Hi,
The JSON License has recently been moved to the list of licenses not
allowed to be included in Apache products (Category X) [1, 2].
For the Jackrabbit PMC this means that we have to remove all
dependencies to org.json:json within the grace period, which ends April
30th 2017. This affects all our products and branches we still do
release from, namely Jackrabbit 2, Jackrabbit Oak, FileVault. A quick
check on trunk revealed dependencies from Jackrabbit Oak oak-remote and
Jackrabbit 2 jcr-commons. FileVault doesn't seem to be affected. Didn't
check the branches.
I suggest to open respective blocker issues for all our products and
versions to ensure no JSON dependency slips into a release after April
30th 2017. WDYT?
Michael
[1] https://www.apache.org/legal/resolved#category-x
[2]
http://mail-archives.apache.org/mod_mbox/www-legal-discuss/201611.mbox/%3C0CE2E8C9-D9B7-404D-93EF-A1F8B07189BF%40apache.org%3E
