search

apache / openwhisk-devtools

Development tools for building and deploying Apache OpenWhisk
https://openwhisk.apache.org/
Apache License 2.0
180 stars 126 forks source link

OpenWhisk uses a non-OSS friendly version of org.json:json jar #362

Open pjfanning opened 9 months ago

pjfanning commented 9 months ago

https://github.com/apache/openwhisk-devtools/blob/5801dc226ddbae7bea2752991dbb0d5e2884dc8f/knative-build/runtimes/java/WhiskSim/pom.xml#L53

See https://www.apache.org/legal/resolved.html (JSON license section)

Could you upgrade to a newer version? And these versions have security fixes too.

Since late 2022, this jar is now properly in the public domain.

dgrove-oss commented 9 months ago

The knative-build part of this repo was experimental and isn't actively maintained. Most likely the right thing is just to remove it entirely.