[jira] [Work logged] (ARTEMIS-3241) binary archive LICENSE file contains improper (and possibly stale) entries for management console deps

["ASF GitHub Bot (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/ARTEMIS-3241?focusedWorklogId=583168&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-583168 ]

ASF GitHub Bot logged work on ARTEMIS-3241:
-------------------------------------------

                Author: ASF GitHub Bot
            Created on: 15/Apr/21 06:37
            Start Date: 15/Apr/21 06:37
    Worklog Time Spent: 10m 
      Work Description: brusdev opened a new pull request #3546:
URL: https://github.com/apache/activemq-artemis/pull/3546


   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Issue Time Tracking
-------------------

            Worklog Id:     (was: 583168)
    Remaining Estimate: 0h
            Time Spent: 10m

> binary archive LICENSE file contains improper (and possibly stale) entries for management console deps
> ------------------------------------------------------------------------------------------------------
>
>                 Key: ARTEMIS-3241
>                 URL: https://issues.apache.org/jira/browse/ARTEMIS-3241
>             Project: ActiveMQ Artemis
>          Issue Type: Bug
>          Components: Web Console
>    Affects Versions: 2.17.0
>            Reporter: Robbie Gemmell
>            Priority: Blocker
>             Fix For: 2.18.0
>
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> The licence file shipped with the binary distribution contains a lot of improper, and possibly stale (see later), entries relating to the management console deps:
> https://github.com/apache/activemq-artemis/blob/2.17.0/artemis-distribution/src/main/resources/licenses/bin/LICENSE#L256-L435
> These entries added mostly link to a file in an external repository, on its master branch. This applicable licences should actually be in the distribution itself (either directly in LICENCE, or in another file referenced from it), links arent sufficient because their contents can change over time (e.g licence and/or version changes) or even go away entirely or just be broken (e.g branch changes) and so may not actually reflect the needed detail or the state that existed when the dependency was used and the LICENCE file entry added.
> Further, these entries could also be somewhat stale now, because they were added in ARTEMIS-1270 back in 2017 but the console has been overhauled recently in ARTEMIS-2838. In addition to being updated to actually ship the licence, the entries should be verified as still applying, and that there aren't any new ones needed from the console update.
> (Noticed during discussion of LICENSE changes on https://github.com/apache/activemq-artemis/pull/3527 / ARTEMIS-3221)



--
This message was sent by Atlassian Jira
(v8.3.4#803005)