[iot-pmc] [CQ 14427] mailapi 1.4.3

[emo-ip-team@xxxxxxxxxxx]

http://dev.eclipse.org/ipzilla/show_bug.cgi?id=14427





--- Comment #5 from Kai Hudalla <kai.hudalla@xxxxxxxxxxxx>  2017-10-20 02:28:49 ---
(In reply to comment #4)
> (In reply to comment #3)
> > the attached archive does not contain any source code :-(
> > 
> 
> This is sources jar directly pulled from  maven central, the code branch url
> has been submitted on the url
> 

This doesn't change the fact that the archive you have attached doesn't contain
any source code that could be scanned by the IP team. The process works like
this:

project creates a CQ for a dependency they want to use
project attaches archive containing the source code to the CQ
IP team scans code provided in the attached archive

The point here is that it is a collaborative effort to provide for safe usage
of the dependency. That said, it is your job to provide the source archive, it
is the IP team's job to check for appropriateness.

Neither the PMC nor the IP team will go on the hunt for the source code you
guys want to have approved. The URL you provide in the CQ is for reference and
provides the PMC and the IP team with information as to where they could start
to look if questions of provenance or licensing come up.

That said, if the sources jar you downloaded from Maven Central does not
contain any code, you now have two options, either create a source archive
yourself, e.g. based on a local clone of the particular branch/tag or use
another version of the mail api.


-- 
Configure CQmail: http://dev.eclipse.org/ipzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the CQ.