apache / incubator-hugegraph

A graph database that supports more than 100+ billion data, high performance and scalability (Include OLTP Engine & REST-API & Backends)
https://hugegraph.apache.org
Apache License 2.0
2.64k stars 517 forks source link

[Apache] check for license conflicts #1632

Closed javeme closed 1 year ago

javeme commented 2 years ago

Feature Description (功能描述)

Need to check dependency with licenses as follows (refer to the TODO in #1644):

how-to:

config `license-maven-plugin` in pom.xml
execute `mvn license:aggregate-add-third-party`

http://blog.itpub.net/69918724/viewspace-2655816 https://github.com/apache/servicecomb-pack/blob/master/pom.xml#L640

possible conflicts include libs like mysql-connector and word.

1c59f160d8b090a02b277d61bd677a69
javeme commented 2 years ago
javeme commented 2 years ago

hugegraph-server:

  1. truelicense (AGPL): hugegraph-common (fixed by #1700)
  2. word (GPL): hugegraph-core (fixed by #1998)
  3. mysql-connector (GPL): hugegraph-mysql/mysql:mysql-connector-java
  4. jnr-posix (LGPL+GPL): cassandra-driver-core (fixed by #1822)
  5. jboss-logging (LGPL): cassandra-all (fixed by #1822)

hugegraph-computer:

  1. truelicense (AGPL): hugegraph-common (fixed by hugegraph/hugegraph-common#86)
  2. checker-qual (GPL): hugegraph-computer (fixed by hugegraph/hugegraph-computer#149)

hugegraph-loader:

  1. mysql-connector (GPL): load-from-jdbc/mysql:mysql-connector-java
  2. oracle-connector (FUTC license--not sure restricted): load-from-jdbc/com.oracle:ojdbc8

hugegraph-tools:

  1. None

hugegraph-hubble:

  1. mysql-connector (GPL): hugegraph-loader

NOTE: the MySQL connector dependency is optional, can let users to download by themselves: https://www.apache.org/legal/resolved.html#optional

z7658329 commented 2 years ago
imbajin commented 1 year ago

Reopen this issue because of the VOTE mail:

image

Mark this issue as the 1st priority to fix, TODOs:

Ways to find possible 3rd import:

Some other refer:

  1. Apache Release License README - Wiki