Hi Marvin,
On 3/15/12 4:23 AM, Marvin Humphrey wrote:
2012/3/13 Jürgen Schmidt<jogischm...@googlemail.com>:
we have prepared a new developer snapshot on the way to our first release.
Congratulations on your progress so far!
We would very much appreciate some early feedback if possible.
I can do a little bit of surface level checking. Ordinarily, I would probe
deeper into source code provenance, but in this case I will have to trust the
AOO PPMC and the AOO Mentors that proper diligence has been exercised.
The PGP signature and the checksums on the tar.gz archive all looked good.
FWIW, there seemed to be extraneous .txt extensions attached to aoo.KEYS and
some of the checksum files,
I am not sure if I understand you here, can you explain it?
and the format of the checksum files will not work
with "md5sum --check" and "shasum --check" -- but that's all nitpicking.
I used gpg on my Mac to generate md5 and sha checksums as found in the
docu (). I have to check it but is there an incompatibility already known?
Using "md5" on my Mac gave me the same checksum
I was a little surprised that the LICENSE file contained only the ALv2, and
that NOTICE points at the websites for dependencies and their licensing.
Ordinarily, I would expect to see entire verbatim licenses for all bundled
dependencies in LICENSE.
The README starts with a UTF-8-encoded BOM. Just FYI.
do you see a problem with that?
I don't see the Incubation disclaimer in either a dedicated DISCLAIMER file or
the README. Also, the word "incubating" is not in the archive filename.
I will add it to the README.
Ok we have to add "incubating" to the archive file names.
Thanks for your feedback
Juergen
Hope this helps as a start at least,
Marvin Humphrey
marvin@smokey:~/Desktop $ gpg --verify aoo-3.4-src.tar.gz.asc
gpg: Signature made Tue Mar 13 00:52:11 2012 PDT using RSA key ID 51B5FDE8
gpg: Good signature from "Juergen Schnmidt<j...@apache.org>"
gpg: aka "Juergen Schmidt<jogischm...@googlemail.com>"
gpg: aka "Juergen Schmidt<jogischm...@gmail.com>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: D09F B15F 1A24 768D DF1F A29C CFEE F316 51B5 FDE8
marvin@smokey:~/Desktop $ gpg --print-md MD5 aoo-3.4-src.tar.gz
aoo-3.4-src.tar.gz: 9B 5B 55 09 68 DE 7A C2 54 DC 6C E2 3C 32 5F 17
marvin@smokey:~/Desktop $ cat aoo-3.4-src.tar.gz.md5.txt
aoo-3.4-src.tar.gz: 9B 5B 55 09 68 DE 7A C2 54 DC 6C E2 3C 32 5F 17
marvin@smokey:~/Desktop $ gpg --print-md SHA1 aoo-3.4-src.tar.gz
aoo-3.4-src.tar.gz: 83B7 F124 F967 4D5E 3468 24CC D245 2DEB 9171 6689
marvin@smokey:~/Desktop $ cat aoo-3.4-src.tar.gz.sha1.txt
aoo-3.4-src.tar.gz: 83B7 F124 F967 4D5E 3468 24CC D245 2DEB 9171 6689
marvin@smokey:~/Desktop $ gpg --print-md SHA512 aoo-3.4-src.tar.gz
aoo-3.4-src.tar.gz: 3898D4EC 92917120 87A016F8 075E3B7B B87E44B0 FED22E3B
CF5D8850 90CA2713 E9F98A6E 51522AEF 50DC6F30 F36860C4
C62161B5 F16FE64B 5CD144FF ED043D33
marvin@smokey:~/Desktop $ cat aoo-3.4-src.tar.gz.sha512
aoo-3.4-src.tar.gz: 3898D4EC 92917120 87A016F8 075E3B7B B87E44B0 FED22E3B
CF5D8850 90CA2713 E9F98A6E 51522AEF 50DC6F30 F36860C4
C62161B5 F16FE64B 5CD144FF ED043D33
---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org
