Apache License 2.0 for Jackson 2.0 and later. Jackson 1.x was dual licensed so that user could choose either Apache License 2.0 or LGPL 2.1

Some projects use (and require use of) per-file comment header which indicates license details and copyright assignments. Jackson project does not do this: we believe this is redundant and serves no useful purpose. Instead, the license information is contained in multiple places:

• In src/main/resources/META-INF/LICENSE, so that it gets included in
  • Binary (jar)
  • Source archives (jar / zip)
• pom.xml of the project (in some case parent pom)
• Included in project Wiki pages

Yes! Starting with version 2.10 (released around end of September 2019), primary mechanism is through Tidelift subscriptions. You can subscribe to any number of Jackson components, and each component repo links to specific subscription: most common one being Tidelift subscription for 'jackson-databind'