Hi, I'm preparing the NOTICE file for saga 1.0 release and I'm having the following problems:
1. The Saga project depends on Java Chassis project which includes FindBugs-Annotations (http://findbugs.sourceforge.net/) com.google.code.findbugs:annotations:jar:2.0.0 which is under LGPL. We have fixed this in the Java Chassis project, but it's group is changed to 'servicecomb.apache.org'. But the Saga project still uses the 'io.servicecom' group. Shall we release Saga after Java Chassis? Or is it OK that we release Saga first knowing that the dependency on findbugs:annotations will be removed later? 2. The Saga project includes the json library which is under the JSON license. The json library is imported by hamcrest-json and spring-boot-starter-test, maybe we can exclude the dependency in the pom? org.json:json:jar:20090211 org.json:json:jar:20140107 --- [INFO] +- com.github.seanyinx:unit-scaffolding:jar:1.0.0:test [INFO] \- uk.co.datumedge:hamcrest-json:jar:0.2:test [INFO] \- org.skyscreamer:jsonassert:jar:1.1.1:test [INFO] +- org.json:json:jar:20090211:test [INFO] +- org.springframework.boot:spring-boot-starter-test:jar:1.4.5.RELEASE:test [INFO] | +- org.springframework.boot:spring-boot-test:jar:1.4.5.RELEASE:test [INFO] | +- org.springframework.boot:spring-boot-test-autoconfigure:jar:1.4.5.RELEASE:test [INFO] | +- com.jayway.jsonpath:json-path:jar:2.2.0:test [INFO] | | \- net.minidev:json-smart:jar:2.2.1:test [INFO] | | \- net.minidev:accessors-smart:jar:1.1:test [INFO] | | \- org.ow2.asm:asm:jar:5.0.3:test [INFO] | +- org.assertj:assertj-core:jar:2.5.0:test [INFO] | +- org.hamcrest:hamcrest-core:jar:1.3:test [INFO] | +- org.hamcrest:hamcrest-library:jar:1.3:test [INFO] | +- org.skyscreamer:jsonassert:jar:1.3.0:test [INFO] | | \- org.json:json:jar:20140107:test [INFO] | +- org.springframework.boot:spring-boot-starter-test:jar:1.4.5.RELEASE:compile [INFO] | +- org.springframework.boot:spring-boot-test:jar:1.4.5.RELEASE:compile [INFO] | +- org.springframework.boot:spring-boot-test-autoconfigure:jar:1.4.5.RELEASE:compile [INFO] | +- com.jayway.jsonpath:json-path:jar:2.2.0:compile [INFO] | | \- net.minidev:json-smart:jar:2.2.1:compile [INFO] | | \- net.minidev:accessors-smart:jar:1.1:compile [INFO] | | \- org.ow2.asm:asm:jar:5.0.3:compile [INFO] | +- org.assertj:assertj-core:jar:2.5.0:compile [INFO] | +- org.mockito:mockito-core:jar:1.10.19:test [INFO] | | \- org.objenesis:objenesis:jar:2.1:test [INFO] | +- org.hamcrest:hamcrest-core:jar:1.3:test [INFO] | +- org.hamcrest:hamcrest-library:jar:1.3:compile [INFO] | +- org.skyscreamer:jsonassert:jar:1.3.0:compile [INFO] | | \- org.json:json:jar:20140107:compile ---
