The spnego team is serious about quality. If one user is having a problem, it probably means others are too, or will have. The spnego team use spnego themselves in production. Every effort will be made to provide fixes for serious production problems as soon as possible. These will be committed to trunk. From there an affected user can apply the fix to their own branch.
Glassfish uses CDDL v1.0. To enable simple inclusion and packaging with Glassfish, spnego uses the same license.