typelevel / governance

Typelevel governance
Creative Commons Attribution 4.0 International
8 stars 1 forks source link

release `download-java` action on GH marketplace #102

Closed samspills closed 1 year ago

samspills commented 1 year ago

Initially requested here: https://github.com/typelevel/download-java/issues/22

Steps

I can accept the terms, but wanted to give everyone a chance to look over them if they so desire, cc @typelevel/steering

rossabaker commented 1 year ago

Does anybody have a summary of responsibilities and liabilities compared to the status quo? Those terms are a lot to digest. I want to help, but I also don't want to get sued by a certain JDK provider whose CEO bought a Hawai`ian island.

jducoeur commented 1 year ago

Yow -- yeah, while some of that is just standard boilerplate, there's a lot there we'll need to understand properly.

valencik commented 1 year ago

Perhaps a helpful heuristic, the ASF signed it: https://issues.apache.org/jira/browse/LEGAL-537

rossabaker commented 1 year ago

Does it get signed as Typelevel? I am struggling with who the "Developer" is, since we're neither an individual nor a company.

"Developer" means you, and you are the company or individual who has created the software, content, and digital materials for use in connection with GitHub and accessible via Marketplace.

I read through it, and I don't see anything atypical, nor can I find anybody complaining about it online.

rossabaker commented 1 year ago

Secondhand legal advice from a colleague asking an expert:

The feedback I got was that if there is a legal structure in place the governance document needs to specify who/roles allowed to enter into agreements with 3rd parties and any of those individuals can sign. If there is no legal structure it's not really legally possible to sign an agreement without getting everyone to sign.

It would be interesting to find examples of another organization like us in the program: more than a person, less than a corporation.

armanbilge commented 1 year ago

As of sbt-typelevel v0.5.0-RC1 we are no longer using the download-java action, so it is effectively deprecated. If somebody wants to continue to use it outside of sbt-typelevel they could always fork the repo and publish to marketplace themselves?

armanbilge commented 1 year ago

Upstream issue is closed, so we can close this too.

rossabaker commented 1 year ago

The abstract question may come up again, but agree the specific is addressed.