Bug#738583: libcglib-java - Uses jarjar without proper copyright or Built-Using

Emmanuel Bourg ebourg at apache.org
Tue Feb 11 07:10:28 UTC 2014


Le 11/02/2014 05:16, tony mancill a écrit :

> Instead of Built-Using or updating debian/copyright, it seems preferable
> to refactor the source to use the actual libasm3-java JAR, although I
> haven't yet looked into how much effort that will require.

Please don't depend on asm3 at runtime. jarjar is used to relocate the
asm classes under a different package. This is necessary to avoid
classpath conflicts between different versions of asm.

I noticed that the cglib.jar distributed upstream contains the asm
license, but the license is missing from the jar in the Debian package
(this is true for libcglib-java and libcglib3-java). This should be fixed.

Emmanuel Bourg



More information about the pkg-java-maintainers mailing list