-
Task
-
Resolution: Done
-
Medium
-
None
-
None
-
None
Needed to act on this mail from Steve Winslow:
Hello Bharath,
There is a finding from the Sonatype Nexus IQ scans that I wanted to highlight for your attention.
In the music/mdbc repo, it looks like the mysql-connector-java component is being used. This appears to be getting pulled in by the following two files: * /pom.xml
- /mdbc-server/pom.xml
mysql-connector-java is under the GPL license. Because of this, ONAP repos instead use the MariaDB connector, which is under the weaker copyleft LGPL license. Would you be able to arrange for music/mdbc to switch to the MariaDB connector instead?
Many thanks,
Steve
- mentioned in
-
Page Loading...