There is a misleading information on the dependency page(http://velocity.apache.org/engine/releases/velocity-1.5/dependencies.html , These dependencies are required to compile and run the application) about oro.
"The most common case is the integration of the Velocity runtime into your application. In this case, you must add commons-collections, commons-lang and oro to your application (and optional logging if required). If you already have one or more of these libraries in your application, you should check if you need to update their versions. "
"These dependencies are required to compile and run the application"
Except if Velocity is configured to escape references, oro is not need it at runtime, only at compile time(most of the users don't care about compile time).