PJ Fanning created GORA-715: ------------------------------- Summary: Gora uses a version of org.json:json jar that is not permitted by ASF Key: GORA-715 URL: https://issues.apache.org/jira/browse/GORA-715 Project: Apache Gora Issue Type: Bug Reporter: PJ Fanning
Up until late 2022, org.json:json used a nonsensical license that banned the use of the jar for evil - no kidding. This is not within OSS principles and is called out as a Category X license by the ASF. See https://www.apache.org/legal/resolved.html - see `JSON license` part. There are also security fixes in the public domain and permissable versions released in the last year or 2. https://github.com/apache/gora/blob/master/pom.xml#L864 -- This message was sent by Atlassian Jira (v8.20.10#820010)