PJ Fanning created GORA-715:
-------------------------------

             Summary: Gora uses a version of org.json:json jar that is not 
permitted by ASF
                 Key: GORA-715
                 URL: https://issues.apache.org/jira/browse/GORA-715
             Project: Apache Gora
          Issue Type: Bug
            Reporter: PJ Fanning


Up until late 2022, org.json:json used a nonsensical license that banned the 
use of the jar for evil - no kidding. This is not within OSS principles and is 
called out as a Category X license by the ASF.

See https://www.apache.org/legal/resolved.html - see `JSON license` part.

There are also security fixes in the public domain and permissable versions 
released in the last year or 2.

https://github.com/apache/gora/blob/master/pom.xml#L864



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to