[DRILL-5917] Ban org.json:json library in Drill

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.11.0
• Fix Version/s: 1.12.0
• Labels: ready-to-commit
• Assignee: Vlad Rozov
• Reporter: Arina Ielchiieva
• Reviewer: Paul Rogers
• Created: 31/Oct/17 15:39
• Updated: 27/Apr/18 23:11
• Resolved: 22/Nov/17 22:55

Description

Apache Drill has dependencies on json.org lib indirectly from two libraries:
com.mapr.hadoop:maprfs:jar:5.2.1-mapr
com.mapr.fs:mapr-hbase:jar:5.2.1-mapr

[INFO] org.apache.drill.contrib:drill-format-mapr:jar:1.12.0-SNAPSHOT
[INFO] +- com.mapr.hadoop:maprfs:jar:5.2.1-mapr:compile
[INFO] |  \- org.json:json:jar:20080701:compile
[INFO] \- com.mapr.fs:mapr-hbase:jar:5.2.1-mapr:compile
[INFO]    \- (org.json:json:jar:20080701:compile - omitted for duplicate)

Need to make sure we won't have any dependencies from these libs to org.json:json lib and ban this lib in main pom.xml file.

Issue is critical since Apache release won't happen until we make sure org.json:json lib is not used (https://www.apache.org/legal/resolved.html).

Issue Links

• links to: GitHub Pull Request #1031