uima-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Marshall Schor <...@schor.com>
Subject Re: packaging dependencies with distributions
Date Wed, 12 May 2010 15:26:06 GMT

On 5/12/2010 7:44 AM, Thilo Götz wrote:
> On 5/12/2010 11:44, Tommaso Teofili wrote:
>> 2010/5/12 Thilo Götz <twgoetz@gmx.de>
>>> IMO, we should explicitly list the dependencies we ship.
>>> Otherwise every release we'll have a lot of work checking
>>> that our packages don't contain any unwanted libraries.
>> I am +1, how would you suggest to do that? Apart from the POM dependencies
>> list would you put them inside (for example) the README file or something
>> else?
> In the POM is fine.  I just meant we should list them
> for ourselves, as developers, so we know and have control
> over what we introduce as dependencies.
> For our users, we have the usual NOTICE and LICENSE files,
> where we list 3rd party software that we bring with us.
> Those we need to maintain anyway; and listing the dependencies
> in the POM makes that task easier and less error prone.  When
> you have to add dependencies manually in the POM, it reminds
> you to update the NOTICE and LICENSE files at the same time.
> At least the release manager will have an easier job making
> sure those files are up to date.

+1.  There's also a new "convention" in the standard Apache parent pom
that sticks in a list of transitive dependencies into every Jar's
META-INF in a new folder called "DEPENDENCIES", generated from the
dependency info, using some Velocity Macro stuff.  

These are *more* than we ship, because we don't include by default *all*
transitive dependencies in our lib/.

For example, if you run the new maven build system (which I just checked
in - another note coming), and look at the uimaj-as-activemq project,
for instance, and look inside the Jar that is built, you will see there
inside META-INF, the file DEPENDENCIES and it looks something like this
(parts elided):

// ------------------------------------------------------------------
// Transitive dependencies of this project determined from the
// maven pom organized by organization.
// ------------------------------------------------------------------

UIMA-AS: uimaj-as-activemq

From: 'an unknown organization'
  - jmdns  activemq:jmdns:jar:1.0-RC2

  - jaxp-api  activesoap:jaxp-api:jar:1.3

  - AOP alliance (http://aopalliance.sourceforge.net)
    License: Public Domain
  - avalon-framework  avalon-framework:avalon-framework:jar:4.1.3

 . . . (elided)

From: 'Apache Software Foundation' (http://www.apache.org/)
  - ActiveIO :: Core
    License: The Apache Software License, Version 2.0 
  - ActiveMQ :: Console (http://activemq.apache.org/activemq-console/)
    License: The Apache Software License, Version 2.0 

   . . . (elided)

From: 'The Apache Software Foundation' (http://www.apache.org/)
  - UIMA-AS: uimaj-as-core (http://incubator.apache.org/uima)
    License: The Apache Software License, Version 2.0 

   . . . (elided)

> --Thilo
>> Cheers.
>> Tommaso

View raw message