[Task] Correct source attribution and align copyright years following LEGAL-737
维护者通常 1 天内回复
@himanchalkaushale 已经在做这个了。
开始于 2026年11月10日。
评估
- 难度
- 5/5
- 预计耗时
- 一周以上
- 新手友好度
- 35/100
- Issue 类型
- 重构
- 描述清晰度
- 基本清楚
- 活跃度
- 活跃
- 技术栈
- java
调研方向
Start by checking the provenance of the 12 named classes in fesod-common and fesod-sheet, then inspect other EasyExcel files that already carry ASF headers. Use upstream references to decide which attributions apply and reconcile source header years with NOTICE. Done means the attribution and year ranges are consistent, license headers are preserved, and provenance evidence and remediation links are recorded; the issue also asks for a report to LEGAL-737.
由索引模型根据 Issue 内容生成。
描述
Motivation
This issue tracks the implementation follow-up to #1106 based on Justin Mclean's review in LEGAL-737.
Justin agreed that retaining Alibaba attribution in EasyExcel-derived files is acceptable (option A / the Pekko approach), because the EasyExcel code is outside the SGA scope. The current layout—an ASF header followed by Alibaba attribution in a separate comment block—is acceptable, and LICENSE needs no changes.
However, his review identified incorrect attribution on ASF-origin files and inconsistent copyright years. He also clarified that the Alibaba lines were added by the Fesod project rather than inherited from upstream EasyExcel. Their placement therefore needs to be checked against actual code provenance.
How to complete
- Audit files carrying Alibaba attribution and distinguish:
- EasyExcel-derived code, where Alibaba attribution may remain.
- New FastExcel/Fesod code covered by the SGA, where Alibaba attribution should not appear.
- Code originating from Apache POI or Apache Commons, where the incorrectly added Alibaba line should be removed and the ASF header retained.
- Start with the files Justin identified below, then check other EasyExcel files that already carried an ASF header. Record upstream references supporting the changes.
- Reconcile the source-header year range (
2018–2024) with NOTICE (2022–2024). Choose a consistent range supported by the provenance review; the comment does not prescribe which range to use. - Keep the accepted header layout for applicable EasyExcel-derived files. Restoring
@authortags is not required by the review.
Files identified by Justin (not an exhaustive list):
| Module | Classes |
|---|---|
fesod-common |
StringUtils, BooleanUtils, ListUtils, MapUtils, MemberUtils |
fesod-sheet |
Validate, DateUtils, DataFormatter, FileUtils, ClassUtils, FieldUtils, SharedStringsTableHandler |
Task List
- Verify the provenance of the 12 identified classes and remove their incorrect Alibaba attribution.
- Check for additional ASF-origin files with the same attribution problem.
- Ensure Alibaba attribution is limited to applicable EasyExcel-derived code and absent from new SGA-covered FastExcel/Fesod code.
- Make the relevant source-header and NOTICE year ranges consistent, documenting the basis for the selected range.
- Verify the diff preserves ASF license headers and makes no functional changes; pass the repository's formatting and license-header checks.
- Link the remediation PR(s) and provenance evidence here and in #1106.
- Report the completed changes back to LEGAL-737 and request confirmation that the remaining concerns are addressed.
Anything else?
- Related decision tracking: #1106
- Legal discussion and review: LEGAL-737
This issue tracks the concrete attribution cleanup requested in the review. It does not assume that LEGAL-737 has been formally resolved or that graduation approval has been granted.
- 主要语言
- Java
- 星标
- 6.3k
- 派生
- 554
- 平均合并
- 1 天 21 小时
- 30 天内合并 PR
- 44
环境准备
- 没有 Dockerfile 或 Docker Compose 文件
- 有 Pull Request 模板
- 阅读贡献指南
从这里开始
- 先读完整个 Issue,再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库,在一个分支上完成修改。
- 提交 Pull Request,并在描述里引用这个 Issue 编号。
apache/fesod 的其他 Issue
-
[Bug] Absolute row/column index 0 is ignored for images, hyperlinks and comments可能已有人在做 @fanOfSunny 今天认领。 未关闭
难度 2/5 1-3 小时 新手友好度 82/100
维护者通常 1 天内回复
-
[DISCUSS] Commit Signature Verification可能已有人在做 关联的 PR 仍在进行中或已合并。 未关闭discussion welcome security stale waiting for feedback
难度 2/5 1-3 小时 新手友好度 62/100
apache/fesod#1184 · 1 条评论 · 1 个 reaction ·
维护者通常 1 天内回复
-
[Bug] xlsx stream write leaves temp file可能已有人在做 @nkuprins 于 35 天前认领。 未关闭bug
难度 2/5 1-3 小时 新手友好度 75/100
apache/fesod#1137 · 1 条评论 · 已指派 1 人 ·
维护者通常 1 天内回复
-
[bug]Custom converters with supportExcelTypeKey() == null are silently ignored when writing CSV可能已有人在做 @Mikkey-f 于 66 天前认领。 未关闭
难度 2/5 半天 新手友好度 84/100
维护者通常 1 天内回复
-
discussion welcome
难度 3/5 1-2 天 新手友好度 15/100
apache/fesod#1308 · 3 条评论 · 3 个 reaction ·
维护者通常 1 天内回复
相似的 Issue
-
难度 2/5 1-3 小时 新手友好度 66/100
SasanLabs/VulnerableApp#912 ·
维护者通常 1 天内回复
-
area/build area/events area/storage area/storage/kafkasql area/storage/sql
难度 2/5 1-3 小时 新手友好度 78/100
Apicurio/apicurio-registry#11079 ·
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 75/100
OpenAEV-Platform/openaev#9139 ·
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 76/100
维护者通常 1 天内回复
-
desktop edt not responding
难度 2/5 1-3 小时 新手友好度 78/100