Scott,
We already had approval for javax.json-api 1.0 (line 25 in the SS) -- if we didn't have this, then neither MP 1.0 nor 1.1 would have worked. :-) I see that you piggybacked on top of the CQ that I had gotten approval for. There is no need to submit CQs for existing usage by the wider MP community. So, even though another component of MP used javax-json-api previously and now JWT wants to use it, we don't need another CQ. One CQ per dependency for the whole MP usage is sufficient.
One thing to point out is that the dependencies we use and ship with our API (runtime) require individual CQs. The dependencies that we use for testing (ie. arguillian, junit, etc) can be bundled. This differentiation was doc'd in column G (Usage) of the SS.
Like I mentioned, I plan to start comparing and scanning our dependencies today. If you have input for your respective components, just feed them my way. Or, you can open your own CQs.
BTW,
here's a query that will show all of the CQs active for the MicroProfile project. Currently, we have your json-api CQ and Config 1.1 CQ.
Thanks, Kevin