Hi, see 812630/816228 (also discussed with Roland): Security team would to drop jasper from stretch (and eventually from the archive). Some high-profile users like gdk-pixbuf already had it dropped some time ago.
Ok with the release team? Could you please setup a removal/transition tracker for this for easier tracking? Bugs would be filed with "important" severity and bumped to RC grade after some weeks so that autoremovals can work their magic for packages which hadn't been adapted by then. Cheers, Moritz