I have a need to use a version of xerces that that does not use xml-apis; there is some legacy code that does not play well with it.
I found the following which looks like it will do the trick.
<!-- https://mvnrepository.com/artifact/xerces/xercesImpl -->
<dependency>
<groupId>xerces</groupId>
<artifactId>xercesImpl</artifactId>
<version>2.11.0.SP5</version>
</dependency>
But I am not sure what the 'SP5' means. More specifically, I do not know if this can be trusted for a production system.
This is indeed a fork with fixes from JBoss community.