Yea findbugs-annotations is not LGPL: https://github.com/stephenc/findbugs-annotations It appears to be apache 2, though aaron you should verify.
On Mon, Oct 17, 2016 at 11:19 AM, Aaron D. Mihalik <[email protected]> wrote: > fluo has a transitive dependency on findbugs-annotations, not direct. > > My issue is that com.github.stephenc.findbugs:findbugs-annotations:3.0.1-1 > isn't in maven central. I think it would be straightforward for us to > exclude and replace with c.g.s.f:findbugs-annotations:3.0.1-1, but it's > going to be difficult with earlier versions of > c.g.s.f:findbugs-annotations. > > I'll take a closer look at it today, though. > > --Aaron > > > On Sun, Oct 16, 2016 at 5:51 PM Josh Elser <[email protected]> wrote: > > > Also, over in Apache Phoenix, we're using > > com.github.stephenc.findbugs:findbugs-annotations:1.3.9-1. Maybe I gave > > some bad advice on the GAV to use the first time around :) > > > > Josh Elser wrote: > > > A (Maven) repo? It's published central -- you shouldn't have to do > > > anything extra to get it. Sonatype is automatically mirrored to central > > > (like Apache is). > > > > > > Also, Fluo is depending on this directly? Or just transitively? I am > > > hoping I did not miss it directly depending... > > > > > > No, it's not ok :). You're bundling code whose license is dodgy. Either > > > way you need to exclude the Findbugs' findbugs-annotations from these > > > dependencies. Whether or not you replace in > c.g.s.f:findbugs-annotations > > > instead is up to you (not sure if you would run into problems) > > > > > > Aaron D. Mihalik wrote: > > >> Anyone know where I can find a repo for this artifact: > > >> > > >> com.github.stephenc.findbugs:findbugs-annotations:3.0.1-1 > > >> > > >> stephenc lists the Repositories here [1] but I can't find the latest > > >> release in those mentioned repos (i.e. here [2] or here [3]) > > >> > > >> I don't think we'll have this resolved for RC2, but I'm hoping that's > > >> okay > > >> because other projects depend on findbugs:jsr305 (i.e. hadoop and > fluo). > > >> > > >> --Aaron > > >> > > >> > > >> [1] > > >> > > http://stephenc.github.io/findbugs-annotations/ > distribution-management.html > > >> > > >> [2] > > >> > > https://oss.sonatype.org/content/repositories/releases/ > com/github/stephenc/findbugs/findbugs-annotations/ > > >> > > >> [3] > > >> > > https://repo.maven.apache.org/maven2/com/github/stephenc/ > findbugs/findbugs-annotations/ > > >> > > >> > > >
