With YARN Federation, we added
YARN-3672, which adds the following to
This third-party library has some murky license history, as documented in this really long comment thread. The summary of the thread is that "the library is officially APL (take our word for it), but there hasn't been a subsequent release with the license file change".
LEGAL-325 has been filed to discuss the validity of this license for Apache.
Before we get to final Hadoop 3 release, I'm wondering if anyone else has concerns about using this library. Just from looking at the various javax Maven artifacts in our pom.xml files, I see a lot of other javax.* library entries (although we may not ship the .jars if they're part of the Java runtime).