Hi, >> So, two things here: the license files need to state what is contained in >> the source release, external dependencies are mostly irrelevant, but if 3rd >> party code is in the source artifact, it needs to be mentioned in the >> license file. The notice file is generally for items not mentioned in the >> license file and is unrelated to licensing. See [1]. > > Does it mean that as long as we use the external dependencies (rust crates, > java libs etc.) in our source code (referenced by the projects), without > actually embedding directly to repository some 3rd party source code, there's > no need in our cases for these additional license files, and we can remove > the current ./licenses directory?
What matters is what is bundled in the source release; the license files need to reflect that, and not your dependencies, again see [1] Kind Regards, Justin 1. https://infra.apache.org/licensing-howto.html#guiding
