So it looks like after removing all the apache stuff, here's what's
left in our lib/ dir:
activation-1.1.jar
asm-2.2.3.jar
asm-commons-2.2.3.jar
asm-tree-2.2.3.jar
backport-util-concurrent-2.1.jar
cglib-nodep-2.1_3.jar
dom4j-1.6.1.jar
hsqldb-1.8.0.7.jar
icu4j-2.6.1.jar
jaxb-api-2.0.jar
jaxb-impl-2.0.3.jar
jaxen-1.1.1.jar
jdom-1.0.jar
jmdns-1.0-RC2.jar
jsr173_api-1.0.jar
mail-1.4.jar
serp-1.11.0.jar
spring-2.0.jar
stax-api-1.0.1.jar
swizzle-stream-1.0.1.jar
wstx-asl-3.2.1.jar
xom-1.0.jar
xpp3_min-1.1.3.4.O.jar
xstream-1.2.1.jar
I know for sure we need these:
asm-2.2.3.jar
asm-commons-2.2.3.jar
asm-tree-2.2.3.jar
backport-util-concurrent-2.1.jar
cglib-nodep-2.1_3.jar
hsqldb-1.8.0.7.jar
jaxb-api-2.0.jar
jaxb-impl-2.0.3.jar
serp-1.11.0.jar
We can get started adding these to the NOTICE file. Geronimo will
have them all already in it's NOTICE file, except hsqldb, so we can
grab the text from there.
We need to figure out what's pulling in the rest and see if we can
delete the deps. Don't know if I can get back to this today, but
the technique I usually use to find who is pulling in something is to
delete the jar from my maven repo then build the module (in this case
assembly/openejb-standalone) offline and see what maven spits out.
-David