Hadoop has some exposure, at least at test scope, for both branch-2 and
trunk:

[INFO] |  +- com.sun.jersey:jersey-json:jar:1.19:provided
[INFO] |  |  |  +- net.minidev:json-smart:jar:1.1.1:compile
[INFO] |  |  \- org.skyscreamer:jsonassert:jar:1.3.0:test (version managed
from 1.2.3)
[INFO] |  |     \- *org.json:json:jar:20090211:test*

Doesn't present a problem for us in either our source or binary artifacts,
but I'd expect them to clean this up (eventually) so accidents don't happen
in the future.


On Thu, Nov 3, 2016 at 9:44 AM, Andrew Purtell <[email protected]> wrote:

> The JSON.org license (http://www.json.org/license.html) was just
> rescheduled as Category X.
>
> I did a quick check and do not believe we have any exposure.
>
> --
> Best regards,
>
>    - Andy
>
> Problems worthy of attack prove their worth by hitting back. - Piet Hein
> (via Tom White)
>



-- 
Best regards,

   - Andy

Problems worthy of attack prove their worth by hitting back. - Piet Hein
(via Tom White)

Reply via email to