New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OpenWhisk uses a non-OSS friendly version of org.json:json jar #362

Open

pjfanning opened this issue Feb 23, 2024 · 1 comment

pjfanning commented Feb 23, 2024

openwhisk-devtools/knative-build/runtimes/java/WhiskSim/pom.xml

Line 53 in 5801dc2

<version>20190722</version>

See https://www.apache.org/legal/resolved.html (JSON license section)

Could you upgrade to a newer version? And these versions have security fixes too.

Since late 2022, this jar is now properly in the public domain.

Member

dgrove-oss commented Feb 23, 2024

The knative-build part of this repo was experimental and isn't actively maintained. Most likely the right thing is just to remove it entirely.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment