Yes - I also think the situation is analogous to TinyXML. I can add it to opm-parser as a not required dependency; and if it is not found opm-parser will build it - that is OK.

However when it comes to opm-core the dependency on cJSON is Required; I guess that detail will be lost that way? But of course we should be able to trust that the opm-parser build system has indeed worked....