We have an dependency to drools-compiler (Version 7.19.0.Final) in one of our microservices:
// Drools Compiler :: https://mvnrepository.com/artifact/org.drools/drools-compiler libraryDependencies += "org.drools" % "drools-compiler" % "7.19.0.Final"
According to the Maven website the license of this component is Apache 2.0.
In pom.xml drools-compiler includes a component called Eclipse JDT Core Batch Compiler (Eclipse ECJ) in Version 4.6.1.
<dependency> <groupId>org.eclipse.jdt</groupId> <artifactId>ecj</artifactId> </dependency>
The license of "Eclipse ECJ" is EPL-1.0. This license is on the blacklist of our compliance tool. Therefore we have an compliance issue.
I have to questions to the contributors of drools-compiler:
- Can you explain why it is correct to use "Eclipse ECJ" which is under EPL-1.0 license in drools-compiler which is under Apache 2.0 license?
- Why is there no copy left effect of "Eclispe ECJ" infecting drools-compiler?
Thank you for your reply in advance!