Details
-
Bug
-
Status: Resolved
-
Medium
-
Resolution: Won't Do
-
Nitrogen SR3, Fluorine SR2
-
None
-
None
-
None
-
vanilla fluorine SR2
Description
The vanilla Fluorine SR2[but also Nitrogen SR3] distribution has a dependency on **https://mvnrepository.com/artifact/javax.websocket/javax.websocket-api/1.1 . This particular artifact has a CDDL 1.1 + GPL 2.0 license, whose description is just a broken link https://glassfish.java.net/public/CDDL+GPL_1_1.html
Can the distribution be used in a commercial product? How can someone know without any available licence information?
Details:
javax.websocket-api/1.1
required by
./system/org/ops4j/pax/web/pax-web-features/6.0.11/pax-web-features-6.0.11-features.xml
required by
./system/org/apache/karaf/features/standard/4.1.7/standard-4.1.7-features.xml
which is installed when the distribution starts up.
