[jira] (MNG-5496) Fixing NOTICE and LICENSE files

["Jason van Zyl (JIRA)" <ji...@codehaus.org>]

     [ https://jira.codehaus.org/browse/MNG-5496?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jason van Zyl closed MNG-5496.
------------------------------

    Resolution: Fixed

> Fixing NOTICE and LICENSE files
> -------------------------------
>
>                 Key: MNG-5496
>                 URL: https://jira.codehaus.org/browse/MNG-5496
>             Project: Maven 2 & 3
>          Issue Type: Bug
>    Affects Versions: 3.1.0
>            Reporter: SebbASF
>            Priority: Blocker
>
> The NOTICE and LICENSE files are an essential part of any release.
> They need to relate to the contents of the bundle in which they are located and it is important that they don't contain anything superfluous [1]
> Each distribution artifact potentially needs its own specific N&L files.
> In particular, the source and binary artifacts will generally need different versions, as the binary often bundles additional items, for example 3rd party jars.
> However the jar files which are created from the SCM source probably can use the same license as the source archive.
> However, the existing N&L files in 3.1.0 fall short on several counts:
> The source and binary NOTICE files both start as follows:
> >>>>>
>    =========================================================================
>    ==  NOTICE file corresponding to the section 4 d of                    ==
>    ==  the Apache License, Version 2.0,                                   ==
>    ==  in this case for the Apache Maven distribution.                    ==
>    =========================================================================
> Apache Maven
> Copyright 2001-2013 The Apache Software Foundation
> This product includes software developed by
> The Apache Software Foundation (http://www.apache.org/).
> <<<<<<<<<<<
> However, the file must start as follows:
> >>>>
> Apache Maven
> Copyright 2001-2013 The Apache Software Foundation
> This product includes software developed at
> The Apache Software Foundation (http://www.apache.org/).
> <<<<
> Note particularly that the phrase is "developed at" not "developed by"
> The source NOTICE file is the same as the binary NOTICE file, yet the binary archive contains lots of additional jars.
> It looks to me as though the above 5 lines is all that are needed for the source archive. The existing source LICENSE.txt file looks OK.
> However, the binary LICENSE file makes no mention at all of any licenses for the additional products. It should point to the licenses for each of the additional products that are included, for example: Aether, Sisu, Plexus etc. These licenses need to be obtained and stored in a suitable directory which is referenced in LICENSE.txt.
> [1] http://www.apache.org/dev/licensing-howto.html



--
This message was sent by Atlassian JIRA
(v6.1.6#6162)