On May 23, 2014, at 11:19 AM, chris snow <[email protected]> wrote:

> I'm currently evaluating Fediz 1.1 for my company, but noticed that
> the IDP has an OGNL dependency that in turn requires Javassist which
> is LGPL:

According to:

http://www.javassist.org
http://www.csg.ci.i.u-tokyo.ac.jp/~chiba/javassist/

"This version is distributed under the triple license of the MPL, the LGPL, and 
the Apache License.”

That’s at least for the 3.18.1 version.  We likely should make sure we’re 
updated to grab the 3.18.1 version from:
http://central.maven.org/maven2/org/javassist/javassist/3.18.1-GA/javassist-3.18.1-GA.pom
to make sure that is clear.

Dan



> 
> I would have to jump through hoops to get LGPL approved, so I was
> wondering what the implications would be if I removed the OGNL
> dependency.
> 
> The main reference to OGNL that I could find is:
> 
> src/main/webapp/WEB-INF/idp-servlet.xml:    <bean
> id="expressionParser"
> class="org.springframework.webflow.expression.WebFlowOgnlExpressionParser"
> />
> 
> Does anyone know the impact of replacing OGNL with SpringEL in the IDP?

-- 
Daniel Kulp
[email protected] - http://dankulp.com/blog
Talend Community Coder - http://coders.talend.com

Reply via email to