You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@metron.apache.org by "ASF GitHub Bot (JIRA)" <ji...@apache.org> on 2016/08/24 21:28:21 UTC
[jira] [Commented] (METRON-374) Add appropriate bundled 3rd party
licenses to NOTICE and LICENSE where appropriate
[ https://issues.apache.org/jira/browse/METRON-374?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15435744#comment-15435744 ]
ASF GitHub Bot commented on METRON-374:
---------------------------------------
GitHub user cestella opened a pull request:
https://github.com/apache/incubator-metron/pull/229
METRON-374: Add appropriate bundled 3rd party licenses to NOTICE and LICENSE where appropriate
This PR ensures:
* Every place where we create a shaded jar, we must add appropriate links to a binary distribution LICENSE file in the META-INF directory to indicate we are bundling
* When new components are added, we must ensure that we have a handle on licensing to ensure they are not prohibited.
From here on, if you add a dependency, you must add a line to the `dependencies_with_url.csv`. Travis will take the transitive dependency list and check against this file to ensure that it's listed. This will make sure we track dependencies.
Also, `dependencies_with_url.csv` can be used with the `build_utils/create_bundled_licenses.sh` to generate the binary licenses that live inside of the shaded jars.
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/cestella/incubator-metron METRON-374
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/incubator-metron/pull/229.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #229
----
commit c572e460d9fb1e1b24bfbc88562ba366c7a0987a
Author: cstella <ce...@gmail.com>
Date: 2016-08-24T21:22:48Z
METRON-374: Add appropriate bundled 3rd party licenses to NOTICE and LICENSE where appropriate
----
> Add appropriate bundled 3rd party licenses to NOTICE and LICENSE where appropriate
> ----------------------------------------------------------------------------------
>
> Key: METRON-374
> URL: https://issues.apache.org/jira/browse/METRON-374
> Project: Metron
> Issue Type: Task
> Reporter: Casey Stella
> Fix For: 0.2.1BETA
>
>
> We are careful around licensing source bundled components appropriately, but we have neglected to handle binary bundled components as part of the uber jars that we create. These 3rd party dependencies should be referenced in the NOTICE and LICENSE files where appropriate.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)