[HADOOP-15992] JSON License is included in the transitive dependency of aliyun-sdk-oss 3.0.0

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 2.9.2
• Fix Version/s: 2.10.0, 3.2.0, 3.0.4, 3.1.2, 2.9.3
• Target Version/s: 2.10.0, 3.2.0, 3.0.4, 3.1.2, 2.9.3
• Hadoop Flags: Reviewed
• Assignee: Akira Ajisaka
• Reporter: Akira Ajisaka
• Created: 10/Dec/18 05:03
• Updated: 19/Mar/19 02:07
• Resolved: 05/Jan/19 08:52

Description

This is the output of mvn dependency:tree

[INFO] +- com.aliyun.oss:aliyun-sdk-oss:jar:3.0.0:compile
[INFO] |  +- org.jdom:jdom:jar:1.1:compile
[INFO] |  +- com.sun.jersey:jersey-json:jar:1.19:compile
[INFO] |  |  +- org.codehaus.jettison:jettison:jar:1.1:compile
[INFO] |  |  +- com.sun.xml.bind:jaxb-impl:jar:2.2.3-1:compile
[INFO] |  |  +- org.codehaus.jackson:jackson-core-asl:jar:1.9.13:compile
[INFO] |  |  +- org.codehaus.jackson:jackson-mapper-asl:jar:1.9.13:compile
[INFO] |  |  +- org.codehaus.jackson:jackson-jaxrs:jar:1.9.13:compile
[INFO] |  |  \- org.codehaus.jackson:jackson-xc:jar:1.9.13:compile
[INFO] |  +- com.aliyun:aliyun-java-sdk-core:jar:3.4.0:compile
[INFO] |  |  \- org.json:json:jar:20170516:compile

The license of org.json:json:jar:20170516:compile is JSON License, which cannot be included.
https://www.apache.org/legal/resolved.html#json

Issue Links

• is broken by: HADOOP-15759 AliyunOSS: update oss-sdk version to 3.0.0
• is related to: HADOOP-13794 JSON.org license is now CatX
• relates to: HADOOP-15671 AliyunOSS: Support Assume Roles in AliyunOSS