO how many more unacceptable dependencies do we have in Weex,
> > > especially considering the transitive dependencies via the
> > weexteam/weex-*
> > > projects?
> > >
> > >
> > > So, this RC CAN NOT BE RELEASED, and I will block until a full review
> of
> > > all dependencies have been done (and if I am doing the review, it will
> > take
> > > months)
> > >
> > >
> > > Niclas
> > >
> > >
> > > On Thu, Apr 13, 2017 at 6:24 PM, sospartan <so...@apache.org>
> wrote:
> > >
> > > > Hi Weex PPMC,
> > > >
> > > > I'm calling this vote to release Apache Weex 0.12.0-RC0.
> > > >
> > > > The tag to be voted upon:
> > > > https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git
> > > > ;a=shortlog;h=refs/tags/0.12.0-rc0
> > > >
> > > > The commit hash:
> > > > https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git
> > > > ;a=commit;h=1f7ed8880cf0938ba079b57aa2dc46ee484983d2
> > > >
> > > > The source tarball can be found at:
> > > > https://dist.apache.org/repos/dist/dev/incubator/weex/0.12.0
> > > > -incubating/RC0/
> > > >
> > > > The fingerprint of key to sign release artifacts:
> > > > 97B9 6598 A6A3 B63C 53BD 77E9 44C5 2286 22B9 7784
> > > >
> > > > Release artifacts are signed with the following key:
> > > > https://dist.apache.org/repos/dist/dev/incubator/weex/KEYS
> > > >
> > > > Release note about this version:
> > > > https://issues.apache.org/jira/browse/WEEX-26
> > > >
> > > > This vote will remain open for at least 72 hours.
> > > > Please vote on releasing this RC.
> > > >
> > > > [ ] +1 approve
> > > > [ ] +0 no opinion
> > > > [ ] -1 disapprove (and reason why)
> > > >
> > > >
> > > > --
> > > > Best Regards!
> > > > ------------------------------
> > > >
> > > > sospartan
> > > > https://weex-project.io
> > > >
> > >
> > >
> > >
> > > --
> > > Niclas Hedhman, Software Developer
> > > http://polygene.apache.org - New Energy for Java
> > >
> >
> >
> >
> > --
> > sospartan
> > Phone:13588488290
> > HangZhou
> >
>
>
>
> --
> Niclas Hedhman, Software Developer
> http://polygene.apache.org - New Energy for Java
>
--
sospartan
Phone:13588488290
HangZhou
Re: [VOTE] Release of Apache Weex (incubating) 0.12.0-RC0
Posted by Niclas Hedhman <ni...@hedhman.org>.
Well, the weexteam projects are listed as direct dependencies...
"dependencies": {
"animationjs": "^0.1.5",
"core-js": "^2.4.0",
"cubicbezier": "^0.1.1",
"envd": "^0.1.1",
"httpurl": "^0.1.1",
"lazyimg": "^0.1.5",
"modals": "^0.1.6",
"query-string": "^4.2.3",
"scroll-to": "0.0.2",
"semver": "^5.1.0",
"weex-components": "^0.2.0",
"weex-picker": "^0.1.0",
"weex-rax-framework": "0.1.7",
"weex-styler":"0.1.8",
"weex-vue-framework": "2.1.8-weex.1"
},
So, sorry if I don't see that as "not core parts of weex but some
derivative projects."
animationJs ; my apologies. What showed up in my google search was
https://github.com/lathoub/AnimationJS.
flow-types; Not sure what you mean. Please elaborate.
On Fri, Apr 14, 2017 at 3:24 PM, sospartan <so...@gmail.com> wrote:
> I'll check every dependency, includes npm dependencies in package.json/
> dependencies import by android's gradle or dependencies imported by ios's
> Pod, and update the NOTICE file.
>
> The weex-* project are side project maintain by weex or related teams. I'll
> check licenses of these projects. These projects are not core parts of weex
> but some derivative projects.
>
> I'll update other file type like XML/Shell scripts to have a proper src
> header.
>
> Files under 'flow-typed/' are generated to help run lint against js code.
> It's not 'source code'. Including js file under android and ios SDK's
> assets (android/sdk/assets,etc.)
> @Niclas How do we deal these generate file?
>
> 'animationjs' is a library maintained by Danz He. I'm notice this library
> is MIT, not GPL.
>
>
> On Fri, Apr 14, 2017 at 10:48 AM, Niclas Hedhman <ni...@hedhman.org>
> wrote:
>
> > -1 ( VETO - dependency on GPL code)
> >
> >
> > The NOTICE file contains notices about 5 dependencies, but the list of
> > dependencies in package.json is much bigger, and I would assume that most
> > of them are released under a license that requires attribution.
> >
> > Also, what is the relationship with the weex-* dependencies? Looking at
> > weex-picker, it doesn't seem to be released with the same rigor as is
> > expected from Apache projects, such as not stating the license terms and
> > not respecting notices of dependencies.
> >
> > Why are these projects not part of Apache Weex (incubating)?
> >
> > Furthermore, it is not only .java files that are expected to have the
> > license headers. We expect that in every source file that allows for
> > comments. And it is missing all over the place, such as javascripts, XML
> > files, build files, shell script files and so on.
> >
> > In the incubator-weex-1f7ed88/flow-typed/npm directory, which is some
> type
> > of "replacements" for other things. What is this, because some of those
> > stubs are for GPL'd code, so I want to have a clear understanding of what
> > is going on here...
> >
> >
> > HOLD THE PRESSES; animationjs is listed in package.json as a dependency,
> > and used in html5/render/browser/extend/components/slider/carrousel.js.
> > This is GPL'd code and is viral, meaning that Weex is REQUIRED to be
> GPL'd
> > as well, which ASF don't allow.
> >
> > What disturbs me right now, because this is the second thing I picked at
> > random. SO how many more unacceptable dependencies do we have in Weex,
> > especially considering the transitive dependencies via the
> weexteam/weex-*
> > projects?
> >
> >
> > So, this RC CAN NOT BE RELEASED, and I will block until a full review of
> > all dependencies have been done (and if I am doing the review, it will
> take
> > months)
> >
> >
> > Niclas
> >
> >
> > On Thu, Apr 13, 2017 at 6:24 PM, sospartan <so...@apache.org> wrote:
> >
> > > Hi Weex PPMC,
> > >
> > > I'm calling this vote to release Apache Weex 0.12.0-RC0.
> > >
> > > The tag to be voted upon:
> > > https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git
> > > ;a=shortlog;h=refs/tags/0.12.0-rc0
> > >
> > > The commit hash:
> > > https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git
> > > ;a=commit;h=1f7ed8880cf0938ba079b57aa2dc46ee484983d2
> > >
> > > The source tarball can be found at:
> > > https://dist.apache.org/repos/dist/dev/incubator/weex/0.12.0
> > > -incubating/RC0/
> > >
> > > The fingerprint of key to sign release artifacts:
> > > 97B9 6598 A6A3 B63C 53BD 77E9 44C5 2286 22B9 7784
> > >
> > > Release artifacts are signed with the following key:
> > > https://dist.apache.org/repos/dist/dev/incubator/weex/KEYS
> > >
> > > Release note about this version:
> > > https://issues.apache.org/jira/browse/WEEX-26
> > >
> > > This vote will remain open for at least 72 hours.
> > > Please vote on releasing this RC.
> > >
> > > [ ] +1 approve
> > > [ ] +0 no opinion
> > > [ ] -1 disapprove (and reason why)
> > >
> > >
> > > --
> > > Best Regards!
> > > ------------------------------
> > >
> > > sospartan
> > > https://weex-project.io
> > >
> >
> >
> >
> > --
> > Niclas Hedhman, Software Developer
> > http://polygene.apache.org - New Energy for Java
> >
>
>
>
> --
> sospartan
> Phone:13588488290
> HangZhou
>
--
Niclas Hedhman, Software Developer
http://polygene.apache.org - New Energy for Java
Re: [VOTE] Release of Apache Weex (incubating) 0.12.0-RC0
Posted by sospartan <so...@gmail.com>.
I'll check every dependency, includes npm dependencies in package.json/
dependencies import by android's gradle or dependencies imported by ios's
Pod, and update the NOTICE file.
The weex-* project are side project maintain by weex or related teams. I'll
check licenses of these projects. These projects are not core parts of weex
but some derivative projects.
I'll update other file type like XML/Shell scripts to have a proper src
header.
Files under 'flow-typed/' are generated to help run lint against js code.
It's not 'source code'. Including js file under android and ios SDK's
assets (android/sdk/assets,etc.)
@Niclas How do we deal these generate file?
'animationjs' is a library maintained by Danz He. I'm notice this library
is MIT, not GPL.
On Fri, Apr 14, 2017 at 10:48 AM, Niclas Hedhman <ni...@hedhman.org> wrote:
> -1 ( VETO - dependency on GPL code)
>
>
> The NOTICE file contains notices about 5 dependencies, but the list of
> dependencies in package.json is much bigger, and I would assume that most
> of them are released under a license that requires attribution.
>
> Also, what is the relationship with the weex-* dependencies? Looking at
> weex-picker, it doesn't seem to be released with the same rigor as is
> expected from Apache projects, such as not stating the license terms and
> not respecting notices of dependencies.
>
> Why are these projects not part of Apache Weex (incubating)?
>
> Furthermore, it is not only .java files that are expected to have the
> license headers. We expect that in every source file that allows for
> comments. And it is missing all over the place, such as javascripts, XML
> files, build files, shell script files and so on.
>
> In the incubator-weex-1f7ed88/flow-typed/npm directory, which is some type
> of "replacements" for other things. What is this, because some of those
> stubs are for GPL'd code, so I want to have a clear understanding of what
> is going on here...
>
>
> HOLD THE PRESSES; animationjs is listed in package.json as a dependency,
> and used in html5/render/browser/extend/components/slider/carrousel.js.
> This is GPL'd code and is viral, meaning that Weex is REQUIRED to be GPL'd
> as well, which ASF don't allow.
>
> What disturbs me right now, because this is the second thing I picked at
> random. SO how many more unacceptable dependencies do we have in Weex,
> especially considering the transitive dependencies via the weexteam/weex-*
> projects?
>
>
> So, this RC CAN NOT BE RELEASED, and I will block until a full review of
> all dependencies have been done (and if I am doing the review, it will take
> months)
>
>
> Niclas
>
>
> On Thu, Apr 13, 2017 at 6:24 PM, sospartan <so...@apache.org> wrote:
>
> > Hi Weex PPMC,
> >
> > I'm calling this vote to release Apache Weex 0.12.0-RC0.
> >
> > The tag to be voted upon:
> > https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git
> > ;a=shortlog;h=refs/tags/0.12.0-rc0
> >
> > The commit hash:
> > https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git
> > ;a=commit;h=1f7ed8880cf0938ba079b57aa2dc46ee484983d2
> >
> > The source tarball can be found at:
> > https://dist.apache.org/repos/dist/dev/incubator/weex/0.12.0
> > -incubating/RC0/
> >
> > The fingerprint of key to sign release artifacts:
> > 97B9 6598 A6A3 B63C 53BD 77E9 44C5 2286 22B9 7784
> >
> > Release artifacts are signed with the following key:
> > https://dist.apache.org/repos/dist/dev/incubator/weex/KEYS
> >
> > Release note about this version:
> > https://issues.apache.org/jira/browse/WEEX-26
> >
> > This vote will remain open for at least 72 hours.
> > Please vote on releasing this RC.
> >
> > [ ] +1 approve
> > [ ] +0 no opinion
> > [ ] -1 disapprove (and reason why)
> >
> >
> > --
> > Best Regards!
> > ------------------------------
> >
> > sospartan
> > https://weex-project.io
> >
>
>
>
> --
> Niclas Hedhman, Software Developer
> http://polygene.apache.org - New Energy for Java
>
--
sospartan
Phone:13588488290
HangZhou
Re: [VOTE] Release of Apache Weex (incubating) 0.12.0-RC0
Posted by sospartan <so...@apache.org>.
Dear 余星,
Pls use english to join discuss in this mail list.
If you want feedback a problem, pls start a new thread.
On Fri, Apr 14, 2017 at 11:08 AM, 余星 <64...@qq.com> wrote:
> 是在android 情况下的。
> https://segmentfault.com/q/1010000009063524
> apache 这个提问方式不熟悉，不知道怎么弄，在segmentfault也提了个问题
>
>
>
>
> ------------------ 原始邮件 ------------------
> 发件人: "sospartan"<so...@gmail.com>;
> 发送时间: 2017年4月14日(星期五) 中午11:05
> 收件人: "dev"<de...@weex.incubator.apache.org>;
> 主题: Re: [VOTE] Release of Apache Weex (incubating) 0.12.0-RC0
>
>
>
> I've review all major source code and replace with apache src-header：
> android .java file under 'android'
> ios .m & .h file under 'ios'
> html5 .js file under 'html5'
>
> I'll create JIRA issues to follow up these problems.
>
> On Fri, Apr 14, 2017 at 10:48 AM, Niclas Hedhman <ni...@hedhman.org>
> wrote:
>
> > -1 ( VETO - dependency on GPL code)
> >
> >
> > The NOTICE file contains notices about 5 dependencies, but the list of
> > dependencies in package.json is much bigger, and I would assume that most
> > of them are released under a license that requires attribution.
> >
> > Also, what is the relationship with the weex-* dependencies? Looking at
> > weex-picker, it doesn't seem to be released with the same rigor as is
> > expected from Apache projects, such as not stating the license terms and
> > not respecting notices of dependencies.
> >
> > Why are these projects not part of Apache Weex (incubating)?
> >
> > Furthermore, it is not only .java files that are expected to have the
> > license headers. We expect that in every source file that allows for
> > comments. And it is missing all over the place, such as javascripts, XML
> > files, build files, shell script files and so on.
> >
> > In the incubator-weex-1f7ed88/flow-typed/npm directory, which is some
> type
> > of "replacements" for other things. What is this, because some of those
> > stubs are for GPL'd code, so I want to have a clear understanding of what
> > is going on here...
> >
> >
> > HOLD THE PRESSES; animationjs is listed in package.json as a dependency,
> > and used in html5/render/browser/extend/components/slider/carrousel.js.
> > This is GPL'd code and is viral, meaning that Weex is REQUIRED to be
> GPL'd
> > as well, which ASF don't allow.
> >
> > What disturbs me right now, because this is the second thing I picked at
> > random. SO how many more unacceptable dependencies do we have in Weex,
> > especially considering the transitive dependencies via the
> weexteam/weex-*
> > projects?
> >
> >
> > So, this RC CAN NOT BE RELEASED, and I will block until a full review of
> > all dependencies have been done (and if I am doing the review, it will
> take
> > months)
> >
> >
> > Niclas
> >
> >
> > On Thu, Apr 13, 2017 at 6:24 PM, sospartan <so...@apache.org> wrote:
> >
> > > Hi Weex PPMC,
> > >
> > > I'm calling this vote to release Apache Weex 0.12.0-RC0.
> > >
> > > The tag to be voted upon:
> > > https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git
> > > ;a=shortlog;h=refs/tags/0.12.0-rc0
> > >
> > > The commit hash:
> > > https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git
> > > ;a=commit;h=1f7ed8880cf0938ba079b57aa2dc46ee484983d2
> > >
> > > The source tarball can be found at:
> > > https://dist.apache.org/repos/dist/dev/incubator/weex/0.12.0
> > > -incubating/RC0/
> > >
> > > The fingerprint of key to sign release artifacts:
> > > 97B9 6598 A6A3 B63C 53BD 77E9 44C5 2286 22B9 7784
> > >
> > > Release artifacts are signed with the following key:
> > > https://dist.apache.org/repos/dist/dev/incubator/weex/KEYS
> > >
> > > Release note about this version:
> > > https://issues.apache.org/jira/browse/WEEX-26
> > >
> > > This vote will remain open for at least 72 hours.
> > > Please vote on releasing this RC.
> > >
> > > [ ] +1 approve
> > > [ ] +0 no opinion
> > > [ ] -1 disapprove (and reason why)
> > >
> > >
> > > --
> > > Best Regards!
> > > ------------------------------
> > >
> > > sospartan
> > > https://weex-project.io
> > >
> >
> >
> >
> > --
> > Niclas Hedhman, Software Developer
> > http://polygene.apache.org - New Energy for Java
> >
>
>
>
> --
> sospartan
> Phone:13588488290
> HangZhou
>
--
Best Regards!
------------------------------
sospartan
https://weex-project.io
回复： [VOTE] Release of Apache Weex (incubating) 0.12.0-RC0
Posted by 余星 <64...@qq.com>.
是在android 情况下的。
https://segmentfault.com/q/1010000009063524
apache 这个提问方式不熟悉，不知道怎么弄，在segmentfault也提了个问题
------------------ 原始邮件 ------------------
发件人: "sospartan"<so...@gmail.com>;
发送时间: 2017年4月14日(星期五) 中午11:05
收件人: "dev"<de...@weex.incubator.apache.org>;
主题: Re: [VOTE] Release of Apache Weex (incubating) 0.12.0-RC0
I've review all major source code and replace with apache src-header：
android .java file under 'android'
ios .m & .h file under 'ios'
html5 .js file under 'html5'
I'll create JIRA issues to follow up these problems.
On Fri, Apr 14, 2017 at 10:48 AM, Niclas Hedhman <ni...@hedhman.org> wrote:
> -1 ( VETO - dependency on GPL code)
>
>
> The NOTICE file contains notices about 5 dependencies, but the list of
> dependencies in package.json is much bigger, and I would assume that most
> of them are released under a license that requires attribution.
>
> Also, what is the relationship with the weex-* dependencies? Looking at
> weex-picker, it doesn't seem to be released with the same rigor as is
> expected from Apache projects, such as not stating the license terms and
> not respecting notices of dependencies.
>
> Why are these projects not part of Apache Weex (incubating)?
>
> Furthermore, it is not only .java files that are expected to have the
> license headers. We expect that in every source file that allows for
> comments. And it is missing all over the place, such as javascripts, XML
> files, build files, shell script files and so on.
>
> In the incubator-weex-1f7ed88/flow-typed/npm directory, which is some type
> of "replacements" for other things. What is this, because some of those
> stubs are for GPL'd code, so I want to have a clear understanding of what
> is going on here...
>
>
> HOLD THE PRESSES; animationjs is listed in package.json as a dependency,
> and used in html5/render/browser/extend/components/slider/carrousel.js.
> This is GPL'd code and is viral, meaning that Weex is REQUIRED to be GPL'd
> as well, which ASF don't allow.
>
> What disturbs me right now, because this is the second thing I picked at
> random. SO how many more unacceptable dependencies do we have in Weex,
> especially considering the transitive dependencies via the weexteam/weex-*
> projects?
>
>
> So, this RC CAN NOT BE RELEASED, and I will block until a full review of
> all dependencies have been done (and if I am doing the review, it will take
> months)
>
>
> Niclas
>
>
> On Thu, Apr 13, 2017 at 6:24 PM, sospartan <so...@apache.org> wrote:
>
> > Hi Weex PPMC,
> >
> > I'm calling this vote to release Apache Weex 0.12.0-RC0.
> >
> > The tag to be voted upon:
> > https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git
> > ;a=shortlog;h=refs/tags/0.12.0-rc0
> >
> > The commit hash:
> > https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git
> > ;a=commit;h=1f7ed8880cf0938ba079b57aa2dc46ee484983d2
> >
> > The source tarball can be found at:
> > https://dist.apache.org/repos/dist/dev/incubator/weex/0.12.0
> > -incubating/RC0/
> >
> > The fingerprint of key to sign release artifacts:
> > 97B9 6598 A6A3 B63C 53BD 77E9 44C5 2286 22B9 7784
> >
> > Release artifacts are signed with the following key:
> > https://dist.apache.org/repos/dist/dev/incubator/weex/KEYS
> >
> > Release note about this version:
> > https://issues.apache.org/jira/browse/WEEX-26
> >
> > This vote will remain open for at least 72 hours.
> > Please vote on releasing this RC.
> >
> > [ ] +1 approve
> > [ ] +0 no opinion
> > [ ] -1 disapprove (and reason why)
> >
> >
> > --
> > Best Regards!
> > ------------------------------
> >
> > sospartan
> > https://weex-project.io
> >
>
>
>
> --
> Niclas Hedhman, Software Developer
> http://polygene.apache.org - New Energy for Java
>
--
sospartan
Phone:13588488290
HangZhou
Re: [VOTE] Release of Apache Weex (incubating) 0.12.0-RC0
Posted by sospartan <so...@gmail.com>.
I've review all major source code and replace with apache src-header：
android .java file under 'android'
ios .m & .h file under 'ios'
html5 .js file under 'html5'
I'll create JIRA issues to follow up these problems.
On Fri, Apr 14, 2017 at 10:48 AM, Niclas Hedhman <ni...@hedhman.org> wrote:
> -1 ( VETO - dependency on GPL code)
>
>
> The NOTICE file contains notices about 5 dependencies, but the list of
> dependencies in package.json is much bigger, and I would assume that most
> of them are released under a license that requires attribution.
>
> Also, what is the relationship with the weex-* dependencies? Looking at
> weex-picker, it doesn't seem to be released with the same rigor as is
> expected from Apache projects, such as not stating the license terms and
> not respecting notices of dependencies.
>
> Why are these projects not part of Apache Weex (incubating)?
>
> Furthermore, it is not only .java files that are expected to have the
> license headers. We expect that in every source file that allows for
> comments. And it is missing all over the place, such as javascripts, XML
> files, build files, shell script files and so on.
>
> In the incubator-weex-1f7ed88/flow-typed/npm directory, which is some type
> of "replacements" for other things. What is this, because some of those
> stubs are for GPL'd code, so I want to have a clear understanding of what
> is going on here...
>
>
> HOLD THE PRESSES; animationjs is listed in package.json as a dependency,
> and used in html5/render/browser/extend/components/slider/carrousel.js.
> This is GPL'd code and is viral, meaning that Weex is REQUIRED to be GPL'd
> as well, which ASF don't allow.
>
> What disturbs me right now, because this is the second thing I picked at
> random. SO how many more unacceptable dependencies do we have in Weex,
> especially considering the transitive dependencies via the weexteam/weex-*
> projects?
>
>
> So, this RC CAN NOT BE RELEASED, and I will block until a full review of
> all dependencies have been done (and if I am doing the review, it will take
> months)
>
>
> Niclas
>
>
> On Thu, Apr 13, 2017 at 6:24 PM, sospartan <so...@apache.org> wrote:
>
> > Hi Weex PPMC,
> >
> > I'm calling this vote to release Apache Weex 0.12.0-RC0.
> >
> > The tag to be voted upon:
> > https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git
> > ;a=shortlog;h=refs/tags/0.12.0-rc0
> >
> > The commit hash:
> > https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git
> > ;a=commit;h=1f7ed8880cf0938ba079b57aa2dc46ee484983d2
> >
> > The source tarball can be found at:
> > https://dist.apache.org/repos/dist/dev/incubator/weex/0.12.0
> > -incubating/RC0/
> >
> > The fingerprint of key to sign release artifacts:
> > 97B9 6598 A6A3 B63C 53BD 77E9 44C5 2286 22B9 7784
> >
> > Release artifacts are signed with the following key:
> > https://dist.apache.org/repos/dist/dev/incubator/weex/KEYS
> >
> > Release note about this version:
> > https://issues.apache.org/jira/browse/WEEX-26
> >
> > This vote will remain open for at least 72 hours.
> > Please vote on releasing this RC.
> >
> > [ ] +1 approve
> > [ ] +0 no opinion
> > [ ] -1 disapprove (and reason why)
> >
> >
> > --
> > Best Regards!
> > ------------------------------
> >
> > sospartan
> > https://weex-project.io
> >
>
>
>
> --
> Niclas Hedhman, Software Developer
> http://polygene.apache.org - New Energy for Java
>
--
sospartan
Phone:13588488290
HangZhou
Re: [VOTE] Release of Apache Weex (incubating) 0.12.0-RC0
Posted by Niclas Hedhman <ni...@hedhman.org>.
-1 ( VETO - dependency on GPL code)
The NOTICE file contains notices about 5 dependencies, but the list of
dependencies in package.json is much bigger, and I would assume that most
of them are released under a license that requires attribution.
Also, what is the relationship with the weex-* dependencies? Looking at
weex-picker, it doesn't seem to be released with the same rigor as is
expected from Apache projects, such as not stating the license terms and
not respecting notices of dependencies.
Why are these projects not part of Apache Weex (incubating)?
Furthermore, it is not only .java files that are expected to have the
license headers. We expect that in every source file that allows for
comments. And it is missing all over the place, such as javascripts, XML
files, build files, shell script files and so on.
In the incubator-weex-1f7ed88/flow-typed/npm directory, which is some type
of "replacements" for other things. What is this, because some of those
stubs are for GPL'd code, so I want to have a clear understanding of what
is going on here...
HOLD THE PRESSES; animationjs is listed in package.json as a dependency,
and used in html5/render/browser/extend/components/slider/carrousel.js.
This is GPL'd code and is viral, meaning that Weex is REQUIRED to be GPL'd
as well, which ASF don't allow.
What disturbs me right now, because this is the second thing I picked at
random. SO how many more unacceptable dependencies do we have in Weex,
especially considering the transitive dependencies via the weexteam/weex-*
projects?
So, this RC CAN NOT BE RELEASED, and I will block until a full review of
all dependencies have been done (and if I am doing the review, it will take
months)
Niclas
On Thu, Apr 13, 2017 at 6:24 PM, sospartan <so...@apache.org> wrote:
> Hi Weex PPMC,
>
> I'm calling this vote to release Apache Weex 0.12.0-RC0.
>
> The tag to be voted upon:
> https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git
> ;a=shortlog;h=refs/tags/0.12.0-rc0
>
> The commit hash:
> https://git-wip-us.apache.org/repos/asf?p=incubator-weex.git
> ;a=commit;h=1f7ed8880cf0938ba079b57aa2dc46ee484983d2
>
> The source tarball can be found at:
> https://dist.apache.org/repos/dist/dev/incubator/weex/0.12.0
> -incubating/RC0/
>
> The fingerprint of key to sign release artifacts:
> 97B9 6598 A6A3 B63C 53BD 77E9 44C5 2286 22B9 7784
>
> Release artifacts are signed with the following key:
> https://dist.apache.org/repos/dist/dev/incubator/weex/KEYS
>
> Release note about this version:
> https://issues.apache.org/jira/browse/WEEX-26
>
> This vote will remain open for at least 72 hours.
> Please vote on releasing this RC.
>
> [ ] +1 approve
> [ ] +0 no opinion
> [ ] -1 disapprove (and reason why)
>
>
> --
> Best Regards!
> ------------------------------
>
> sospartan
> https://weex-project.io
>
--
Niclas Hedhman, Software Developer
http://polygene.apache.org - New Energy for Java