For cglib: The jar contains a LICENSE file, that is in line with the information from the cglib project itself (both are ALv2). I don't know where
https://mvnrepository.com/artifact/org.glassfish.hk2.external/cglib/2.2.0-b21 gets its info from. But there is exactly one file that qualifies for CDDL/GPL licenseing and that is the pom.xml. So for me this package is ALv2. If the pom.xml is considered as copyrightable, the whole jar would need a special license file to cover both choosen licenses (CDDL+ALv2). [ Full content available at: https://github.com/apache/incubator-netbeans/pull/937 ] This message was relayed via gitbox.apache.org for devnull@infra.apache.org
