[
https://issues.apache.org/jira/browse/TINKERPOP-2711?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17496362#comment-17496362
]
Stephen Mallette commented on TINKERPOP-2711:
---------------------------------------------
hmm - i think CDDL is ok under Apache given the way we are using it:
https://www.apache.org/legal/resolved.html
but I think we should change to {{antrl4-runtime}} and avoid the extra
dependencies in TinkerPop 3.5.3+. In the meantime I would simply exclude it, if
you can't accept CDDL. I don't think it's required for anything TinkerPop is
doing offhand.
Thanks for bringing this to our attention.
> Make gremlin-language optional as it brings in CDDL/GPL dependencies
> --------------------------------------------------------------------
>
> Key: TINKERPOP-2711
> URL: https://issues.apache.org/jira/browse/TINKERPOP-2711
> Project: TinkerPop
> Issue Type: Improvement
> Components: server
> Affects Versions: 3.6.0, 3.5.2
> Reporter: Aaron Coady
> Priority: Major
>
> Beginning with version 3.5.2 gremlin-core has a compile time dependency on
> gremlin-language and gremlin-language requires antlr4 which depends on
> javax.json
> javax.json is CDDL 1.1 & GPL 2.0 licensed
>
> Our legal team has brought about concerns continuing to use this package
> based on some of the conditions in these licenses.
>
> Is there a way to make this dependency optional so we can avoid a dependency
> on javax.json?
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
