You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@felix.apache.org by Felix Meschberger <fm...@adobe.com> on 2016/10/28 08:08:24 UTC
json.org library use
Hi all
Over at legal-discuss there is a discussion of whether the json.org library with the amended MIT license (remember the „use for good not evil“ clause ?) should be „banned“ by reconsidering the „A“ rating of this license (assuming the clause is just a joke) and turning it into an „X“ rating (don’t use based on Debian’s and other’s considerations:
https://wiki.debian.org/qa.debian.org/jsonevil
https://www.cnet.com/news/dont-be-evil-google-spurns-no-evil-software/
It is not decided yet. But for the web console we should probably be prepared.
Plenty of alternatives exist: Jackson, GSon, and IMHO quite interesting javax.json (https://json-processing-spec.java.net/) with a RI from glassfish (https://jsonp.java.net/).
Assuming we would have to change things, I propose we reimplement the API of the json.org library with javax.json using the Glassfish RI.
WDYT ?
Regards
Felix
Re: json.org library use
Posted by Neil Bartlett <nj...@gmail.com>.
The Maven artefact "org.robolectric:android-all" seems to provide that package, along with unfortunately the entire of the rest of Android.
It’s quite difficult to find because most searches yield the original Crockford library.
Neil
> On 30 Oct 2016, at 10:05, Carsten Ziegeler <cz...@apache.org> wrote:
>
> Neil Bartlett wrote
>> The Debian page on this issue links to a cleanroom implementation of the
>> same api, from Android:
>> https://android.googlesource.com/platform/libcore/+log/master/json
>>
>> Could this be used in the web console to avoid breaking changes?
>>
> Interesting, thanks Neal.
> Yes, I think that could definitely help, do you know if there is an
> artifact in maven central with that lib?
>
> Regards
>
> Carsten
>
> --
> Carsten Ziegeler
> Adobe Research Switzerland
> cziegeler@apache.org
>
Re: json.org library use
Posted by Carsten Ziegeler <cz...@apache.org>.
Neil Bartlett wrote
> The Debian page on this issue links to a cleanroom implementation of the
> same api, from Android:
> https://android.googlesource.com/platform/libcore/+log/master/json
>
> Could this be used in the web console to avoid breaking changes?
>
Interesting, thanks Neal.
Yes, I think that could definitely help, do you know if there is an
artifact in maven central with that lib?
Regards
Carsten
--
Carsten Ziegeler
Adobe Research Switzerland
cziegeler@apache.org
Re: json.org library use
Posted by Neil Bartlett <nj...@gmail.com>.
The Debian page on this issue links to a cleanroom implementation of the
same api, from Android:
https://android.googlesource.com/platform/libcore/+log/master/json
Could this be used in the web console to avoid breaking changes?
Neil
On 28 Oct 2016 12:46 p.m., "Carsten Ziegeler" <cz...@apache.org> wrote:
> Felix Meschberger wrote
> > Hi all
> >
> > Over at legal-discuss there is a discussion of whether the json.org
> library with the amended MIT license (remember the „use for good not evil“
> clause ?) should be „banned“ by reconsidering the „A“ rating of this
> license (assuming the clause is just a joke) and turning it into an „X“
> rating (don’t use based on Debian’s and other’s considerations:
> >
> > https://wiki.debian.org/qa.debian.org/jsonevil
> > https://www.cnet.com/news/dont-be-evil-google-spurns-no-evil-software/
> >
> > It is not decided yet. But for the web console we should probably be
> prepared.
> >
> > Plenty of alternatives exist: Jackson, GSon, and IMHO quite interesting
> javax.json (https://json-processing-spec.java.net/) with a RI from
> glassfish (https://jsonp.java.net/).
> >
> > Assuming we would have to change things, I propose we reimplement the
> API of the json.org library with javax.json using the Glassfish RI.
> >
> > WDYT ?
> >
> I think the biggest challenge is the web console - where we have usage
> of json.org in the API, so we can't replace that without breaking the API.
> Those methods are deprecated for quiet some time, but removing them
> would require to bump the major version.
>
> Carsten
>
>
>
> --
> Carsten Ziegeler
> Adobe Research Switzerland
> cziegeler@apache.org
>
>
Re: json.org library use
Posted by Carsten Ziegeler <cz...@apache.org>.
Felix Meschberger wrote
> Hi all
>
> Over at legal-discuss there is a discussion of whether the json.org library with the amended MIT license (remember the \u201euse for good not evil\u201c clause ?) should be \u201ebanned\u201c by reconsidering the \u201eA\u201c rating of this license (assuming the clause is just a joke) and turning it into an \u201eX\u201c rating (don\u2019t use based on Debian\u2019s and other\u2019s considerations:
>
> https://wiki.debian.org/qa.debian.org/jsonevil
> https://www.cnet.com/news/dont-be-evil-google-spurns-no-evil-software/
>
> It is not decided yet. But for the web console we should probably be prepared.
>
> Plenty of alternatives exist: Jackson, GSon, and IMHO quite interesting javax.json (https://json-processing-spec.java.net/) with a RI from glassfish (https://jsonp.java.net/).
>
> Assuming we would have to change things, I propose we reimplement the API of the json.org library with javax.json using the Glassfish RI.
>
> WDYT ?
>
I think the biggest challenge is the web console - where we have usage
of json.org in the API, so we can't replace that without breaking the API.
Those methods are deprecated for quiet some time, but removing them
would require to bump the major version.
Carsten
--
Carsten Ziegeler
Adobe Research Switzerland
cziegeler@apache.org
Re: json.org library use
Posted by Achim Nierbeck <bc...@googlemail.com>.
AFAIK there is even an Apache JSon lib available.
Johnson.apache.org
Regards, Achim
Am Freitag, 28. Oktober 2016 schrieb Felix Meschberger :
> Hi all
>
> Over at legal-discuss there is a discussion of whether the json.org
> library with the amended MIT license (remember the „use for good not evil“
> clause ?) should be „banned“ by reconsidering the „A“ rating of this
> license (assuming the clause is just a joke) and turning it into an „X“
> rating (don’t use based on Debian’s and other’s considerations:
>
> https://wiki.debian.org/qa.debian.org/jsonevil
> https://www.cnet.com/news/dont-be-evil-google-spurns-no-evil-software/
>
> It is not decided yet. But for the web console we should probably be
> prepared.
>
> Plenty of alternatives exist: Jackson, GSon, and IMHO quite interesting
> javax.json (https://json-processing-spec.java.net/) with a RI from
> glassfish (https://jsonp.java.net/).
>
> Assuming we would have to change things, I propose we reimplement the API
> of the json.org library with javax.json using the Glassfish RI.
>
> WDYT ?
>
> Regards
> Felix
--
Apache Member
Apache Karaf <http://karaf.apache.org/> Committer & PMC
OPS4J Pax Web <http://wiki.ops4j.org/display/paxweb/Pax+Web/> Committer &
Project Lead
blog <http://notizblog.nierbeck.de/>
Co-Author of Apache Karaf Cookbook <http://bit.ly/1ps9rkS>
Software Architect / Project Manager / Scrum Master