Guidelines to help you comply with the ASF release and distribution policies

DRAFT DRAFT DRAFT DRAFT

In addition to the Apache mirror system incubating projects may distribute artefacts on other platforms as long as they follow these general guidelines:

These SHOULD be followed unless the podling has permission from the IPMC to do otherwise.

If any podling is found not to comply they will be asked to correct it, if that doesn’t happen with a week they will be asked to remove the offending artefact(s), if a podling commits serial offences or fails to remove artefacts when asked to within a week they will be banned from using that distribution mechanism altogether. The IPMC reserves the right to ask INFRA to remove the artifact if the podling doesn't follow these guidelines.

Motivation

The ASF is responsible for providing software which can be used in accordance with our license. Code or artefacts built from code without clean IP can mean that code that doesn't belong to us slips into users projects. This would expose our users and the ASF to the risk of lawsuite. One purpose of the incubating process and its release process is to ensure that our users can trust our projects. Releasing artefacts built from code that hasn't been approved by the IPMC circumvents this process. It robs the PPMC of learning opportunities. It increases the likelihood that we might accidentally betray the trust of our users.

At the same time binary artefacts on automated distribution platforms are important to our users for a wide variety of reasons. This policy is intended to balance these priorities. If you believe you have a case in which this policy is inadequate to your situation please bring this to our attention by mailing either general@incubator.apache.org or private@incubator.apache.org

GitHub

` Artefacts show up on https://github.com/apache/incubator-<project>/releases

To comply with ASF release and distributions please ensure the following:

Docker

Artefacts need to be placed in https://hub.docker.com/r/apache/<project> or https://hub.docker.com/u/apache<project>/<project>

To comply with ASF release and distributions please ensure the following:

NPM

Artefacts show up on https://www.npmjs.com/package/apache<project> version page

To comply with ASF release and distributions please ensure the following:

PiPy

Artefacts need to be placed in https://pypi.org/project/apache<project>/

To comply with ASF release and distributions please ensure the following:

DistributionGuidelines (last edited 2019-02-11 20:48:42 by Justin Mclean)