search

alibaba / nacos

an easy-to-use dynamic service discovery, configuration and service management platform for building cloud native applications.
https://nacos.io
Apache License 2.0
30.23k stars 12.83k forks source link

Possible license issue #1057

Closed ralf0131 closed 5 years ago

ralf0131 commented 5 years ago

I run mvn:dependency tree on the dubbo-registry-nacos module, and the output is below:

[INFO] Scanning for projects...
[INFO] 
[INFO] ---------------< org.apache.dubbo:dubbo-registry-nacos >----------------
[INFO] Building dubbo-registry-nacos 2.7.2-SNAPSHOT
[INFO] --------------------------------[ jar ]---------------------------------
[INFO] 
[INFO] --- maven-dependency-plugin:2.10:tree (default-cli) @ dubbo-registry-nacos ---
[INFO] org.apache.dubbo:dubbo-registry-nacos:jar:2.7.2-SNAPSHOT
[INFO] +- org.apache.dubbo:dubbo-registry-api:jar:2.7.2-SNAPSHOT:compile
[INFO] |  +- org.apache.dubbo:dubbo-cluster:jar:2.7.2-SNAPSHOT:compile
[INFO] |  |  \- org.yaml:snakeyaml:jar:1.20:compile
[INFO] |  +- org.apache.dubbo:dubbo-configcenter-api:jar:2.7.2-SNAPSHOT:compile
[INFO] |  \- org.apache.dubbo:dubbo-container-api:jar:2.7.2-SNAPSHOT:compile
[INFO] +- org.apache.dubbo:dubbo-common:jar:2.7.2-SNAPSHOT:compile
[INFO] |  +- commons-logging:commons-logging:jar:1.2:compile
[INFO] |  +- log4j:log4j:jar:1.2.16:compile
[INFO] |  +- org.javassist:javassist:jar:3.20.0-GA:compile
[INFO] |  +- com.alibaba:hessian-lite:jar:3.2.5:compile
[INFO] |  +- com.alibaba:fastjson:jar:1.2.46:compile
[INFO] |  +- com.esotericsoftware:kryo:jar:4.0.1:compile
[INFO] |  |  +- com.esotericsoftware:reflectasm:jar:1.11.3:compile
[INFO] |  |  |  \- org.ow2.asm:asm:jar:5.0.4:compile
[INFO] |  |  \- com.esotericsoftware:minlog:jar:1.3.0:compile
[INFO] |  +- de.javakaffee:kryo-serializers:jar:0.42:compile
[INFO] |  \- de.ruedigermoeller:fst:jar:2.48-jdk-6:compile
[INFO] |     \- com.cedarsoftware:java-util:jar:1.9.0:compile
[INFO] |        \- com.cedarsoftware:json-io:jar:2.5.1:compile
[INFO] +- com.alibaba.nacos:nacos-client:jar:1.0.0-RC3:compile
[INFO] |  +- com.alibaba.nacos:nacos-common:jar:1.0.0-RC3:compile
[INFO] |  |  \- org.apache.commons:commons-lang3:jar:3.8.1:compile
[INFO] |  +- com.alibaba.nacos:nacos-api:jar:1.0.0-RC3:compile
[INFO] |  +- com.google.guava:guava:jar:19.0:compile
[INFO] |  +- commons-codec:commons-codec:jar:1.11:compile
[INFO] |  +- com.fasterxml.jackson.core:jackson-core:jar:2.9.8:compile
[INFO] |  +- com.fasterxml.jackson.core:jackson-databind:jar:2.9.8:compile
[INFO] |  |  \- com.fasterxml.jackson.core:jackson-annotations:jar:2.9.0:compile
[INFO] |  \- io.prometheus:simpleclient:jar:0.5.0:compile
[INFO] +- org.apache.dubbo:dubbo-config-api:jar:2.7.2-SNAPSHOT:test
[INFO] |  +- org.apache.dubbo:dubbo-metadata-report-api:jar:2.7.2-SNAPSHOT:test
[INFO] |  |  +- org.apache.dubbo:dubbo-metadata-definition:jar:2.7.2-SNAPSHOT:test
[INFO] |  |  \- com.google.code.gson:gson:jar:2.8.5:test
[INFO] |  +- org.apache.dubbo:dubbo-monitor-api:jar:2.7.2-SNAPSHOT:test
[INFO] |  +- org.apache.dubbo:dubbo-remoting-api:jar:2.7.2-SNAPSHOT:compile
[INFO] |  +- org.apache.dubbo:dubbo-rpc-injvm:jar:2.7.2-SNAPSHOT:test
[INFO] |  +- org.apache.dubbo:dubbo-filter-validation:jar:2.7.2-SNAPSHOT:test
[INFO] |  \- org.apache.dubbo:dubbo-filter-cache:jar:2.7.2-SNAPSHOT:test
[INFO] |     \- javax.cache:cache-api:jar:1.0.0:test
[INFO] +- org.apache.dubbo:dubbo-serialization-hessian2:jar:2.7.2-SNAPSHOT:test
[INFO] |  \- org.apache.dubbo:dubbo-serialization-api:jar:2.7.2-SNAPSHOT:compile
[INFO] +- org.apache.dubbo:dubbo-config-spring:jar:2.7.2-SNAPSHOT:test
[INFO] |  +- org.springframework:spring-beans:jar:4.3.16.RELEASE:test
[INFO] |  +- org.springframework:spring-web:jar:4.3.16.RELEASE:test
[INFO] |  |  \- org.springframework:spring-aop:jar:4.3.16.RELEASE:test
[INFO] |  \- org.springframework:spring-context:jar:4.3.16.RELEASE:test
[INFO] |     \- org.springframework:spring-expression:jar:4.3.16.RELEASE:test
[INFO] +- org.apache.dubbo:dubbo-rpc-dubbo:jar:2.7.2-SNAPSHOT:test
[INFO] |  \- org.apache.dubbo:dubbo-rpc-api:jar:2.7.2-SNAPSHOT:compile
[INFO] +- org.apache.dubbo:dubbo-remoting-netty4:jar:2.7.2-SNAPSHOT:test
[INFO] |  \- io.netty:netty-all:jar:4.1.25.Final:test
[INFO] +- ch.qos.logback:logback-classic:jar:1.2.2:test
[INFO] |  +- ch.qos.logback:logback-core:jar:1.2.2:test
[INFO] |  \- org.slf4j:slf4j-api:jar:1.7.25:compile
[INFO] +- org.apache.dubbo:dubbo-rpc-rest:jar:2.7.2-SNAPSHOT:test
[INFO] |  +- org.apache.dubbo:dubbo-remoting-http:jar:2.7.2-SNAPSHOT:test
[INFO] |  |  +- org.eclipse.jetty:jetty-server:jar:9.4.11.v20180605:test
[INFO] |  |  |  +- javax.servlet:javax.servlet-api:jar:3.1.0:test
[INFO] |  |  |  +- org.eclipse.jetty:jetty-http:jar:9.4.11.v20180605:test
[INFO] |  |  |  |  \- org.eclipse.jetty:jetty-util:jar:9.4.11.v20180605:test
[INFO] |  |  |  \- org.eclipse.jetty:jetty-io:jar:9.4.11.v20180605:test
[INFO] |  |  +- org.eclipse.jetty:jetty-servlet:jar:9.4.11.v20180605:test
[INFO] |  |  |  \- org.eclipse.jetty:jetty-security:jar:9.4.11.v20180605:test
[INFO] |  |  \- org.apache.tomcat.embed:tomcat-embed-core:jar:8.5.31:test
[INFO] |  |     \- org.apache.tomcat:tomcat-annotations-api:jar:8.5.31:test
[INFO] |  +- org.jboss.resteasy:resteasy-jdk-http:jar:3.0.19.Final:test
[INFO] |  +- io.swagger:swagger-annotations:jar:1.5.19:test
[INFO] |  \- io.swagger:swagger-jaxrs:jar:1.5.19:test
[INFO] |     +- io.swagger:swagger-core:jar:1.5.19:test
[INFO] |     |  +- com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:jar:2.9.5:test
[INFO] |     |  \- io.swagger:swagger-models:jar:1.5.19:test
[INFO] |     \- org.reflections:reflections:jar:0.9.11:test
[INFO] +- org.jboss.resteasy:resteasy-jaxrs:jar:3.0.19.Final:test
[INFO] |  +- org.jboss.spec.javax.ws.rs:jboss-jaxrs-api_2.0_spec:jar:1.0.0.Final:test
[INFO] |  +- org.jboss.spec.javax.annotation:jboss-annotations-api_1.2_spec:jar:1.0.0.Final:test
[INFO] |  +- javax.activation:activation:jar:1.1.1:test
[INFO] |  +- org.apache.httpcomponents:httpclient:jar:4.5.3:test
[INFO] |  |  \- org.apache.httpcomponents:httpcore:jar:4.4.6:test
[INFO] |  +- commons-io:commons-io:jar:2.1:compile
[INFO] |  +- net.jcip:jcip-annotations:jar:1.0:test
[INFO] |  \- org.jboss.logging:jboss-logging:jar:3.1.4.GA:test
[INFO] +- org.jboss.resteasy:resteasy-client:jar:3.0.19.Final:test
[INFO] +- org.jboss.resteasy:resteasy-netty4:jar:3.0.19.Final:test
[INFO] +- javax.validation:validation-api:jar:1.1.0.Final:test
[INFO] +- org.jboss.resteasy:resteasy-jackson-provider:jar:3.0.19.Final:test
[INFO] |  +- org.codehaus.jackson:jackson-core-asl:jar:1.9.12:test
[INFO] |  +- org.codehaus.jackson:jackson-mapper-asl:jar:1.9.12:test
[INFO] |  +- org.codehaus.jackson:jackson-jaxrs:jar:1.9.12:test
[INFO] |  \- org.codehaus.jackson:jackson-xc:jar:1.9.12:test
[INFO] +- org.jboss.resteasy:resteasy-jaxb-provider:jar:3.0.19.Final:test
[INFO] |  \- com.sun.xml.bind:jaxb-impl:jar:2.2.7:test
[INFO] |     +- com.sun.xml.bind:jaxb-core:jar:2.2.7:test
[INFO] |     |  +- javax.xml.bind:jaxb-api:jar:2.2.7:test
[INFO] |     |  \- com.sun.istack:istack-commons-runtime:jar:2.16:test
[INFO] |     \- com.sun.xml.fastinfoset:FastInfoset:jar:1.2.12:test
[INFO] |        \- javax.xml.bind:jsr173_api:jar:1.0:test
[INFO] +- org.springframework:spring-test:jar:4.3.16.RELEASE:test
[INFO] |  \- org.springframework:spring-core:jar:4.3.16.RELEASE:test
[INFO] +- org.junit.jupiter:junit-jupiter-engine:jar:5.4.0:test
[INFO] |  +- org.apiguardian:apiguardian-api:jar:1.0.0:test
[INFO] |  +- org.junit.platform:junit-platform-engine:jar:1.4.0:test
[INFO] |  |  +- org.opentest4j:opentest4j:jar:1.1.1:test
[INFO] |  |  \- org.junit.platform:junit-platform-commons:jar:1.4.0:test
[INFO] |  \- org.junit.jupiter:junit-jupiter-api:jar:5.4.0:test
[INFO] +- org.junit.jupiter:junit-jupiter-params:jar:5.4.0:test
[INFO] +- org.hamcrest:hamcrest-all:jar:1.3:test
[INFO] +- org.mockito:mockito-core:jar:2.23.4:test
[INFO] |  +- net.bytebuddy:byte-buddy:jar:1.9.3:test
[INFO] |  +- net.bytebuddy:byte-buddy-agent:jar:1.9.3:test
[INFO] |  \- org.objenesis:objenesis:jar:2.6:compile
[INFO] \- cglib:cglib-nodep:jar:2.2:test
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  2.969 s
[INFO] Finished at: 2019-04-12T14:30:26+08:00
[INFO] ------------------------------------------------------------------------

Among that I want to mention the javax.xml.bind:jsr173_api:jar:1.0:test dependency. According to the previously discussion here and here, it is BEA licensed and is said to be incompatible with Apache License. So I would suggest to remove that dependency, possibly by upgrading org.jboss.resteasy:resteasy-jaxb-provider:jar:3.0.19.Final

ralf0131 commented 5 years ago

Sorry, I have made a mistake. Actually the dependency is introduced in dubbo-registry-nacos, not on the Nacos side. The Dubbo community will address this issue. I will close this issue now.