The option to host 3rd-party code under Apache has already been declined. There is no problem using 3rd party code in the OS, provided (1) it has an approved open-source, license, and (2) it goes through IP clearance to eliminate legal risks to the ASF.
IP clearance is discussed here: https://incubator.apache.org/ip-clearance/
