From c87d01c5dc0f1bfae6052909b582552b2406b730 Mon Sep 17 00:00:00 2001 From: Lukas Jungmann Date: Thu, 15 Feb 2024 14:07:27 +0100 Subject: [PATCH] update legal files Signed-off-by: Lukas Jungmann --- CONTRIBUTING.md | 48 +++++++++++++++++++++++++++--------------------- NOTICE.md | 44 +++++++------------------------------------- README.md | 2 +- SECURITY.md | 29 +++++++++++++++++++++++++++++ pom.xml | 10 +++++----- spec/pom.xml | 8 ++++---- 6 files changed, 73 insertions(+), 68 deletions(-) create mode 100644 SECURITY.md diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 5f6e0c3..36c57ea 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -1,4 +1,4 @@ -[//]: # " Copyright (c) 2018, 2022 Oracle and/or its affiliates. All rights reserved. " +[//]: # " Copyright (c) 2018, 2024 Oracle and/or its affiliates. All rights reserved. " [//]: # " " [//]: # " This program and the accompanying materials are made available under the " [//]: # " terms of the Eclipse Distribution License v. 1.0, which is available at " @@ -12,11 +12,17 @@ Thanks for your interest in this project. ## Project description -The Jakarta XML Binding provides an API and tools that -automate the mapping between XML documents and Java objects. +Jakarta XML Binding™ defines an API and tools that automate the mapping +between XML documents and Java objects. * https://projects.eclipse.org/projects/ee4j.jaxb +## Terms of Use + +This repository is subject to the Terms of Use of the Eclipse Foundation + +* https://www.eclipse.org/legal/termsofuse.php + ## Developer resources Information regarding source code management, builds, coding standards, and @@ -26,24 +32,8 @@ more. The project maintains the following source code repositories -* https://github.com/eclipse-ee4j/jaxb-api -* https://github.com/eclipse-ee4j/jaxb-tck - -## Eclipse Contributor Agreement - -Before your contribution can be accepted by the project team contributors must -electronically sign the Eclipse Contributor Agreement (ECA). - -* http://www.eclipse.org/legal/ECA.php - -Commits that are provided by non-committers must have a Signed-off-by field in -the footer indicating that the author is aware of the terms by which the -contribution has been provided to the project. The non-committer must -additionally have an Eclipse Foundation account and must have a signed Eclipse -Contributor Agreement (ECA) on file. - -For more information, please see the Eclipse Committer Handbook: -https://www.eclipse.org/projects/handbook/#resources-commit +* https://github.com/jakartaee/jaxb-api +* https://github.com/jakartaee/jaxb-tck ## Eclipse Development Process @@ -60,6 +50,22 @@ Jakarta EE specification projects. * https://jakarta.ee/about/jesp/ * https://www.eclipse.org/legal/efsp_non_assert.php +## Eclipse Contributor Agreement + +In order to be able to contribute to Eclipse Foundation projects you must +electronically sign the Eclipse Contributor Agreement (ECA). + +* https://www.eclipse.org/legal/ECA.php + +The ECA provides the Eclipse Foundation with a permanent record that you agree +that each of your contributions will comply with the commitments documented in +the Developer Certificate of Origin (DCO). Having an ECA on file associated with +the email address matching the "Author" field of your contribution's Git commits +fulfills the DCO's requirement that you sign-off on your contributions. + +For more information, please see the Eclipse Committer Handbook: +https://www.eclipse.org/projects/handbook/#resources-commit + ## Contact Contact the project developers via the project's "dev" list. diff --git a/NOTICE.md b/NOTICE.md index 7d487b3..417ebab 100644 --- a/NOTICE.md +++ b/NOTICE.md @@ -1,4 +1,4 @@ -[//]: # " Copyright (c) 2018, 2022 Oracle and/or its affiliates. All rights reserved. " +[//]: # " Copyright (c) 2018, 2024 Oracle and/or its affiliates. All rights reserved. " [//]: # " " [//]: # " This program and the accompanying materials are made available under the " [//]: # " terms of the Eclipse Distribution License v. 1.0, which is available at " @@ -8,14 +8,13 @@ # Notices for Jakarta XML Binding -This content is produced and maintained by the Jakarta XML Binding -project. +This content is produced and maintained by the Jakarta XML Binding project. * Project home: https://projects.eclipse.org/projects/ee4j.jaxb ## Trademarks -Jakarta XML Binding is a trademark of the Eclipse Foundation. +Jakarta XML Binding™ is a trademark of the Eclipse Foundation. ## Copyright @@ -26,8 +25,8 @@ source code repository logs. ## Declared Project Licenses This program and the accompanying materials are made available under the terms -of the Eclipse Distribution License v. 1.0 which is available at -http://www.eclipse.org/org/documents/edl-v10.php. +of the Eclipse Distribution License v1.0 which is available at +https://www.eclipse.org/org/documents/edl-v10.php. SPDX-License-Identifier: BSD-3-Clause @@ -35,37 +34,8 @@ SPDX-License-Identifier: BSD-3-Clause The project maintains the following source code repositories: -* https://github.com/eclipse-ee4j/jaxb-api -* https://github.com/eclipse-ee4j/jaxb-tck - -## Third-party Content - -This project leverages the following third party content. - -Apache River (3.0.0) - -* License: Apache-2.0 AND BSD-3-Clause - -ASM 7 (n/a) - -* License: BSD-3-Clause -* Project: https://asm.ow2.io/ -* Source: - https://repository.ow2.org/nexus/#nexus-search;gav~org.ow2.asm~asm-commons~~~~kw,versionexpand - -JTHarness (5.0) - -* License: (GPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0) -* Project: https://wiki.openjdk.java.net/display/CodeTools/JT+Harness -* Source: http://hg.openjdk.java.net/code-tools/jtharness/ - -normalize.css (3.0.2) - -* License: MIT - -SigTest (n/a) - -* License: GPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0 +* https://github.com/jakartaee/jaxb-api +* https://github.com/jakartaee/jaxb-tck ## Cryptography diff --git a/README.md b/README.md index c9c9d46..354b955 100644 --- a/README.md +++ b/README.md @@ -8,7 +8,7 @@ # Jakarta XML Binding project -[![Build Status](https://github.com/eclipse-ee4j/jaxb-api/actions/workflows/maven.yml/badge.svg?branch=master)](https://github.com/eclipse-ee4j/jaxb-api/actions/workflows/maven.yml?branch=master) +[![Build Status](https://github.com/jakartaee/jaxb-api/actions/workflows/maven.yml/badge.svg?branch=master)](https://github.com/jakartaee/jaxb-api/actions/workflows/maven.yml?branch=master) [![Jakarta Staging (Snapshots)](https://img.shields.io/nexus/s/https/jakarta.oss.sonatype.org/jakarta.xml.bind/jakarta.xml.bind-api.svg)](https://jakarta.oss.sonatype.org/content/repositories/staging/jakarta/xml/bind/jakarta.xml.bind-api/) The Jakarta XML Binding provides an API and tools that automate the mapping diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..cf652e6 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,29 @@ +[//]: # " Copyright (c) 2024 Oracle and/or its affiliates. All rights reserved. " +[//]: # " " +[//]: # " This program and the accompanying materials are made available under the " +[//]: # " terms of the Eclipse Distribution License v. 1.0, which is available at " +[//]: # " http://www.eclipse.org/org/documents/edl-v10.php. " +[//]: # " " +[//]: # " SPDX-License-Identifier: BSD-3-Clause " + +# Security Policy + +This project implements the Eclipse Foundation Security Policy + +* https://www.eclipse.org/security + +## Supported Versions + +These versions of Jakarta XML Binding are currently being supported with +security updates. + +| Version | Released | Supported | +| ------- | ---------- | --------- | +| 4.0 | 2022-03-30 | Yes | +| 3.0.1 | 2021-03-26 | Yes | +| < 3.0 | 2020-11-04 | No | + +## Reporting a Vulnerability + +Please report vulnerabilities to the Eclipse Foundation Security Team at +security@eclipse.org diff --git a/pom.xml b/pom.xml index a7479d5..2d5487b 100644 --- a/pom.xml +++ b/pom.xml @@ -28,12 +28,12 @@ pom Jakarta XML Binding Jakarta XML Binding API - https://github.com/eclipse-ee4j/jaxb-api + https://github.com/jakartaee/jaxb-api - scm:git:git://github.com/jakartaee/jaxb-api - scm:git:git@github.com:jakartaee/jaxb-api - https://github.com/jakartaee/jaxb-api + scm:git:git://github.com/jakartaee/jaxb-api.git + scm:git:git@github.com:jakartaee/jaxb-api.git + https://github.com/jakartaee/jaxb-api.git HEAD @@ -55,7 +55,7 @@ github - https://github.com/eclipse-ee4j/jaxb-api/issues + https://github.com/jakartaee/jaxb-api/issues diff --git a/spec/pom.xml b/spec/pom.xml index 9e2608e..cd37cab 100644 --- a/spec/pom.xml +++ b/spec/pom.xml @@ -35,14 +35,14 @@ Jakarta XML Binding Specification - scm:git:git://github.com/jakartaee/jaxb-api - scm:git:git@github.com:jakartaee/jaxb-api - https://github.com/jakartaee/jaxb-api + scm:git:git://github.com/jakartaee/jaxb-api.git + scm:git:git@github.com:jakartaee/jaxb-api.git + https://github.com/jakartaee/jaxb-api.git HEAD - scm:git:git@github.com:jakartaee/jaxb-api + scm:git:git@github.com:jakartaee/jaxb-api.git