incubator-general mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Justin Mclean <>
Subject Re: [VOTE] Releasing Apache Metron (incubating) 0.3.0-RC1
Date Thu, 24 Nov 2016 17:47:26 GMT

+1 binding

I checked:
- incubating in name
- signatures and hashes good
- NOTICE good
- LICENSE is OK but could be improved (see below)
- Can compile from source

For the LICENSE rather than pointing to a URL of the license for Stix please include the license
in the release. URLs can change over time and you’re not complying with the terms of the
3 clause BSD license it’s under.  Also licenses can change over time so double check the
version you have included is actually 3 clause BSD.

Some of the extra NOTICE files seem to have licensing information in them that should be in
the LICENSE files but had to know for sure without an artefact to review.

The fact that you have incubating release candidate on GitHub available for download to the
general public before the vote has finished is a big issue. [1] Please remove these right
away and make sure this doesn’t happen again. See [2] for more details, in particular -
"Do not include any links on the project website that might encourage non-developers to download
and use nightly builds, snapshots, release candidates, or any other similar package."


To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message