Github user mcgilman commented on the issue:
https://github.com/apache/nifi/pull/2365
@joewitt I agree that we should remain consistent with the older format. I
don't think I fully explained option 3. The stax-utils artifact appears to
package the same `com.sun` class we were previously referencing but in a
`javanet.staxutils` package. This may be the safer of the two options as we
wouldn't be relying on an internal/undocumented `Marshaller` property. ---
