This matrix lists any dependencies that have weight in determining how to license this repo and resulting binaries.
| Dependency | License |
|---|---|
| javax.servlet-api | CDDL GPL 2.0 (Part of the Java spec, so doesn't create an issue with licensing the repo/binary as Apache 2.0) |
| javax.servlet.jsp:javax.servlet.jsp-api | CDDL GPL 2.0 (Part of the Java spec, so doesn't create an issue with licensing the repo/binary as Apache 2.0) |
| javax.servlet:jstl:1.2 | CDDL GPL 2.0 (Part of the Java spec, so doesn't create an issue with licensing the repo/binary as Apache 2.0) |
| commons-httpclient:commons-httpclient:3.1 | Apache 2.0 |
| commons-beanutils:commons-beanutils*** | Apache 2.0 |
| commons-codec:commons-codec:1.7*** | Apache 2.0 |
| commons-discovery:0.5*** | Apache 2.0 |
| log4j | Apache 2.0 |
| org.apache.cxf:cxf-bundle | Apache 2.0 |
| com.fasterxml.jackson.core:jackson-databind:2.3.4 | Apache 2.0, LGPL 2.1 (Just Apache 2.0 in later versions) Plan to upgrade to the later version so it's only Apache 2.0 |
| com.fasterxml.jackson.core:jackson-core:2.3.4*** | Apache 2.0, LGPL 2.1 (Just Apache 2.0 in later versions) Plan to upgrade to the later version so it's only Apache 2.0 |
| org.codehaus.woodstox:woodstox-core-asl:4.2.0*** | Apache 2.0 |
| org.codehaus.woodstox:stax2-api:3.1.3*** | BSD 2-clause |
| stax:stax-api:1.0.1 | Apache 2.0 |
| org.apache.struts:struts-core:1.3.10 | Apache 2.0 |
| org.apache.struts:struts-taglib:1.3.10 | Apache 2.0 |
| org.apache.tomcat.embed:tomcat-embed-core:8.0.42 | Apache 2.0 |
| org.apache.tomcat.embed:tomcat-embed-logging-juli:8.0.42 | Apache 2.0 |
| org.apache.tomcat.embed:tomcat-embed-jasper:8.0.42 | Apache 2.0 |
| com.bmuschko.tomcat:gradle-tomcat-plugin:2.5 | Apache 2.0 |
| com.google.guava:guava:23.0 | Apache 2.0 |
| junit:junit:4.12 | EPL 1.0 (EPL 2.0 in later versions) |
| org.apache.axis2:axis2:1.6.2*** | Apache 2.0 |
| org.slf4j:slf4j-api:1.6.1*** | MIT |
| org.apache.neethi:neethi (closed-source version unknown) *** | Apache (Apache 2.0 in later versions) |
| org.apache.ws.xmlschema:xmlschema-core (closed-source version unknown) *** | Apache 2.0 |
| Proguard (closed-source version unknown) *** | GPL 2.0 (Only used during the build phase - not included in the source or binary, so OK for Apache 2.0) |
| xalan:xalan (closed-source version unknown) *** | Apache (Apache 2.0 in later versions) |
| bb-taglib | ? |
| bb-platform | ? |
| bb-cms-admin | ? |
Note: *** means the dependency was in the closed-source version, but hasn't been used in the open-source version yet.