Skip to content

[Apache] check for license conflicts #1632

Closed

Description

@javeme

Feature Description (功能描述)

Need to check dependency with licenses as follows (refer to the TODO in #1644):

  • GPL
  • LGPL
  • AGPL

how-to:

config `license-maven-plugin` in pom.xml
execute `mvn license:aggregate-add-third-party`

http://blog.itpub.net/69918724/viewspace-2655816
https://github.com/apache/servicecomb-pack/blob/master/pom.xml#L640

possible conflicts include libs like mysql-connector and word.

1c59f160d8b090a02b277d61bd677a69

Activity

  1. changed the title [-][Apache] for license conflicts[/-] [+][Apache] check for license conflicts[/+] on Nov 9, 2021
  2. javeme commented on Nov 11, 2021

    @javeme
    ContributorAuthor
  3. reopened this on Nov 23, 2021
  4. javeme commented on Dec 16, 2021

    @javeme
    ContributorAuthor

    hugegraph-server:

    1. truelicense (AGPL): hugegraph-common (fixed by remove truelicence dependency #1700)
    2. word (GPL): hugegraph-core (fixed by remove word dependency to remove GPL license #1998)
    3. mysql-connector (GPL): hugegraph-mysql/mysql:mysql-connector-java
    4. jnr-posix (LGPL+GPL): cassandra-driver-core (fixed by fix apache license conflicts: jnr-posix and jboss-logging #1822)
    5. jboss-logging (LGPL): cassandra-all (fixed by fix apache license conflicts: jnr-posix and jboss-logging #1822)

    hugegraph-computer:

    1. truelicense (AGPL): hugegraph-common (fixed by hugegraph/hugegraph-common#86)
    2. checker-qual (GPL): hugegraph-computer (fixed by hugegraph/hugegraph-computer#149)

    hugegraph-loader:

    1. mysql-connector (GPL): load-from-jdbc/mysql:mysql-connector-java
    2. oracle-connector (FUTC license--not sure restricted): load-from-jdbc/com.oracle:ojdbc8

    hugegraph-tools:

    1. None

    hugegraph-hubble:

    1. mysql-connector (GPL): hugegraph-loader

    NOTE: the MySQL connector dependency is optional, can let users to download by themselves: https://www.apache.org/legal/resolved.html#optional

  5. reopened this on Dec 22, 2021
  6. added a commit that references this issue on Apr 16, 2022
    ad24359
  7. z7658329 commented on Apr 16, 2022

    @z7658329
    Member
  8. 2 remaining items

  9. added and removed on Jan 19, 2023
  10. moved this from Todo to In Progress in HugeGraph Release V1.0.0on Jan 19, 2023
  11. added this to the 1.0.0 milestone on Jan 19, 2023
  12. imbajin commented on Jan 19, 2023

    @imbajin
    Member

    Reopen this issue because of the VOTE mail:

    image

    Mark this issue as the 1st priority to fix, TODOs:

    • find the GPL usage
    • find the CC-BY usage
    • use a action/ci to check them automatically
    • fix the License Header problem (list the file)
      • StringEncoding*
      • SnowFlake*
      • TinkerPop*

    Ways to find possible 3rd import:

    • search author in all files
    • search Copyright in case-sensitive mode in *.java and other source code files
    • search refer in non-case-sensitive mode
    • search Reference in word-match mode (in source code files)

    Some other refer:

    1. Apache Release License README - Wiki
  13. deleted a comment from z7658329 on Jan 19, 2023
  14. deleted a comment from z7658329 on Jan 19, 2023
  15. deleted a comment from javeme on Jan 19, 2023
  16. deleted a comment from javeme on Jan 19, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

      Milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions