License Notice
As we know that DolphinScheduler is an open-source undergoing project at The Apache Software Foundation (ASF), which means that you have to follow the Apache way to become the DolphinScheduler contributor. Furthermore, Apache has extremely strict rules according to the License. This passage will explain the ASF license and how to avoid License risks at the early stage when you participate in DolphinScheduler.
Note: This article only applies to the Apache projects.
Licenses Could be Accepted to the Apache Project
You have to pay attention to the following open-source software protocols which Apache projects support when you intend to add a new feature to the DolphinScheduler (or other Apache projects), which functions refers to other open-source software references.
If the 3rd party software is not present at the above policy, we are sorry that your code can not pass the audit and we suggest searching for other substitute plans.
Besides, when you demand new dependencies in the project, please email us about the reason and the outcome of the influence to dev@dolphinscheduler.apache.org to discuss. Besides, you need at least 3 positive votes from the PPMC to finish the whole step.
How to Legally Use 3rd Party Open-source Software in the DolphinScheduler
Moreover, when we intend to refer a new software ( not limited to 3rd party jar, text, CSS, js, pics, icons, audios etc and modifications based on 3rd party files) to our project, we need to use them legally in addition to the permission of ASF. Refer to the following article:
For example, we should contain the NOTICE file (every open-source project has NOTICE file, generally under root directory) of ZooKeeper in our project when we are using ZooKeeper. As the Apache explains, “Work” shall mean the work of authorship, whether in Source or Object form, made available under the License, as indicated by a copyright notice that is included in or attached to the work.
We are not going to dive into every 3rd party open-source license policy, you may look up them if interested.
DolphinScheduler-License Check Rules
In general, we would have our License-check scripts to our project. DolphinScheduler-License is provided by kezhenxu94 which differ a bit from other open-source projects. All in all, we are trying to make sure avoiding the license issues at the first time.
We need to follow the following steps when we need to add new jars or external resources:
- Add the name and the version of the jar file in the known-dependencies.txt
- Add relevant maven repository address under ‘dolphinscheduler-dist/release-docs/LICENSE’ directory
- Append relevant NOTICE files under ‘dolphinscheduler-dist/release-docs/NOTICE’ directory and make sure they are no different to the original repository
- Add relevant source code protocols under ‘dolphinscheduler-dist/release-docs/license/‘ directory and the file name should be named as license+filename.txt. Eg: license-zk.txt