Hi,

Seems to be two open vote threads which is slightly confusing, so re posting 
this just so it doesn’t get lost in the other thread.

-1 binding for including compiled code in a source release. Also LICENSE and 
NOTICE look to be listing dependancies not bundled items [4][5]

I checked:
- incubating in name
- signatures and hashes good
- DISCLAIMER exists
- LICENSE lists items that are not bundled in the source release please remove 
them
- NOTICE  lists items that are not bundled in the source release please remove 
them
- All source files have ASF headers
- Compiled code in source release [1][2][3]
- Can build from source release

MPL  (mentioned in license) is a Category B license so is generally not 
mentioned in a source release LICENSE file. [9]

Note that correct LICENSE and NOTICE may be correct for the binary release 
(I’ve not checked) but it’s not for the source release.

Other NOTICE  files that may effect your binary NOTICE file (assuming the 
software is actually bundled and not just a dependancy) include [6][7][8].

Thanks,
Justin

1. ./ci-dependencies/dubbox-2.8.4.jar
2. ./ci-dependencies/jmxri-1.2.1.jar
3. ./ci-dependencies/jmxtools-1.2.1.jar
4. http://www.apache.org/dev/licensing-howto.html#guiding-principle 
<http://www.apache.org/dev/licensing-howto.html#guiding-principle>
5. http://www.apache.org/dev/licensing-howto.html#permissive-deps 
<http://www.apache.org/dev/licensing-howto.html#permissive-deps>
6. https://github.com/grpc/grpc/blob/master/NOTICE.txt 
<https://github.com/grpc/grpc/blob/master/NOTICE.txt>
7. https://github.com/elastic/elasticsearch/blob/master/NOTICE.txt 
<https://github.com/elastic/elasticsearch/blob/master/NOTICE.txt>
8. https://github.com/JodaOrg/joda-time/blob/master/NOTICE.txt 
<https://github.com/JodaOrg/joda-time/blob/master/NOTICE.txt>
9. https://www.apache.org/legal/resolved.html#category-b 
<https://www.apache.org/legal/resolved.html#category-b>

Reply via email to