search

apache / incubator-pegasus

Apache Pegasus - A horizontally scalable, strongly consistent and high-performance key-value store
https://pegasus.apache.org/
Apache License 2.0
1.99k stars 312 forks source link

pegasus uses a non OSS friendly version of org.json:json jar #1919

Closed pjfanning closed 8 months ago

pjfanning commented 9 months ago

https://github.com/apache/incubator-pegasus/blob/af256941f4062c77377d05d379ebd7f9b4a327ee/java-client/pom.xml#L68

See https://www.apache.org/legal/resolved.html (JSON license section)

Could you upgrade to a newer version? And these versions have security fixes too.

Since late 2022, this jar is now properly in the public domain.

empiredan commented 8 months ago

https://github.com/apache/incubator-pegasus/blob/af256941f4062c77377d05d379ebd7f9b4a327ee/java-client/pom.xml#L68

See https://www.apache.org/legal/resolved.html (JSON license section)

Could you upgrade to a newer version? And these versions have security fixes too.

Since late 2022, this jar is now properly in the public domain.

Thanks @pjfanning ! Upgraded by https://github.com/apache/incubator-pegasus/pull/1781.