@Mukul, Here are some more violations:
xalan-j_2_7_3/lib/brazil-2.1.jar is licensed under SPL 1.0 xalan-j_2_7_3/lib/rhino-1.7.14.jar is licensed under MPL 2.0 Both these licenses are under "binary-only inclusion condition", so the files must be removed from a source release package: https://www.apache.org/legal/resolved.html#binary-only-inclusion-condition >Any Category B licensed works may be included in binary-only form in Apache Software Foundation convenience binaries. Do not include Category B licensed works in source releases. I hope the next release will not include those files in the source package. Vladimir