[NUTCH-2290] Update licenses of bundled libraries

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.3.1, 1.12
• Fix Version/s: 1.19
• Component/s: deployment
• Labels: help-wanted
• Assignee: Sebastian Nagel
• Reporter: Sebastian Nagel
• Created: 29/Jun/16 11:05
• Updated: 13/Mar/24 14:50
• Resolved: 19/Aug/22 12:57

Description

The files LICENSE.txt and NOTICE.txt were last edited 5 years ago and should be updated to include all licenses of dependencies (and their dependencies) in accordance to Assembling LICENSE and NOTICE HOWTO:

1. check for missing or obsolete licenses due to added or removed dependencies
2. update year in NOTICE.txt – should be a range according to the licensing HOWTO
3. bundled libraries are referenced with path and version number, e.g lib/icu4j-4_0_1.jar. This would require to update the LICENSE.txt with every dependency upgrade. A more generic reference ("ICU4J") would be easier to maintain but the HOWTO requires to "specify the version of the dependency as licenses are sometimes changed".
4. try to reduce the size of LICENSE.txt (currently 5800 lines). Mainly, according to the HOWTO there is no need to repeat the Apache license again and again.

Issue Links

• relates to: ANY23-372 LGPL-licensed transitive dependency
• links to: GitHub Pull Request #743

Sub-Tasks

• Generate report of third-party licenses: Closed
• Unbundle LGPL-licensed jars from binary release: Closed
• Upgrade any23 plugin dependency to 2.4: Closed