Hi Folks,

I am evaluating the use of Apache Hop as an ETL engine in our backend. We are a 
commercial SaaS software provider, Obviously the fact that Hop is licensed 
under Apache 2.0 is comforting. We did a SBOM scan and a license scan and find 
that there are the following components: Stanford-corenlp-4.5.7-models.jar and 
Stanford-corenlp-4.5.7.jar in the hop install are GPL 3.0 licensed. This is of 
great concern as this is a viral license, i.e. It turns software using, linking 
these components also into GPL 3.0 licensed.  What are the thoughts of the 
community on this ?

Thanks,
Sree


Reply via email to