Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-22954

Whitelist net.java.dev.jna which got pulled in through Hadoop 3.3.0

VotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    Description

      YARN-9477 added a new dependency net.java.dev.jna, which resulted in license check failure in HBase because the checker thinks it's LGPL 2.1 licensed. But in fact, it is dual licensed.

        <name>Java Native Access</name>
        <description>Java Native Access</description>
        <url>https://github.com/java-native-access/jna</url>
      
        <licenses>
            <license>
                <name>LGPL, version 2.1</name>
                <url>http://www.gnu.org/licenses/licenses.html</url>
                <distribution>repo</distribution>
            </license>
            <license>
                <name>Apache License v2.0</name>
                <url>http://www.apache.org/licenses/LICENSE-2.0.txt</url>
                <distribution>repo</distribution>
            </license>
        </licenses>
      

      We can
      (1) white list this dependency
      (2) or update the license checker to search for if any of the licenses is permitted

      Attachments

        1. HBASE-22954.master.001.patch
          1 kB
          Wei-Chiu Chuang
        2. HBASE-22954.001.patch
          0.9 kB
          Wei-Chiu Chuang

        Issue Links

        Activity

          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            weichiu Wei-Chiu Chuang
            weichiu Wei-Chiu Chuang
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment