Details

    • Type: Task
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 1.11.0
    • Fix Version/s: 1.12.0
    • Component/s: None
    • Labels:

      Description

      Apache Drill has dependencies on json.org lib indirectly from two libraries:
      com.mapr.hadoop:maprfs:jar:5.2.1-mapr
      com.mapr.fs:mapr-hbase:jar:5.2.1-mapr

      [INFO] org.apache.drill.contrib:drill-format-mapr:jar:1.12.0-SNAPSHOT
      [INFO] +- com.mapr.hadoop:maprfs:jar:5.2.1-mapr:compile
      [INFO] |  \- org.json:json:jar:20080701:compile
      [INFO] \- com.mapr.fs:mapr-hbase:jar:5.2.1-mapr:compile
      [INFO]    \- (org.json:json:jar:20080701:compile - omitted for duplicate)
      

      Need to make sure we won't have any dependencies from these libs to org.json:json lib and ban this lib in main pom.xml file.

      Issue is critical since Apache release won't happen until we make sure org.json:json lib is not used (https://www.apache.org/legal/resolved.html).

        Attachments

        1. image.png
          2 kB
          David Capwell

          Issue Links

            Activity

              People

              • Assignee:
                vrozov Vlad Rozov
                Reporter:
                arina Arina Ielchiieva
                Reviewer:
                Paul Rogers
              • Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: