All - It has come to my attention that the PicketLink Provider is pulling in some dependencies that seem to actually be LGPL licensed rather that ASL v2 as is claimed by picketlink itself.
Since the picketlink provider has been functionally replaced by the pac4j provider, I propose that we just remove it from Apache Knox. I don't know of anyone using it and it doesn't even seem to be documented but I wanted to just check with the everyone before I remove it. I will file a JIRA and likely remove it immediately. Please feel free to raise any concerns that you may have. thanks! --larry
