License Violation by using VTD-XML

[jmkeil]

The package io.github.sparql-anything.sparql-anything-xml uses com.ximpleware.vtd-xml as a dependency. As com.ximpleware.vtd-xml is licensed under GPL-2.0-or-later and io.github.sparql-anything.sparql-anything-xml is licensed under Apache 2.0, this use as dependency is not permitted, according to Apache License v2.0 and GPL Compatibility. Further, all upstream projects that use io.github.sparql-anything.sparql-anything-xml and that are not licensed under a GPL-2.0-or-later compatible license break that license, too. Please consider to switch to another XML library with a compatible license to resolve this issue. For example, com.fasterxml.jackson.core.jackson-core is licensed under Apache 2.0.

Disclaimer 1: I am not a lawyer, but just an IT person who is trying to not mess up with licenses. So do not take this as a legal advice.

Disclaimer 2: I did not systematically check all io.github.sparql-anything.* dependencies. So do not take this as an indication that other dependencies are free of licensing issues.

[enridaga]

Thanks for the input. Indeed, we should solve this.