I'm using the javax.activation package in a project that is deployed as a monolithic jar. The mentioned package is licensed under CDDL 1.0 and up to now part of the Java distribution but is now deprecated in Java 9 and will be removed from Standard Edition in later versions.
To be future-proof, I'm including the standalone replacement project as dependency in my projects Maven configuration and would include the compiled code in my jar as not to introduce an obstacle to the intended users.
The javax.activation package license was no problem until now, because my jar only linked to the code in the Java distribution.
If I'm not able to release the source of my application, what are my options?
- Include the external code in my jar file
- Bundle my jar with the dependencies jar and distribute both as a zip file
- Only distribute my jar and let the users cope with getting the right dependencies themselfes
- Force the users to stay with up to Java 8
Edit: The package version on Github actually uses CDDL 1.1, while on mvnrepository.com it's listed as CDDL 1.0.