1. [oai.viewer:restful] uses xom extensively ... replace with jdom.
2. [oai.viewer:scimpi]'s pom.xml references org.owasp.esapi:esapi, which in turn has a transitive dependency on xom. However, the esapi is not (does not seem to be) used, so can safely remove
3. [oai.viewer:bdd-concordion] uses org.concordion:concordion, which in turn has a transitive dependency on xom. For this, mark the dependency as excluded, and require end-users to explicitly include the reference to XOM in their own pom files. Also update the archetype source so that it has this direct dependency set up for users.