fix: align Apache declarations and packaged notices #3
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: QRun-IO/qqq-app-starter#3
Reference in new issue
Block a user
The starter had conflicting first-party declarations, omitted its own LICENSE/NOTICE from archives, and lacked CircleCI configuration. Align declarations with Apache-2.0, include exact own documents under META-INF/qqq-app-starter without replacing dependency notices, and retain the reviewed orb0.6.8 test-only workflow with tags ignored. Runtime code, dependency pins, existing resources and third-party terms are unchanged; no publication jobs are added. Refs QRun-IO/qqq#923, QRun-IO/qqq#936 and QRun-IO/qqq#944.
Independent license, CI and packaging reviews passed. Earlier Maven verify passed one test; new packaging checks cover shaded main, original, sources, tests, Javadoc and assembly archives. All six contain exact own notices and preserve17existing dependency legal entries in each shaded/assembly archive. Baseline and altered/missing/duplicate controls fail. Runtime tests were not repeated locally for the resource-only addition; exact-head hosted tests remain required. The Python archive guard is explicit/manual, not automatically run by the workflow. Eligible GitHub review and new public successor verification remain; existing versions stay immutable.