You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@maven.apache.org by Eric Kolotyluk <er...@gmail.com> on 2011/05/03 22:01:45 UTC

Searching Dependencies and Licenses

After using shade to build an uber-jar I was looking through the 
uber-jar with 7zip and found a GLP2 license file. Presumably I have 
picked up GPL'd artifact somewhere. How would I be able to find out 
which artifact contains the GPL license so I can remove it?

Cheers, Eric

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
For additional commands, e-mail: users-help@maven.apache.org


Re: Searching Dependencies and Licenses

Posted by Stephen Connolly <st...@gmail.com>.
On 4 May 2011 03:24, Wayne Fay <wa...@gmail.com> wrote:

> > After using shade to build an uber-jar I was looking through the uber-jar
> > with 7zip and found a GLP2 license file. Presumably I have picked up
> GPL'd
> > artifact somewhere. How would I be able to find out which artifact
> contains
> > the GPL license so I can remove it?
>
> "mvn site" has a dependency report that may help track this down. But
> realize that it is not mandatory for a given artifact to fill in the
> <license> information in the pom file, so garbage in > garbage out,
> and there is no guarantee this will help.
>
> Here are some samples of the report:
> http://maven.apache.org/ant-tasks/dependencies.html
> http://maven.apache.org/surefire/dependencies.html
>
> You may also want to look at this plugin:
> http://mojo.codehaus.org/license-maven-plugin/
>
>
And there is also https://github.com/cloudbees/maven-license-plugin

Though I have chastised KK for NIH Syndrome and I think it will get merged
into the mojo one at some point in the future ;-)


> Wayne
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> For additional commands, e-mail: users-help@maven.apache.org
>
>

Re: Searching Dependencies and Licenses

Posted by Wayne Fay <wa...@gmail.com>.
> After using shade to build an uber-jar I was looking through the uber-jar
> with 7zip and found a GLP2 license file. Presumably I have picked up GPL'd
> artifact somewhere. How would I be able to find out which artifact contains
> the GPL license so I can remove it?

"mvn site" has a dependency report that may help track this down. But
realize that it is not mandatory for a given artifact to fill in the
<license> information in the pom file, so garbage in > garbage out,
and there is no guarantee this will help.

Here are some samples of the report:
http://maven.apache.org/ant-tasks/dependencies.html
http://maven.apache.org/surefire/dependencies.html

You may also want to look at this plugin:
http://mojo.codehaus.org/license-maven-plugin/

Wayne

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
For additional commands, e-mail: users-help@maven.apache.org