This Confluence has been LDAP enabled, if you are an ASF Committer, please use your LDAP Credentials to login. Any problems file an INFRA jira ticket please.

Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Added JIRA issues for the 'Additional notes on LICENSE and NOTICE' remarks

...

 

 

 
 QuoteNotes 
 

Netbeans jars are missing LICENSE and NOTICE file in META_INF. Note that this may vary on a jar by jar basis.

DONE: https://github.com/apache/incubator-netbeans/commit/ddc997a3c5af16d9fc449008db921737839d9d27 
 

./extide/ant/etc/ant-bootstrap.jar (and other ant jars)

- see LICENSE at it mentions SAX2 and that may be missing from LICENSE

 

Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyNETBEANS-823

 
 

./harness/antlib/bindex-2.2.jar

- has odd NOTICE that may impact NOTICE file. Looking at it I think the notice bit should be included and the rest may affect LICENSE.

 

Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyNETBEANS-824

 
 

./ide/modules/com-googlecode-javaewah-JavaEWAH.jar

- has no notice but copyright has been incorrectly add to license you may want to include that in NOTICE as if it was in a NOTICE file or do nothing.

 

Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyNETBEANS-825

 
 

./ide/modules/com-jcraft-jzlib.jar

- missing from LICENSE

Done: https://github.com/apache/incubator-netbeans/commit/db285ccde43869c5e688357e4ff9842f2b0fc7f3 
 

./ide/modules/ext/commons-compress-1.8.1.jar

- I see the public domain “notice” has been copied from the notice file. IMO this should be in notice but in license but is an upstream issue.

 

Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyNETBEANS-826

 
 

./ide/modules/ext/commons-net-3.6.jar

- probably no need to include this in NOTICE as you’re done

 

Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyNETBEANS-827

 
 

./ide/modules/ext/freemarker-2.3.19.jar

- no need for line (Visigoth Software) in NOTICE having it in license is enough IMO

 

Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyNETBEANS-828

 
 

./ide/modules/ext/ini4j-0.5.1.jar

- missing form NOTICE

 

Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyNETBEANS-829

 
 

./ide/modules/ext/jaxb/jaxb-xjc-2.2.5-2.jar

- contains org.kohsuke.rngom MIT licensed missing from LICENSE

 

Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyNETBEANS-830

 
 

./ide/modules/ext/jaxb/jaxb1-impl-2.2.5-2.jar

- also contains 3rd party code not mentioned in LICENSE

 

Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyNETBEANS-831

 
 

./ide/modules/ext/lucene-core-3.5.0.jar

- thesis where the bulk of you NOTICE info come from and why I thought something was up. Again

it’s an upstream issue just about all of this information should be in LICENSE not NOTICE,

but as the upstream project NOTICE file has this issue including it all is valid.

 

Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyNETBEANS-832

 
 

./ide/modules/ext/resolver-1.2.jar

- missing from NOTICE file

 

Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyNETBEANS-833

 
 

./ide/modules/ext/servlet-2.2.jar

- this seems to be CDDL not Apache 1.1? Not 100% sure here.

 

Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyNETBEANS-834

 
 

./ide/modules/ext/smackx.jar

- includes BSD licensed JZlib missing from LICENSE

 

Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyNETBEANS-835

 
 

./ide/modules/ext/webserver.jar

- I assume this is tomcat? if so it has a NOTICE file and should be included in NOTICE. Pity

there no NOTICE file in the jar.

 

Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyNETBEANS-836

 
 

./ide/modules/ext/winp-1.14-patched.jar

- LICENSE is missing this MIT licensed

 

Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyNETBEANS-837

 
 

./ide/modules/ext/xerces-2.8.0.jar

- has NOTICE that would effect NOTICE file

 

Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyNETBEANS-838

 
 

./ide/modules/org-apache-commons-codec.jar

- has NOTICE that would effect NOTICE file

Done: https://github.com/apache/incubator-netbeans/commit/db285ccde43869c5e688357e4ff9842f2b0fc7f3 
 

./ide/modules/org-apache-commons-lang.jar

- probably has NOTICE that would effect NOTICE file

Done: https://github.com/apache/incubator-netbeans/commit/db285ccde43869c5e688357e4ff9842f2b0fc7f3 
 

./ide/modules/org-openidex-util.jar

- CDDL licensed missing in LICENSE

DONE: A NetBeans jar. 
 

java/maven/boot/plexus-classworlds-2.5.2.jar

- is not Apache licensed

jlahoda: not sure there's a problem: the jar is distributed by Apache Maven without a special license, and what appears to be the homepage: https://codehaus-plexus.github.io/plexus-classworlds/license.html says Apache License, Version 2.0 
 

./java/maven/lib/aether-api-1.0.2.v20150114.jar  

./java/maven/lib/aether-connector-basic-1.0.2.v20150114.jar

./java/maven/lib/aether-impl-1.0.2.v20150114.jar

./java/maven/lib/aether-spi-1.0.2.v20150114.jar

./java/maven/lib/aether-transport-wagon-1.0.2.v20150114.jar

./java/maven/lib/aether-util-1.0.2.v20150114.jar

- are EPL license not Apache licensed

DONE: https://github.com/apache/incubator-netbeans/commit/9c57ed0a2f5c009fa506999024335097dd18f97e 
 

./java/maven/lib/commons-lang3-3.4.jar

- probably has NOTICE that would effect NOTICE file

DONE: https://github.com/apache/incubator-netbeans/commit/9c57ed0a2f5c009fa506999024335097dd18f97e 
 

java/maven/lib/jsoup-1.7.2.jar     

- is MIT licensed not Apache licensed

DONE: https://github.com/apache/incubator-netbeans/commit/9c57ed0a2f5c009fa506999024335097dd18f97e 
 

java/maven/lib/jsr250-api-1.0.jar

- is CDDL licensed not Apache licensed

DONE: https://github.com/apache/incubator-netbeans/commit/9c57ed0a2f5c009fa506999024335097dd18f97e 
 

./java/maven/lib/org.eclipse.sisu.inject-0.3.2.jar

./java/maven/lib/org.eclipse.sisu.plexus-0.3.2.jar

- are EPL licensed not Apache licensed

DONE: https://github.com/apache/incubator-netbeans/commit/9c57ed0a2f5c009fa506999024335097dd18f97e 
 

./java/maven/lib/plexus-cipher-1.7.jar

- has a NOTICE file that would effect NOTICE

There appears to be no NOTICE in this file?

Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyNETBEANS-839

 
 

./java/maven/lib/slf4j-simple-1.7.5.jar

./java/maven/lib/slf4j-api-1.7.5.jar

- are MIT licensed not Apache licensed

DONE: https://github.com/apache/incubator-netbeans/commit/9c57ed0a2f5c009fa506999024335097dd18f97e 
 

./java/modules/ext/cglib-2.2.jar

- has an incorrect NOTICE file (copy/paste error I assume) and if fixed may effect the NOTICE file

 

Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyNETBEANS-840

 
 

./java/modules/ext/jaxws22/FastInfoset.jar  

- is under an Apache license not a CDDL one

 

Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyNETBEANS-841

 
 

./java/modules/ext/jaxws22/stax2-api.jar

- is under a BSD license not a CDDL one

 

Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyNETBEANS-842

 
 

./java/modules/ext/jaxws22/woodstox-core-asl.jar

- is under an Apache 2.0 license not a CDDL one and has a NOTICE file that effect NOTICE (although none of it’s content mean anything IMO)

 

Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyNETBEANS-843

 
 

./java/modules/ext/maven/indexer-core-6.0-SNAPSHOT-patched.jar

- is may not be possible to release with a snapshot jar I not sure re that. It as ASF project and the code has not been released by it’s PMC.

 

Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyNETBEANS-844

 
 

./java/modules/ext/maven/jdom-1.0.jar

- is BSD Style rather than Apache licensed

 

Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyNETBEANS-845

 
 

./java/modules/ext/spring-3.0/spring-context-3.2.7.RELEASE.jar

./java/modules/ext/spring-3.0/spring-context-support-3.2.7.RELEASE.jar

(and other spring jars)

- has a NOTICE file that would effect the NOTICE file

 

Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyNETBEANS-846

 
 

./platform/modules/ext/org.apache.felix.main-4.2.1.jar

- has a NOTICE file that would effect the NOTICE file

 

Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyNETBEANS-847

 
 

platform/modules/ext/org.eclipse.osgi_3.9.1.v20140110-1610.jar

- I’m not sure if the OSGi license is compatible with the Apache one. It’s not listed in Category A/B/X you may need to ask on legal discuss. It may be under EPL but not 100% sure.

Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyLEGAL-361
 
 

./platform/modules/ext/testng-6.8.1-dist.jar

- contains apache licensed jcommander and MIT licensed jquery

- jcommander has a notice that would effect NOTICE

 

Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyNETBEANS-848

 
 

./platform/modules/net-java-html-boot-fx.jar

./platform/modules/net-java-html-boot-script.jar

./platform/modules/net-java-html-boot.jar

./platform/modules/net-java-html-geo.jar

./platform/modules/net-java-html-sound.jar

./platform/modules/net-java-html.jar

- have NOTICE files that would effect the NOTICE file

- a couple have DISCLAIMER is that’s right?

- are the copyright lines in NOTICE correct here?

Fixed in the HTML/Java repo as  6363e49ea72 & ready for next release of HTML/Java API.

 

 
 

./platform/modules/org-openide-compat.jar

./platform/modules/org-openide-dialogs.jar

(and a few others similarly named)

- are missing from LICENSE

DONE: NetBeans jars. 
 ./libs.git/test/unit/data/private_keyIt would be good to rename this file to something like "testing_key" to clarify that it's not in there by mistake.
Jira
serverASF JIRA
serverId5aa69414-a9e9-3523-82ec-879b028fb15b
keyNETBEANS-283