Frank, There is a note on the dependency wiki page about you checking to see if the XStream Library can be removed. I still see it in the repo.
It's a BSD license, so I don't think it's an issue. However, I don't want to add it to the NOTICE and LICENSE files unless we plan on keeping it for the 4.0 release. Thanks! -chip
