[
https://issues.apache.org/jira/browse/GORA-715?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17820053#comment-17820053
]
PJ Fanning commented on GORA-715:
---------------------------------
https://github.com/apache/gora/pull/293
> Gora uses a version of org.json:json jar that is not permitted by ASF
> ---------------------------------------------------------------------
>
> Key: GORA-715
> URL: https://issues.apache.org/jira/browse/GORA-715
> Project: Apache Gora
> Issue Type: Bug
> Reporter: PJ Fanning
> Priority: Major
>
> Up until late 2022, org.json:json used a nonsensical license that banned the
> use of the jar for evil - no kidding. This is not within OSS principles and
> is called out as a Category X license by the ASF.
> See https://www.apache.org/legal/resolved.html - see `JSON license` part.
> There are also security fixes in the public domain and permissable versions
> released in the last year or 2.
> https://github.com/apache/gora/blob/master/pom.xml#L864
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
