You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
In the hazelcast 5.3.2 jar, the THIRD-PARTY.txt file listing the license of the 3rd party components correctly lists JSON-java version 20230227 as being a public domain license (as seen in the official project directory here https://github.com/stleary/JSON-java/blob/20230227/LICENSE).
Indeed this JSON-java project changed its license from the JSON license to a "Public Domain" license back in version 20220924.
However, hazelcast 5.3.2 still includes the JSON license in the THIRD-PARTY.txt file, which it does not need to.
This triggers alarms on our licensing analysis tools, as our company forbids the use of anything using the JSON license. We will get a waiver, following our analysis, but it would be best to remove the JSON license from the file.
Expected behavior
We expect a THIRD-PARTY.txt file not containing the JSON license text.
To Reproduce
Just get the hazelcast-5.3.2.jar (for example from maven central), open it as a zip file to extract and view the THIRD-PARTY.txt file at the root. In this file, search for "JSON License", which will lead to the section that should be removed.
Additonnal Information
The text seems to come from the following source file:
hazelcast-build-utils/src/main/resources/hazelcast-thirdparty-template.ftl
The text was updated successfully, but these errors were encountered:
The JSON license was included for the `org.json` transitive dependency,
but that [no longer uses this
license](stleary/JSON-java#688).
Changes:
- Removed support for this license (so that the build will fail if
re-introduced)
- Removed license text from `thirdparty-template`
Fixeshazelcast#25343
Describe the bug
In the hazelcast 5.3.2 jar, the THIRD-PARTY.txt file listing the license of the 3rd party components correctly lists JSON-java version 20230227 as being a public domain license (as seen in the official project directory here https://github.com/stleary/JSON-java/blob/20230227/LICENSE).
Indeed this JSON-java project changed its license from the JSON license to a "Public Domain" license back in version 20220924.
However, hazelcast 5.3.2 still includes the JSON license in the THIRD-PARTY.txt file, which it does not need to.
This triggers alarms on our licensing analysis tools, as our company forbids the use of anything using the JSON license. We will get a waiver, following our analysis, but it would be best to remove the JSON license from the file.
Expected behavior
We expect a THIRD-PARTY.txt file not containing the JSON license text.
To Reproduce
Just get the hazelcast-5.3.2.jar (for example from maven central), open it as a zip file to extract and view the THIRD-PARTY.txt file at the root. In this file, search for "JSON License", which will lead to the section that should be removed.
Additonnal Information
The text seems to come from the following source file:
hazelcast-build-utils/src/main/resources/hazelcast-thirdparty-template.ftl
The text was updated successfully, but these errors were encountered: