The license of cargo itself and cargo-core-uberjar is Apache License 2.0 but the cargo-core-uberjar artifact contains files having LGPL license (coming transitively from JOnAs through repackaging):
I'm afraid that also code contained in cargo-core-uberjar-1.7.5-sources.jar/org/ow2/jonas/tools/configurator/configurator-impl.jar is covered by LGPL.
IANAL but if a library contains some LGPL code then the library must be either under GPL or LGPL. In any case, current state is wrong.
I see following options how this can be fixed:
LGPL code is removed from the uberjar, dependency is made optional for those who need it
JOnAs code re-used in Cargo is updated to Apache License 2.0 (or anything compatible with it)
LGPL is applied to cargo-core-uberjar
I prefer going with option 1). Going with option 3) would not allow me to use cargo in my project.