Hi everyone, The Pekko project has been going 8 months and we are really in need of getting a release out. Akka recently announced CVEs but have said they will not backport them to the OSS release lines. [1]
We have tried to get through a number of licensing problems but a number still remain. Some more were found today [2] and I found a few more searching around. The problem is that Lightbend appears to have borrowed a lot of code from different sources. None of these sources appears to have problematic licenses. We'll try to sort out some more of the header and license file problems before trying another RC but they are time consuming. It's hard to get anyone to do the tasks. I've done a lot but I am fed up of doing so many. It's not just reading through thousands of lines of ancient code - there are usually arguments about what the licensing implication is when we find code that is based on non-Akka code. If the next Pekko RC was done using the Work in Progress Disclaimer [3], would the Incubator PMC give us a little leeway on sorting out the remaining license header issues later (and allow us to do a release)? If there is no hope of getting some leeway and that we must solve everything before we can make a release, we can bring this back to the Pekko community and see if we can find volunteers. [1] https://akka.io/security/ [2] https://lists.apache.org/thread/mo611z4dpro1373r4f5pbgtlyjmhhtz9 [3] https://incubator.apache.org/policy/incubation.html#work_in_progress_disclaimer --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
