Paul Galagher had suggestions to change some upstream artefacts to RedHat productized, its not fixed in ER3 BOM:

Hi,

I was looking over you bom for the release and noticed that there is a lot of versions that could be changed to redhat ones.

It maybe that they are just build requirements as I don't know your runtime, so just ignore me if you think I am wrong .

One that stood out is org.javassist.javassist 3.20.0-GA just because I built that from source for Vertx so it is available, then there is the keycloak adapters which you can find in https://brewweb.engineering.redhat.com/brew/buildinfo?buildID=544759, the fasterxml artifacts 2.8.3, if you change to use 2.8.6 then you get all the redhat version that EAP built, the org.apache.tomcat.tomcat-juli can be found in https://brewweb.engineering.redhat.com/brew/buildinfo?buildID=571139, there is quite a bit there that I think is runtime that could be realigned to redhat versions or should be built from source.

I also took a look over the license xml and html and the html has a local link to 'The W3C License' which is a zip file which contains java, this is a bit stange, whichever plugin you are using to download the license is doing something strange with that one. When I generate I manually get the license text and put it in a local file in my project and use an xsl to translate the local link to point to the named file I downloaded, its a bit of work the firist time you have to do it but after that it automatically generates

Also the plugin grabs the entire html, there is a copyrighted logos on the MIT License, I don't know the implications of this but I doubt we should be distributing it.

I have not gone thru everything these are just a couple I found.

–
Regards
Paul Gallagher
Red Hat