Hello,
While working on the Jetty 9 upgrade patch, after polling in several new 
artifacts, the build failed due to the license validation, for example:
1. It pulled in the javax.annotation whose license is 'CDDL + GPLv2 with 
classpath exception' which failed our whitelist check since once 'CDDL' is 
found, it tries to find '1.1' or '1.0' but failed to find those sub strings.

2. Another one failed the validation is javax.validation, whose license is 
'Apache Software License, Version 2.0', whereas in our whitelist, it is 'Apache 
License, Version 2.0' (note there is no 'Software').

I would like to ask what is the recommendation to deal with this type of 
mismatch?

Thanks,
Guang

Reply via email to