In addition to fixing the trove4j dependency, if anyone knows how to get a report of all dependency licenses, it would be good to double-check the rest of the YTEX dependencies to make sure there aren't other issues.
On Wed, Oct 15, 2014 at 10:42 AM, Chen, Pei <pei.c...@childrens.harvard.edu> wrote: > Steve, > This is a good catch! I was pretty sure 3rd party libs were checked but > somehow this may have been missed. > I noticed it's in the convenience binary distro as well. We need to remove > this; I'll create a Jira. > VJ, could you confirm- I actually don't think we use trove4j in ytex? > ctakes-ytex/pom.xml > > --Pei > >> -----Original Message----- >> From: Steven Bethard [mailto:steven.beth...@gmail.com] >> Sent: Wednesday, October 15, 2014 10:40 AM >> To: dev@ctakes.apache.org >> Subject: YTEX depends on trove4j? LGPL issue >> >> It seems that YTEX depends on trove4j which is LGPL [1], but "LGPL-licensed >> works must not be included in Apache products" [2]. >> Have the YTEX dependencies been reviewed for licensing issues? (I only >> stumbled upon the trove issue via a version conflict in other code.) >> >> Steve >> >> [1] http://trove4j.sourceforge.net/html/license.html >> [2] http://www.apache.org/legal/resolved.html