When you say "...without taking copyrights into consideration", do you really mean "...without taking licenses into consideration", or do you really mean copyrights?
I mean licenses
Regarding the dependencies. I've actually been running the
Eclipse Dash License Tool periodically on the pom.xml file in the root of the master branch in the Eclipse BIRT repository. AFAICT, all of the third-party content is correctly accounted for. Assuming that I'm looking in the right place and that the Maven dependency chain is accurate (i.e., there are no libraries hidden in bundles or some such thing), I believe that we're good to go.
The following libraries seem to be packaged in lib folders:
"birt\build\org.eclipse.birt.build\lib\dom4j-1.6.1.jar"
"birt\chart\org.eclipse.birt.chart.device.pdf\lib\fop-2.6.jar"
"birt\common\org.apache.axis\lib\axis-1.4.1-SNAPSHOT.jar"
"birt\common\org.apache.axis\lib\axis-1.4.1-SNAPSHOT-sources.jar"
"birt\common\org.apache.axis\lib\axis-ant.jar"
"birt\common\org.w3c.sac\lib\flute.jar"
"birt\data\org.eclipse.birt.me.prettyprint.hector\lib\cassandra-thrift-1.1.0.jar"
"birt\data\org.eclipse.birt.me.prettyprint.hector\lib\commons-lang-2.4.jar"
"birt\data\org.eclipse.birt.me.prettyprint.hector\lib\guava-r09.jar"
"birt\data\org.eclipse.birt.me.prettyprint.hector\lib\hector-core-1.1-2.jar"
"birt\data\org.eclipse.birt.me.prettyprint.hector\lib\libthrift-0.14.0.jar"
"birt\data\org.eclipse.birt.me.prettyprint.hector\lib\slf4j-api-1.6.1.jar"
"birt\data\org.eclipse.birt.me.prettyprint.hector\lib\slf4j-nop-1.6.1.jar"
"birt\engine\org.eclipse.birt.report.engine\lib\commons-cli-1.0.jar"
"birt\engine\org.eclipse.birt.report.engine\lib\Tidy.jar"
"birt\engine\uk.co.spudsoft.birt.emitters.excel\lib\commons-codec-1.5.jar"
"birt\model\org.eclipse.birt.report.model.adapter.oda\lib\odadesignapi.jar"
"birt\viewer\org.eclipse.birt.report.viewer\birt\WEB-INF\lib\jsp.jar"
"birt\viewer\org.eclipse.birt.report.viewer\birt\WEB-INF\lib\viewservlets.jar"
"birt\common\org.apache.derby.core\derby.jar"
Can you confidently state that the output from "mvn dependency:tree" accurately reflects the third party content that is included in the builds?
Yes, besides the ones that are listed above.
Have I correctly assumed that the master branch is up to date?
Yes it is.
Wayne,
We have been upgrading dependencies without taking copyrights into consideration.
I guess we can't release without having an ok for all dependencies. Do you have any advice on how this can be done the quickest?
Cheers,
Wim
_______________________________________________
birt-dev mailing list
birt-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/birt-dev
--
Wayne Beaton
Director of Open Source Projects | Eclipse Foundation
_______________________________________________
birt-dev mailing list
birt-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/birt-dev