metron-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Matt Foley <>
Subject Re: [DISCUSS] Hosting Kraken maven artifacts in incubator-metron git repo
Date Fri, 13 Jan 2017 23:35:11 GMT
Perhaps it would be more appropriate to put it under
, perhaps as ?

We should not host anything with a license that isn’t compatible with inclusion in an Apache
project.  If we post only non-source artifacts, then that would include packages with “Category
B List” licenses (that is, ‘"WEAK COPYLEFT" LICENSES’) as well as “Category A List”
licenses (those “SIMILAR IN TERMS TO THE APACHE LICENSE 2.0”) -- per
.  For versioning, we could simply structure as a maven repo, and in fact that’s what I
think we should do.

Hosting the source code is not, I think, something we are supposed to do for non-Apache projects: again, this time the very first question:

    No. See the Apache Software Foundation licenses page for more details, and the Apache
Software Foundation page for additional background.

On 1/13/17, 8:11 AM, "Billie Rinaldi" <> wrote:

    No, we can't host artifacts in a git repo, or on a website. It would be
    like distributing a release that hasn't been voted upon.
    Regarding message threading, in Gmail adding a [tag] to the subject does
    not create a new thread. So the change is not visible in my mailbox unless
    the rest of the subject is changed as well.
    On Mon, Jan 9, 2017 at 1:00 PM, Michael Miklavcic <> wrote:
    > This is a question primarily for the mentors.
    > *Background*
    > metron-common is currently depending on the openSOC github repo for hosting
    > kraken artifacts. The original reason for this was that these jars are not
    > hosted in Maven Central, and they were not reliably available in the Kraken
    > repo. is tracking work
    > around copying these artifacts to the Metron repo.
    > Kraken source on openSOC -
    > Krake maven repo on openSOC -
    > *Ask*
    > Create a new branch in incubator-metron to host any necessary maven
    > artifacts. This branch would simply be incubator-metron/mvn-repo. This is
    > similar to how we've hosted the asf-site.
    > *Concerns/Questions*
    >    1. Can we host these jars/artifacts in this manner?
    >    2. Concerns regarding licensing?
    >    3. Do we need to also grab and host the source code?

View raw message