apache / incubator-graphar

An open source, standard data file format for graph data storage and retrieval.
https://graphar.apache.org/
Apache License 2.0
195 stars 40 forks source link

[Infra] IP Clearance and Code Cleanup #430

Closed acezen closed 1 month ago

acezen commented 3 months ago

This issue is used for describing the work of IP Clearance and Code Cleanup for code initial import into apache repo.

IP Clearance

We have done Qingyuan SCA scan from inner tool.

Qingyuan SCA scan result

qingyuan-sca-result

Note: The only medium-risk level of third-party licensing is that GraphAr uses JUnit 4 (under the EPL-1.0 license) as the Java unit testing framework.

Code Cleanup

We have done skywalking-eyes scan and integrated skywalking-eyes chack in our CI progress.

skywalking-eyes scan result

skywalking-eye-result
CalvinKirs commented 2 months ago

Third Party Licensing Policy: https://www.apache.org/legal/resolved.html For binary dependencies, JUnit (EPL)is a perfectly viable option. check here: https://www.apache.org/legal/resolved.html#binary-only-inclusion-condition

acezen commented 2 months ago

Third Party Licensing Policy: https://www.apache.org/legal/resolved.html For binary dependencies, JUnit (EPL)is a perfectly viable option. check here: https://www.apache.org/legal/resolved.html#binary-only-inclusion-condition

Thanks for the clarification:)