Both are related to CoreNLP from what I can see:

$ mvn dependency:tree -Dincludes=com.io7m.xom:xom:jar:1.2.10 -Dverbose
[INFO] Scanning for projects...
[INFO]
[INFO] ------------------< org.apache.nlpcraft:java-client
>-------------------
[INFO] Building NLPCraft - Java Client 0.5.0
[INFO] --------------------------------[ jar
]---------------------------------
[INFO]
[INFO] --- maven-dependency-plugin:2.8:tree (default-cli) @ java-client ---
[INFO] org.apache.nlpcraft:java-client:jar:0.5.0
[INFO] \- org.apache.nlpcraft:nlpcraft:jar:0.5.0:compile
[INFO]    +- edu.stanford.nlp:stanford-corenlp:jar:3.9.2:compile
[INFO]    |  \- com.io7m.xom:xom:jar:1.2.10:compile
[INFO]    \- edu.stanford.nlp:stanford-corenlp:jar:models:3.9.2:runtime
[INFO]       \- (com.io7m.xom:xom:jar:1.2.10:runtime - omitted for
duplicate)
[INFO]
------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO]
------------------------------------------------------------------------
[INFO] Total time:  3.789 s
[INFO] Finished at: 2020-06-01T11:44:46+10:00
[INFO]
------------------------------------------------------------------------

I imagine just excluding transitive dependencies for the core project would
be enough:

        <dependency>
            <groupId>org.apache.nlpcraft</groupId>
            <artifactId>nlpcraft</artifactId>
            <version>${nlpcraft.ver}</version>






*            <exclusions>                <exclusion>
<groupId>*</groupId>                    <artifactId>*</artifactId>
      </exclusion>            </exclusions>*        </dependency>

It certainly builds fine still with that change but I don't have things set
up right now to properly run the test suite.
It seems to produce the same classes (but vastly different
META-INF/DEPENDENCIES file - for the better).
If someone with the server set up could enable and run the test suite that
would confirm things.

Cheers, Paul.



On Mon, Jun 1, 2020 at 10:43 AM Nikita Ivanov <[email protected]> wrote:

> Gents,
> Can someone shed some light on this? Where and how we are pulling these GPL
> libraries? We definitely can't download these during "mvn clean package"...
> Thank you,
> --
> Nikita Ivanov
>
>
>
> ---------- Forwarded message ---------
> From: Justin Mclean <[email protected]>
> Date: Sun, May 31, 2020 at 1:42 AM
> Subject: Re: [VOTE] Release Apache NLPCraft - Java Client (Incubating)
> 0.5.0
> To: <[email protected]>
>
>
> Hi,
>
> -1 (binding)
>
> Everything else looks fine but you may have GPL dependancies [1][2] Can you
> confirm if this is or is not the case, and are these optional? [3]
>
>
> I checked:
> - incubating in names
> - signatures and hashes are fine
> - DISCLAIMER exits
> - LICENSE and NOTICE are good
> - No unexpected binary files
> - All source files have ASF headers
> - Can compile from source
>
> Thanks,
> Justin
>
> 1 .http://xom.nu
> 2. https://stanfordnlp.github.io/CoreNLP/
> 3. https://www.apache.org/legal/resolved.html#optional
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>

Reply via email to