Skip to main content
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [birt-dev] Release Review
Wayne, I have filed an issue to track this:

https://github.com/eclipse/birt/issues/802

On Tue, Feb 1, 2022 at 6:44 PM Wim Jongman <wim.jongman@xxxxxxxxx> wrote:


When you say "...without taking copyrights into consideration", do you really mean "...without taking licenses into consideration", or do you really mean copyrights?

I mean licenses
 

Regarding the dependencies. I've actually been running the Eclipse Dash License Tool periodically on the pom.xml file in the root of the master branch in the Eclipse BIRT repository. AFAICT, all of the third-party content is correctly accounted for. Assuming that I'm looking in the right place and that the Maven dependency chain is accurate (i.e., there are no libraries hidden in bundles or some such thing), I believe that we're good to go.

The following libraries seem to be packaged in lib folders:

"birt\build\org.eclipse.birt.build\lib\dom4j-1.6.1.jar"
"birt\chart\org.eclipse.birt.chart.device.pdf\lib\fop-2.6.jar"
"birt\common\org.apache.axis\lib\axis-1.4.1-SNAPSHOT.jar"
"birt\common\org.apache.axis\lib\axis-1.4.1-SNAPSHOT-sources.jar"
"birt\common\org.apache.axis\lib\axis-ant.jar"
"birt\common\org.w3c.sac\lib\flute.jar"
"birt\data\org.eclipse.birt.me.prettyprint.hector\lib\cassandra-thrift-1.1.0.jar"
"birt\data\org.eclipse.birt.me.prettyprint.hector\lib\commons-lang-2.4.jar"
"birt\data\org.eclipse.birt.me.prettyprint.hector\lib\guava-r09.jar"
"birt\data\org.eclipse.birt.me.prettyprint.hector\lib\hector-core-1.1-2.jar"
"birt\data\org.eclipse.birt.me.prettyprint.hector\lib\libthrift-0.14.0.jar"
"birt\data\org.eclipse.birt.me.prettyprint.hector\lib\slf4j-api-1.6.1.jar"
"birt\data\org.eclipse.birt.me.prettyprint.hector\lib\slf4j-nop-1.6.1.jar"
"birt\engine\org.eclipse.birt.report.engine\lib\commons-cli-1.0.jar"
"birt\engine\org.eclipse.birt.report.engine\lib\Tidy.jar"
"birt\engine\uk.co.spudsoft.birt.emitters.excel\lib\commons-codec-1.5.jar"
"birt\model\org.eclipse.birt.report.model.adapter.oda\lib\odadesignapi.jar"
"birt\viewer\org.eclipse.birt.report.viewer\birt\WEB-INF\lib\jsp.jar"
"birt\viewer\org.eclipse.birt.report.viewer\birt\WEB-INF\lib\viewservlets.jar"
"birt\common\org.apache.derby.core\derby.jar"

 

Can you confidently state that the output from "mvn dependency:tree" accurately reflects the third party content that is included in the builds?

Yes, besides the ones that are listed above.
 

Have I correctly assumed that the master branch is up to date?

Yes it is.
 

Wayne

On Mon, Jan 31, 2022 at 9:33 AM Wim Jongman <wim.jongman@xxxxxxxxx> wrote:
Wayne,

We have been upgrading dependencies without taking copyrights into consideration.

I guess we can't release without having an ok for all dependencies. Do you have any advice on how this can be done the quickest?

Cheers,

Wim
_______________________________________________
birt-dev mailing list
birt-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/birt-dev


--

Wayne Beaton

Director of Open Source Projects | Eclipse Foundation

_______________________________________________
birt-dev mailing list
birt-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/birt-dev

Back to the top