Github user joewitt commented on the issue:
https://github.com/apache/nifi/pull/2084
@mcgilman @alopresto the lack of L&N on that is because we're not
publishing a bundled artifact for it (like we do with nars). We're simply
putting source up or the binary of our external but then normal dep/maven magic
takes over. So, we're ok as-is and having a cat-b dependency is still fair
game. Once someone pulls in our library (which depends on that stuff) then
they would have to consider the EPL implications. In short, i think we're good
here for L&N based on andy's above assessment.
---