incubator-general mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Stian Soiland-Reyes <>
Subject Re: Release License Audit
Date Wed, 02 Nov 2016 13:28:03 GMT
Apache RAT helps a lot - at least to find files which hasn't got a
license header - but also manual grep for "Copyright", "License",
"GPL" etc.  Some of these will require you to update your LICENSE or
NOTICE files.

Then you would have to go through binary files and check their origin,
e.g. PNGs for toolbar buttons.

A second item is to check the dependencies your code depends on, here
the Maven dependency plugin and Maven License pluginS (there are two)
will help you somewhat. Usually there are some <dependencies> which
didn't bother to put a <license> to their pom.xml, those would have to
be checked manually.

If you do binary releases that include third-party libraries, then
that release would need it's own augmented LICENSE/NOTICE to cover the

If it's a larger project, then to keep track of this for a podling it
might be good to do a wiki page or two and raise Jira issues to track
those files you are not quite sure of.

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message