Details
-
Task
-
Status: Resolved
-
Blocker
-
Resolution: Fixed
-
None
-
None
Description
To paraphrase from Ate's comments on release-0.8.8
- asterix-installer-0.8.8-incubating-binary-assembly.zip, NOTICE file, and
asterix-server-0.8.8-incubating-binary-assembly.zip, NOTICE file:
- While many/most bundled artifacts are listed and attributed, a few stand out
to be missing, like all repo/hadoop* artifacts (23x).
I also noticed however that none of these hadoop artifacts have a NOTICE nor a
LICENSE file bundled themselves, while of course they should as have them
as ASF released artifacts. Not a good example
That said, many/common 3rd party non-ASF libraries don't bundle a L/N file,
but still we need to make sure they are properly attributed in either or
both of our LICENSE or NOTICE.
This means we'll have to do manual digging/hunting what their possible
license and notice conditions are etc. No license means off limits to use.
This is also where attempts to automate/generate ASF LICENSE and NOTICE files
always end up failing..
Attachments
Issue Links
- is related to
-
ASTERIXDB-1319 AsterixDB source release LICENSE issues
- Resolved
-
ASTERIXDB-1320 Improvements to LICENSE/NOTICE in binary artifacts
- Resolved