Out of date dependencies difficult to manage

Adding FOP 1.1 by Maven says it requires Avalon 4.2.0 which is no longer provided by Maven. A suggestion is to add an exclusion for Avalon and include 4.3.1 which works.

Requires commons-logging-1.0.4 and breaks if you try to use commons-logging-1.1.1 which seems to be a stable version provided by most containers.

Finally any attempt to move all the dependencies into TomEE container "endorsed" directory to avoid massive war files results in FOP not functioning properly.