Skip to content

fail because of forbidden licenses on dual licensed dependency with one license on whitelist and the other on blacklist #533

Open
@TorstenKruse

Description

We get the following error on our build.
The jakarta.annotation:jakarta.annotation-api is dual licensed with EPL 2.0 and GPL with classpath exception. We have EPL 2.0 on our blacklist and the other on a whitelist (customer requirement).

Why does it fail instead of using the whitelisted license?

Perhaps it matters that we have the full name of the GPL with cpe on our whitelist and the naming "GPL2 w/ CPE" which jakarta.annotation:jakarta.annotation-api uses is just an alias in the license merges file? As long as just one of dual license is on whitelist and the other license is not mentioned, it used to work. Only if the other is blacklisted, it break the build.

[WARNING] There are 1 forbidden licenses used:
[WARNING] License: 'Eclipse Public License Version 2.0' used by 1 dependencies:
-Jakarta Annotations API (jakarta.annotation:jakarta.annotation-api:1.3.5 - https://projects.eclipse.org/projects/ee4j.ca)
[ERROR] Failed to execute goal org.codehaus.mojo:license-maven-plugin:2.3.0:add-third-party (default-cli) on project xy-ng:
There are some forbidden licenses used, please check your dependencies.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions