Created attachment 23299 [details] Patch to use the Geronimo version of the StAX API jar As mentioned in https://issues.apache.org/jira/browse/LEGAL-42, the licensing terms of the JSR 173 API jar (jsr173_1.0_api.jar) are a bit troublesome. There's an ALv2 version of the StAX API jar from the Apache Geronimo project. I suggest that we use that jar instead of the official JSR 173 jar to avoid licensing issues. Assuming we make this change, the JSR 173 entries in the proposed new LICENSE and NOTICE files in bug 46756 can be removed.
Applied in r747303. Yegor