[TAMAYA-144] Ensure correct licensing for binary distribution

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Won't Fix
• Affects Version/s: 0.2-incubating
• Component/s: API, Docs, Extensions
• Labels: build tamaya-required-03
• Flags: Important
• Assignee: Oliver B. Fischer
• Reporter: Anatole Tresch
• Created: 11/Apr/16 15:58
• Updated: 06/Aug/17 07:48
• Resolved: 09/May/17 20:35

Description

The binary LICENSE and NOTICE needs a little work [1], could you please fix this for the next release.

• LICENSE is missing MIT licensed Asciidoctor and CodeRay (used in docs)
• The final jar contains a number of 3rd party licensed software that is not mentioned in LICENSE/NOTICE. This includes Dropwizard (Apache license with NOTICE file), Jackson Core, Databind and Annotations (Apache), Gogole Common libs, Joda Time (Apache with NOTICE), Jackson Afterburner (Apache?), slf4j (MIT), Logbock (EPL or GNU), Hibinate Validator (Apache), Glassfish (CDDL), Sun Expression Language Reference Implementation (CDDL), snakeyaml (Apache), Apache Commons, Jetty (Apache with NOTICE), Jersey (CDDL), H2K (CDDL), Javassist (MPL or GPL), Metrics (Apache), argparse4j (MIT), Arquillian (Apache?), Shrink-wrap (Apache?), JBoss Modules (Apache), JBoss logging (Apache).

Most of this is Apache licensed, but there a few NOTICE files that may effect your NOTICE [3] and there a couple of MIT licensed file. The CDDL / MPL license software which need to treated carefully. [4]

I may of missed a couple and you may want to double check the JBoss logging as at one point it was GPL not Apache licensed.

Thanks,
Justin

1. http://www.apache.org/dev/licensing-howto.html#binary
2. ./modules/server/lib/tamaya-server-0.2-incubating.jar
3. http://www.apache.org/dev/licensing-howto.html#alv2-dep
4. http://www.apache.org/legal/resolved.html#category-b

Issue Links

• is superceded by: TAMAYA-270 Drop the binary distribution for core and extensions

Sub-Tasks

• Ensure that the binary distribution of the extensions contains all 3rd party libs: Closed
• Don't generate source and default jar for the distribution module of the extensions: Closed
• Don't generate source and default jar for the distribution module of the core: Closed
• Update Maven Assembly Plugin of Core to 3.0.0: Closed