Hi, as discussed with Stefan Seifert on SLING-6685, we would like to move the JSONUtil class out of the o.a.s.xss package into a separate sub package (o.a.s.xss.json).
Right now, it introduces a dependency on the javax.json package for the o.a.s.xss package. That is the reason we have to bump the version to 2.0.0 due to the commons.json removable. If we move it into its own package we wouldn't have to do that if we every switch json providers again :-). As we are bumping the major version anyways, I don't think this is a big deal - hence, I'm calling for lazy consensus (in other words, if you object, speak up now). regards, Karl -- Karl Pauls karlpa...@gmail.com