Non-free libraries on Maven Central?

Hello,

We white-list Maven Central so I thought it only contained FOSS libraries, but while working on rfp#352 (closed) I stumbled on this library that is not open source.

Does this mean we could have unknowingly used non-free libraries from this repository? (I suppose #319 would help here.)

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information