PicketLink use non free json.org

Hi,
Fedora [1] is a popular distribution of the Linux operating system, and
we wish to include the latest version of PicketLink [2] in our OS.
Fedora only contains Free and Open Source licensed works.

Your project is licensed under Apache License Version 2,
but your code use json.org under Douglas Crockford’s bad licence, and is non-free [3].
Such usage restriction makes the license incompatible with The Open Source Definition and
The Free Software Definition. Because PicketLink binary distribution includes this software,
it effectively becomes proprietary software itself.

You may also comment that the json.org license is valid for You but for many Linux distributions it is not acceptable.

Hoping in the future to be able to use PicketLink in Fedora, without having to run into this problem.

Please try to replace it with one of the many free alternatives.

Regards

[1] https://fedoraproject.org/wiki/Fedora_Project_Wiki
[2] https://bugzilla.redhat.com/show_bug.cgi?id=1346382

[3]
https://wiki.debian.org/qa.debian.org/jsonevil
http://www.sonatype.com/people/2012/03/use-json-well-youd-better-not-be-evil/
http://tanguy.ortolo.eu/blog/article46/json-license