diff --git a/NOTICE b/NOTICE index 540343197a8e5985bc2132ec3dd3b5b9baa249b6..57f4349896d27dd15d77651b7bf11ae44fe20db1 100644 --- a/NOTICE +++ b/NOTICE @@ -2,13 +2,6 @@ Generated by fossa-cli (https://github.com/fossas/fossa-cli). This software includes the following software and licenses: -======================================================================== -AML -======================================================================== -The following software have components provided under the terms of this license: - -- SnakeYAML (from http://www.snakeyaml.org) - ======================================================================== Apache-2.0 ======================================================================== @@ -20,18 +13,18 @@ The following software have components provided under the terms of this license: - ASM based accessors helper used by json-smart (from ) - AWS Event Stream (from https://github.com/awslabs/aws-eventstream-java) - AWS Java SDK :: AWS Core (from https://aws.amazon.com/sdkforjava) -- AWS Java SDK :: Annotations (from ) +- AWS Java SDK :: Annotations (from https://repo1.maven.org/maven2/software/amazon/awssdk/annotations) - AWS Java SDK :: Auth (from https://aws.amazon.com/sdkforjava) - AWS Java SDK :: Core :: Protocols :: AWS Json Protocol (from https://aws.amazon.com/sdkforjava) - AWS Java SDK :: Core :: Protocols :: Protocol Core (from https://aws.amazon.com/sdkforjava) -- AWS Java SDK :: HTTP Client Interface (from ) -- AWS Java SDK :: HTTP Clients :: Apache (from ) -- AWS Java SDK :: HTTP Clients :: Netty Non-Blocking I/O (from ) +- AWS Java SDK :: HTTP Client Interface (from https://repo1.maven.org/maven2/software/amazon/awssdk/http-client-spi) +- AWS Java SDK :: HTTP Clients :: Apache (from https://repo1.maven.org/maven2/software/amazon/awssdk/apache-client) +- AWS Java SDK :: HTTP Clients :: Netty Non-Blocking I/O (from https://repo1.maven.org/maven2/software/amazon/awssdk/netty-nio-client) - AWS Java SDK :: Profiles (from https://aws.amazon.com/sdkforjava) -- AWS Java SDK :: Regions (from ) +- AWS Java SDK :: Regions (from https://repo1.maven.org/maven2/software/amazon/awssdk/regions) - AWS Java SDK :: SDK Core (from https://aws.amazon.com/sdkforjava) - AWS Java SDK :: Services :: AWS Simple Systems Management (SSM) (from https://aws.amazon.com/sdkforjava) -- AWS Java SDK :: Utilities (from ) +- AWS Java SDK :: Utilities (from https://repo1.maven.org/maven2/software/amazon/awssdk/utils) - AWS Java SDK for AWS Elemental MediaLive (from https://aws.amazon.com/sdkforjava) - AWS Java SDK for AWS KMS (from https://aws.amazon.com/sdkforjava) - AWS Java SDK for AWS Lambda (from https://aws.amazon.com/sdkforjava) @@ -45,102 +38,92 @@ The following software have components provided under the terms of this license: - AWS Java SDK for Amazon SQS (from https://aws.amazon.com/sdkforjava) - AWS Java SDK for the AWS Simple Systems Management (SSM) Service (from https://aws.amazon.com/sdkforjava) - AWS SDK for Java - Core (from https://aws.amazon.com/sdkforjava) -- Adapter: RxJava (from ) -- Apache Commons Codec (from http://commons.apache.org/proper/commons-codec/) -- Apache Commons Collections (from http://commons.apache.org/proper/commons-collections/) +- Adapter: RxJava (from https://repo1.maven.org/maven2/com/squareup/retrofit2/adapter-rxjava) +- Apache Commons Codec (from https://commons.apache.org/proper/commons-codec/) +- Apache Commons Collections (from https://commons.apache.org/proper/commons-collections/) - Apache Commons Lang (from http://commons.apache.org/proper/commons-lang/) - Apache Commons Logging (from http://commons.apache.org/proper/commons-logging/) - Apache Commons Logging (from http://commons.apache.org/proper/commons-logging/) - Apache Geronimo JMS Spec 2.0 (from http://geronimo.apache.org/maven/${siteId}/${version}) - Apache HttpAsyncClient (from http://hc.apache.org/httpcomponents-asyncclient) - Apache HttpClient (from http://hc.apache.org/httpcomponents-client) -- Apache HttpClient (from http://hc.apache.org/httpcomponents-client) -- Apache HttpClient Cache (from http://hc.apache.org/httpcomponents-client) - Apache HttpClient Cache (from http://hc.apache.org/httpcomponents-client) - Apache HttpCore (from http://hc.apache.org/httpcomponents-core-ga) -- Apache HttpCore (from http://hc.apache.org/httpcomponents-core-ga) -- Apache HttpCore NIO (from http://hc.apache.org/httpcomponents-core-ga) - Apache HttpCore NIO (from http://hc.apache.org/httpcomponents-core-ga) -- Apache Log4j API (from ) -- Apache Log4j Core (from ) -- Apache Log4j JUL Adapter (from ) -- Apache Log4j SLF4J Binding (from ) +- Apache Log4j API (from https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-api) +- Apache Log4j Core (from https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-core) +- Apache Log4j JUL Adapter (from https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-jul) +- Apache Log4j SLF4J Binding (from https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-slf4j-impl) - Apache Log4j to SLF4J Adapter (from ) -- AssertJ fluent assertions (from ) +- AssertJ fluent assertions (from https://repo1.maven.org/maven2/org/assertj/assertj-core) - Asynchronous Http Client (from ) - Asynchronous Http Client Netty Utils (from ) - Azure Spring Boot Starter for Azure AD Spring Security Integration (from https://github.com/Azure/azure-sdk-for-java) - Bean Validation API (from http://beanvalidation.org) - Brave Instrumentation: Http Adapters (from ) - Brave instrumentation for Reactor Netty HTTP (from https://github.com/reactor/reactor-netty) -- Byte Buddy (without dependencies) (from ) -- Byte Buddy Java agent (from ) +- Byte Buddy (without dependencies) (from https://repo1.maven.org/maven2/net/bytebuddy/byte-buddy) +- Byte Buddy Java agent (from https://repo1.maven.org/maven2/net/bytebuddy/byte-buddy-agent) - ClassMate (from http://github.com/cowtowncoder/java-classmate) -- Commons IO (from http://commons.apache.org/io/) -- Converter: Jackson (from ) +- Converter: Jackson (from https://repo1.maven.org/maven2/com/squareup/retrofit2/converter-jackson) - Core functionality for the Reactor Netty library (from https://github.com/reactor/reactor-netty) - Elastic JNA Distribution (from https://github.com/java-native-access/jna) -- Elasticsearch: 5.0.0-alpha5 (from https://github.com/elastic/elasticsearch) - Expression Language 3.0 (from https://projects.eclipse.org/projects/ee4j.el) +- Expression Language 3.0 (from http://uel.java.net) - FindBugs-jsr305 (from http://findbugs.sourceforge.net/) -- Google APIs Client Library for Java (from ) -- Google HTTP Client Library for Java (from https://github.com/google/google-http-java-client.git) -- Google OAuth Client Library for Java (from ) +- Google APIs Client Library for Java (from https://repo1.maven.org/maven2/com/google/api-client/google-api-client) +- Google Cloud Common Protos for Java (from https://github.com/googleapis/common-protos-java) +- Google HTTP Client Library for Java (from https://repo1.maven.org/maven2/com/google/http-client/google-http-client) +- Google OAuth Client Library for Java (from https://repo1.maven.org/maven2/com/google/oauth-client/google-oauth-client) - Gson (from https://github.com/google/gson) - Gson (from https://github.com/google/gson) -- Guava InternalFutureFailureAccess and InternalFutures (from ) -- Guava: Google Core Libraries for Java (from https://github.com/google/guava.git) -- HPPC Collections (from http://labs.carrotsearch.com) +- Guava InternalFutureFailureAccess and InternalFutures (from https://repo1.maven.org/maven2/com/google/guava/failureaccess) +- Guava: Google Core Libraries for Java (from https://repo1.maven.org/maven2/com/google/guava/guava) +- HPPC Collections (from https://repo1.maven.org/maven2/com/carrotsearch/hppc) - HTTP functionality for the Reactor Netty library (from https://github.com/reactor/reactor-netty) - Hibernate Validator Engine (from ) - Hibernate Validator Engine (from ) -- Hibernate Validator Engine (from ) - IBM COS Java SDK for Amazon S3 (from https://github.com/ibm/ibm-cos-sdk-java) - IBM COS Java SDK for COS KMS (from https://github.com/ibm/ibm-cos-sdk-java) - IBM COS SDK For Java (from https://github.com/ibm/ibm-cos-sdk-java) - IBM COS SDK for Java - Core (from https://github.com/ibm/ibm-cos-sdk-java) +- IO (from http://jakarta.apache.org/commons/${pom.artifactId.substring(8)}/) - Identity and Access Management (IAM) API v1-rev247-1.23.0 (from ) - IntelliJ IDEA Annotations (from http://www.jetbrains.org) - J2ObjC Annotations (from https://github.com/google/j2objc/) - JBoss Logging 3 (from http://www.jboss.org) -- JBoss Logging 3 (from http://www.jboss.org) +- JBoss Threads (from ) - JCIP Annotations under Apache License (from http://stephenc.github.com/jcip-annotations) - JMES Path Query library (from https://aws.amazon.com/sdkforjava) -- JSON Small and Fast Parser (from http://www.minidev.net/) +- JSON Small and Fast Parser (from https://repo1.maven.org/maven2/net/minidev/json-smart) - JSON Web Token support for the JVM (from https://github.com/jwtk/jjwt.git) - JSON library from Android SDK (from http://developer.android.com/sdk) - JSONassert (from https://github.com/skyscreamer/JSONassert) -- Jackson 2 extensions to the Google HTTP Client Library for Java. (from https://github.com/google/google-http-java-client.git/google-http-client-jackson2) -- Jackson dataformat: CBOR (from http://github.com/FasterXML/jackson-dataformats-binary) +- Jackson 2 extensions to the Google HTTP Client Library for Java. (from https://repo1.maven.org/maven2/com/google/http-client/google-http-client-jackson2) - Jackson dataformat: CBOR (from http://github.com/FasterXML/jackson-dataformats-binary) -- Jackson datatype: JSR310 (from http://wiki.fasterxml.com/JacksonModuleJSR310) -- Jackson datatype: JSR310 (from http://wiki.fasterxml.com/JacksonModuleJSR310) -- Jackson-annotations (from http://github.com/FasterXML/jackson) -- Jackson-annotations (from http://github.com/FasterXML/jackson) -- Jackson-core (from https://github.com/FasterXML/jackson-core) -- Jackson-core (from https://github.com/FasterXML/jackson-core) -- Jackson-dataformat-Smile (from http://github.com/FasterXML/jackson-dataformat-smile) -- Jackson-dataformat-Smile (from http://github.com/FasterXML/jackson-dataformat-smile) +- Jackson dataformat: Smile (from http://github.com/FasterXML/jackson-dataformats-binary) +- Jackson datatype: JSR310 (from https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jsr310) +- Jackson datatype: jdk8 (from https://repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jdk8) +- Jackson module: Afterburner (from https://github.com/FasterXML/jackson-modules-base) +- Jackson module: JAXB-annotations (from http://github.com/FasterXML/jackson-module-jaxb-annotations) +- Jackson-annotations (from http://wiki.fasterxml.com/JacksonHome) +- Jackson-core (from http://wiki.fasterxml.com/JacksonHome) +- Jackson-core (from http://wiki.fasterxml.com/JacksonHome) - Jackson-dataformat-XML (from http://wiki.fasterxml.com/JacksonExtensionXmlDataBinding) -- Jackson-dataformat-YAML (from https://github.com/FasterXML/jackson) -- Jackson-dataformat-YAML (from https://github.com/FasterXML/jackson) +- Jackson-dataformat-YAML (from https://github.com/FasterXML/jackson-dataformats-text) - Jackson-datatype-Joda (from http://wiki.fasterxml.com/JacksonModuleJoda) -- Jackson-datatype-jdk8 (from ) -- Jackson-datatype-jdk8 (from ) -- Jackson-module-Afterburner (from http://wiki.fasterxml.com/JacksonHome) -- Jackson-module-JAXB-annotations (from http://wiki.fasterxml.com/JacksonJAXBAnnotations) -- Jackson-module-parameter-names (from ) -- Jackson-module-parameter-names (from ) +- Jackson-module-parameter-names (from https://repo1.maven.org/maven2/com/fasterxml/jackson/module/jackson-module-parameter-names) - Jakarta Bean Validation API (from https://beanvalidation.org) - Java Native Access (from https://github.com/java-native-access/jna) - Java Native Access Platform (from https://github.com/java-native-access/jna) -- Java Servlet API (from http://servlet-spec.java.net) +- Java Servlet 4.0 API (from ) +- Java Servlet 4.0 API (from ) - Java Servlet API (from https://projects.eclipse.org/projects/ee4j.servlet) +- Java Servlet API (from http://servlet-spec.java.net) - Java UUID Generator (from http://wiki.fasterxml.com/JugHome) - Javassist (from http://www.javassist.org/) - Javassist (from http://www.javassist.org/) -- Joda-Time (from http://www.joda.org/joda-time/) -- Joda-Time (from http://www.joda.org/joda-time/) +- Joda-Time (from https://www.joda.org/joda-time/) - Json Path (from https://github.com/jayway/JsonPath) - KeePassJava2 :: All (from https://repo1.maven.org/maven2/org/linguafranca/pwdb/KeePassJava2) - KeePassJava2 :: DOM (from https://repo1.maven.org/maven2/org/linguafranca/pwdb/KeePassJava2-dom) @@ -149,23 +132,23 @@ The following software have components provided under the terms of this license: - KeePassJava2 :: KDBX (from https://repo1.maven.org/maven2/org/linguafranca/pwdb/KeePassJava2-kdbx) - KeePassJava2 :: Simple (from https://repo1.maven.org/maven2/org/linguafranca/pwdb/KeePassJava2-simple) - Logback Contrib :: JSON :: Classic (from ) -- Lucene Common Analyzers (from ) -- Lucene Core (from ) -- Lucene Grouping (from ) -- Lucene Highlighter (from ) -- Lucene Join (from ) -- Lucene Memory (from ) -- Lucene Memory (from ) -- Lucene Miscellaneous (from ) -- Lucene Queries (from ) -- Lucene QueryParsers (from ) -- Lucene Sandbox (from ) -- Lucene Spatial (from ) -- Lucene Spatial 3D (from ) -- Lucene Spatial Extras (from ) -- Lucene Suggest (from ) +- Lucene Common Analyzers (from https://repo1.maven.org/maven2/org/apache/lucene/lucene-analyzers-common) +- Lucene Core (from https://repo1.maven.org/maven2/org/apache/lucene/lucene-core) +- Lucene Grouping (from https://repo1.maven.org/maven2/org/apache/lucene/lucene-grouping) +- Lucene Highlighter (from https://repo1.maven.org/maven2/org/apache/lucene/lucene-highlighter) +- Lucene Join (from https://repo1.maven.org/maven2/org/apache/lucene/lucene-join) +- Lucene Memory (from https://repo1.maven.org/maven2/org/apache/lucene/lucene-backward-codecs) +- Lucene Memory (from https://repo1.maven.org/maven2/org/apache/lucene/lucene-memory) +- Lucene Miscellaneous (from https://repo1.maven.org/maven2/org/apache/lucene/lucene-misc) +- Lucene Queries (from https://repo1.maven.org/maven2/org/apache/lucene/lucene-queries) +- Lucene QueryParsers (from https://repo1.maven.org/maven2/org/apache/lucene/lucene-queryparser) +- Lucene Sandbox (from https://repo1.maven.org/maven2/org/apache/lucene/lucene-sandbox) +- Lucene Spatial (from https://repo1.maven.org/maven2/org/apache/lucene/lucene-spatial) +- Lucene Spatial 3D (from https://repo1.maven.org/maven2/org/apache/lucene/lucene-spatial3d) +- Lucene Spatial Extras (from https://repo1.maven.org/maven2/org/apache/lucene/lucene-spatial-extras) +- Lucene Suggest (from https://repo1.maven.org/maven2/org/apache/lucene/lucene-suggest) - MapStruct Core (from ) -- Metrics Core (from https://github.com/dropwizard/metrics) +- Metrics Core (from https://repo1.maven.org/maven2/io/dropwizard/metrics/metrics-core) - Microsoft Application Insights Java SDK Spring Boot starter (from https://github.com/Microsoft/ApplicationInsights-Java) - Microsoft Application Insights Java SDK Web Module (from https://github.com/Microsoft/ApplicationInsights-Java) - Microsoft Application Insights Log4j 2 Appender (from https://github.com/Microsoft/ApplicationInsights-Java) @@ -173,45 +156,44 @@ The following software have components provided under the terms of this license: - Microsoft Azure Netty HTTP Client Library (from https://github.com/Azure/azure-sdk-for-java) - Microsoft Azure SDK for SQL API of Azure Cosmos DB Service (from https://github.com/Azure/azure-sdk-for-java) - Mockito (from http://www.mockito.org) -- Mockito (from http://mockito.org) -- Netty Reactive Streams HTTP support (from ) +- Netty Reactive Streams HTTP support (from https://repo1.maven.org/maven2/com/typesafe/netty/netty-reactive-streams-http) - Netty Reactive Streams Implementation (from ) -- Netty/Buffer (from http://netty.io/) -- Netty/Buffer (from http://netty.io/) -- Netty/Codec (from ) -- Netty/Codec (from ) -- Netty/Codec/DNS (from ) -- Netty/Codec/HTTP (from ) -- Netty/Codec/HTTP (from ) -- Netty/Codec/HTTP2 (from ) -- Netty/Codec/HTTP2 (from ) -- Netty/Codec/Socks (from ) -- Netty/Common (from ) -- Netty/Common (from ) -- Netty/Handler (from ) -- Netty/Handler (from ) -- Netty/Handler/Proxy (from ) -- Netty/Resolver (from ) -- Netty/Resolver (from ) -- Netty/Resolver/DNS (from ) -- Netty/TomcatNative [BoringSSL - Static] (from ) -- Netty/Transport (from http://netty.io/) -- Netty/Transport (from http://netty.io/) -- Netty/Transport/Native/Unix/Common (from ) -- Netty/Transport/Native/Unix/Common (from ) +- Netty/Buffer (from https://repo1.maven.org/maven2/io/netty/netty-buffer) +- Netty/Buffer (from https://repo1.maven.org/maven2/io/netty/netty-buffer) +- Netty/Codec (from https://repo1.maven.org/maven2/io/netty/netty-codec) +- Netty/Codec (from https://repo1.maven.org/maven2/io/netty/netty-codec) +- Netty/Codec/DNS (from https://repo1.maven.org/maven2/io/netty/netty-codec-dns) +- Netty/Codec/HTTP (from https://repo1.maven.org/maven2/io/netty/netty-codec-http) +- Netty/Codec/HTTP (from https://repo1.maven.org/maven2/io/netty/netty-codec-http) +- Netty/Codec/HTTP2 (from https://repo1.maven.org/maven2/io/netty/netty-codec-http2) +- Netty/Codec/HTTP2 (from https://repo1.maven.org/maven2/io/netty/netty-codec-http2) +- Netty/Codec/Socks (from https://repo1.maven.org/maven2/io/netty/netty-codec-socks) +- Netty/Common (from https://repo1.maven.org/maven2/io/netty/netty-common) +- Netty/Common (from https://repo1.maven.org/maven2/io/netty/netty-common) +- Netty/Handler (from https://repo1.maven.org/maven2/io/netty/netty-handler) +- Netty/Handler (from https://repo1.maven.org/maven2/io/netty/netty-handler) +- Netty/Handler/Proxy (from https://repo1.maven.org/maven2/io/netty/netty-handler-proxy) +- Netty/Resolver (from https://repo1.maven.org/maven2/io/netty/netty-resolver) +- Netty/Resolver (from https://repo1.maven.org/maven2/io/netty/netty-resolver) +- Netty/Resolver/DNS (from https://repo1.maven.org/maven2/io/netty/netty-resolver-dns) +- Netty/TomcatNative [BoringSSL - Static] (from https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static) +- Netty/Transport (from https://repo1.maven.org/maven2/io/netty/netty-transport) +- Netty/Transport (from https://repo1.maven.org/maven2/io/netty/netty-transport) +- Netty/Transport/Native/Unix/Common (from https://repo1.maven.org/maven2/io/netty/netty-transport-native-unix-common) +- Netty/Transport/Native/Unix/Common (from https://repo1.maven.org/maven2/io/netty/netty-transport-native-unix-common) - Nimbus JOSE+JWT (from https://bitbucket.org/connect2id/nimbus-jose-jwt) - Nimbus JOSE+JWT (from https://bitbucket.org/connect2id/nimbus-jose-jwt) - Nimbus LangTag (from https://bitbucket.org/connect2id/nimbus-language-tags) -- Non-Blocking Reactive Foundation for the JVM (from https://github.com/reactor/reactor) +- Non-Blocking Reactive Foundation for the JVM (from https://github.com/reactor/reactor-core) - OAuth 2.0 SDK with OpenID Connect extensions (from https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions) - Objenesis (from http://objenesis.org) -- OkHttp (from ) -- OkHttp (from ) -- OkHttp Logging Interceptor (from ) -- OkHttp URLConnection (from ) -- OkHttp URLConnection (from ) -- Okio (from ) -- Okio (from ) +- OkHttp (from https://repo1.maven.org/maven2/com/squareup/okhttp3/okhttp) +- OkHttp (from https://repo1.maven.org/maven2/com/squareup/okhttp3/okhttp) +- OkHttp Logging Interceptor (from https://repo1.maven.org/maven2/com/squareup/okhttp3/logging-interceptor) +- OkHttp URLConnection (from https://repo1.maven.org/maven2/com/squareup/okhttp3/okhttp-urlconnection) +- OkHttp URLConnection (from https://repo1.maven.org/maven2/com/squareup/okhttp3/okhttp-urlconnection) +- Okio (from https://github.com/square/okio/) +- Okio (from https://github.com/square/okio/) - OpenCensus (from https://github.com/census-instrumentation/opencensus-java) - OpenCensus (from https://github.com/census-instrumentation/opencensus-java) - OpenCensus (from https://github.com/census-instrumentation/opencensus-java) @@ -219,76 +201,60 @@ The following software have components provided under the terms of this license: - PowerMock (from http://www.powermock.org) - QpidJMS Client (from ) - Reactive Streams Netty driver (from https://github.com/reactor/reactor-netty) -- Retrofit (from ) -- SnakeYAML (from http://www.snakeyaml.org) -- Spring AOP (from https://github.com/spring-projects/spring-framework) -- Spring AOP (from https://github.com/spring-projects/spring-framework) -- Spring Beans (from https://github.com/spring-projects/spring-framework) -- Spring Beans (from https://github.com/spring-projects/spring-framework) -- Spring Boot (from http://projects.spring.io/spring-boot/) +- Retrofit (from https://repo1.maven.org/maven2/com/squareup/retrofit2/retrofit) +- SnakeYAML (from http://code.google.com/p/snakeyaml/) - Spring Boot (from http://projects.spring.io/spring-boot/) - Spring Boot Actuator (from http://projects.spring.io/spring-boot/) - Spring Boot Actuator AutoConfigure (from https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot-actuator-autoconfigure) - Spring Boot Actuator Starter (from http://projects.spring.io/spring-boot/) - Spring Boot AutoConfigure (from http://projects.spring.io/spring-boot/) -- Spring Boot AutoConfigure (from http://projects.spring.io/spring-boot/) - Spring Boot Dependencies (from http://projects.spring.io/spring-boot/) - Spring Boot Json Starter (from https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot-starters/spring-boot-starter-json) -- Spring Boot Json Starter (from https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot-starters/spring-boot-starter-json) - Spring Boot Log4J2 Starter (from http://projects.spring.io/spring-boot/) - Spring Boot Logging Starter (from http://projects.spring.io/spring-boot/) -- Spring Boot Logging Starter (from http://projects.spring.io/spring-boot/) - Spring Boot Reactor Netty Starter (from https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot-starters/spring-boot-starter-reactor-netty) - Spring Boot Security Starter (from http://projects.spring.io/spring-boot/) -- Spring Boot Security Starter (from http://projects.spring.io/spring-boot/) -- Spring Boot Starter (from http://projects.spring.io/spring-boot/) - Spring Boot Starter (from http://projects.spring.io/spring-boot/) - Spring Boot Test (from http://projects.spring.io/spring-boot/) - Spring Boot Test Auto-Configure (from http://projects.spring.io/spring-boot/) - Spring Boot Test Starter (from http://projects.spring.io/spring-boot/) - Spring Boot Tomcat Starter (from http://projects.spring.io/spring-boot/) -- Spring Boot Tomcat Starter (from http://projects.spring.io/spring-boot/) -- Spring Boot Undertow Starter (from http://projects.spring.io/spring-boot/) - Spring Boot Undertow Starter (from http://projects.spring.io/spring-boot/) - Spring Boot Undertow Starter (from http://projects.spring.io/spring-boot/) - Spring Boot Validation Starter (from http://projects.spring.io/spring-boot/) - Spring Boot Validation Starter (from http://projects.spring.io/spring-boot/) -- Spring Boot Validation Starter (from http://projects.spring.io/spring-boot/) - Spring Boot Web Starter (from http://projects.spring.io/spring-boot/) - Spring Boot Web Starter (from http://projects.spring.io/spring-boot/) - Spring Boot WebFlux Starter (from https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot-starters/spring-boot-starter-webflux) - Spring Commons Logging Bridge (from https://github.com/spring-projects/spring-framework) -- Spring Commons Logging Bridge (from https://github.com/spring-projects/spring-framework) -- Spring Context (from https://github.com/spring-projects/spring-framework) -- Spring Context (from https://github.com/spring-projects/spring-framework) -- Spring Core (from https://github.com/spring-projects/spring-framework) -- Spring Core (from https://github.com/spring-projects/spring-framework) -- Spring Data Core (from ) -- Spring Expression Language (SpEL) (from https://github.com/spring-projects/spring-framework) +- Spring Data Core (from https://repo1.maven.org/maven2/org/springframework/data/spring-data-commons) - Spring Expression Language (SpEL) (from https://github.com/spring-projects/spring-framework) +- Spring Framework: AOP (from http://www.springframework.org) +- Spring Framework: Context (from http://www.springframework.org) +- Spring Framework: WebMVC (from http://www.springframework.org) - Spring JMS (from https://github.com/spring-projects/spring-framework) - Spring Messaging (from https://github.com/spring-projects/spring-framework) - Spring Plugin - Core (from ) -- Spring Plugin - Metadata Extension (from ) -- Spring TestContext Framework (from https://github.com/spring-projects/spring-framework) +- Spring Plugin - Metadata Extension (from https://repo1.maven.org/maven2/org/springframework/plugin/spring-plugin-metadata) +- Spring Security - Core (from https://repo1.maven.org/maven2/org/springframework/security/spring-security-core) - Spring TestContext Framework (from https://github.com/spring-projects/spring-framework) - Spring Transaction (from https://github.com/spring-projects/spring-framework) -- Spring Transaction (from https://github.com/spring-projects/spring-framework) -- Spring Web (from https://github.com/spring-projects/spring-framework) -- Spring Web (from https://github.com/spring-projects/spring-framework) -- Spring Web MVC (from https://github.com/spring-projects/spring-framework) -- Spring Web MVC (from https://github.com/spring-projects/spring-framework) - Spring WebFlux (from https://github.com/spring-projects/spring-framework) +- Spring beans (from https://repo1.maven.org/maven2/org/springframework/spring-beans) +- Spring core (from https://repo1.maven.org/maven2/org/springframework/spring-core) +- Spring web (from https://repo1.maven.org/maven2/org/springframework/spring-web) - T-Digest (from https://github.com/tdunning/t-digest) -- Undertow Core (from ) -- Undertow Core (from ) -- Undertow Core (from ) -- Undertow Servlet (from ) -- Undertow Servlet (from ) -- Undertow WebSockets JSR356 implementations (from ) -- Undertow WebSockets JSR356 implementations (from ) +- Undertow Core (from https://repo1.maven.org/maven2/io/undertow/undertow-core) +- Undertow Core (from https://repo1.maven.org/maven2/io/undertow/undertow-core) +- Undertow Servlet (from https://repo1.maven.org/maven2/io/undertow/undertow-servlet) +- Undertow Servlet (from https://repo1.maven.org/maven2/io/undertow/undertow-servlet) +- Undertow WebSockets JSR356 implementations (from https://repo1.maven.org/maven2/io/undertow/undertow-websockets-jsr) +- Undertow WebSockets JSR356 implementations (from https://repo1.maven.org/maven2/io/undertow/undertow-websockets-jsr) +- WildFly Client Configuration (from ) - Woodstox (from https://github.com/FasterXML/woodstox) - XNIO API (from http://www.jboss.org/xnio) +- XNIO API (from http://www.jboss.org/xnio) +- XNIO NIO Implementation (from ) - XNIO NIO Implementation (from ) - Zipkin Reporter Brave (from https://repo1.maven.org/maven2/io/zipkin/reporter2/zipkin-reporter-brave) - Zipkin Reporter: Core (from ) @@ -297,11 +263,12 @@ The following software have components provided under the terms of this license: - aggs-matrix-stats (from https://github.com/elastic/elasticsearch) - aws-ssm-java-caching-client (from https://github.com/awslabs/aws-ssm-java-caching-client) - brave (from ) -- cli (from https://github.com/elastic/elasticsearch) -- com.google.api.grpc:proto-google-common-protos (from https://github.com/googleapis/googleapis) - compiler (from http://github.com/spullara/mustache.java) +- elasticsearch-cli (from https://github.com/elastic/elasticsearch) - elasticsearch-core (from https://github.com/elastic/elasticsearch) -- error-prone annotations (from ) +- elasticsearch-secure-sm (from https://github.com/elastic/elasticsearch) +- elasticsearch-x-content (from https://github.com/elastic/elasticsearch) +- error-prone annotations (from https://repo1.maven.org/maven2/com/google/errorprone/error_prone_annotations) - io.grpc:grpc-context (from https://github.com/grpc/grpc-java) - io.grpc:grpc-core (from https://github.com/grpc/grpc-java) - io.grpc:grpc-netty-shaded (from https://github.com/grpc/grpc-java) @@ -310,8 +277,8 @@ The following software have components provided under the terms of this license: - io.grpc:grpc-stub (from https://github.com/grpc/grpc-java) - ion-java (from https://github.com/amznlabs/ion-java/) - ion-java (from https://github.com/amznlabs/ion-java/) -- jackson-databind (from http://github.com/FasterXML/jackson) -- jackson-databind (from http://github.com/FasterXML/jackson) +- jackson-databind (from http://wiki.fasterxml.com/JacksonHome) +- jackson-databind (from http://wiki.fasterxml.com/JacksonHome) - java-cloudant (from https://cloudant.com) - java-cloudant (from https://cloudant.com) - javatuples (from http://www.javatuples.org) @@ -320,8 +287,8 @@ The following software have components provided under the terms of this license: - lang-mustache (from https://github.com/elastic/elasticsearch) - lettuce (from http://github.com/mp911de/lettuce/wiki) - micrometer-core (from https://github.com/micrometer-metrics/micrometer) -- micrometer-core (from https://github.com/micrometer-metrics/micrometer) - micrometer-registry-azure-monitor (from https://github.com/micrometer-metrics/micrometer) +- mockito-core (from https://github.com/mockito/mockito) - nio-multipart-parser (from ) - nio-stream-storage (from https://github.com/synchronoss/nio-stream-storage) - org.apiguardian:apiguardian-api (from https://github.com/apiguardian-team/apiguardian) @@ -333,16 +300,14 @@ The following software have components provided under the terms of this license: - powermock-module-junit4 (from http://www.powermock.org) - powermock-module-junit4-common (from ) - powermock-reflect (from ) -- proton-j (from ) +- proton-j (from https://repo1.maven.org/maven2/org/apache/qpid/proton-j) - rank-eval (from https://github.com/elastic/elasticsearch) - rest (from https://github.com/elastic/elasticsearch) - rest-high-level (from https://github.com/elastic/elasticsearch) - rxjava (from https://github.com/ReactiveX/RxJava) -- secure-sm (from https://github.com/elastic/elasticsearch) +- server (from https://github.com/elastic/elasticsearch) - spring-security-config (from http://spring.io/spring-security) - spring-security-config (from http://spring.io/spring-security) -- spring-security-core (from http://spring.io/spring-security) -- spring-security-core (from http://spring.io/spring-security) - spring-security-oauth2-core (from http://spring.io/spring-security) - spring-security-oauth2-jose (from http://spring.io/spring-security) - spring-security-oauth2-resource-server (from http://spring.io/spring-security) @@ -355,19 +320,19 @@ The following software have components provided under the terms of this license: - springfox-swagger-common (from https://github.com/springfox/springfox) - springfox-swagger-ui (from https://github.com/springfox/springfox) - springfox-swagger2 (from https://github.com/springfox/springfox) -- swagger-annotations (from ) +- swagger-annotations (from https://repo1.maven.org/maven2/io/swagger/swagger-annotations) - swagger-jaxrs (from ) - swagger-models (from ) -- tomcat-embed-el (from http://tomcat.apache.org/) -- tomcat-embed-el (from http://tomcat.apache.org/) -- x-content (from https://github.com/elastic/elasticsearch) +- tomcat-embed-el (from https://tomcat.apache.org/) +- wildfly-common (from ) ======================================================================== BSD-2-Clause ======================================================================== The following software have components provided under the terms of this license: -- Lucene Common Analyzers (from ) +- Lucene Common Analyzers (from https://repo1.maven.org/maven2/org/apache/lucene/lucene-analyzers-common) +- Lucene Core (from https://repo1.maven.org/maven2/org/apache/lucene/lucene-core) - Reflections (from http://github.com/ronmamo/reflections) - Stax2 API (from http://github.com/FasterXML/stax2-api) @@ -377,20 +342,21 @@ BSD-3-Clause The following software have components provided under the terms of this license: - ASM Core (from ) -- Expression Language 3.0 (from https://projects.eclipse.org/projects/ee4j.el) -- Google APIs Client Library for Java (from ) -- Lucene Common Analyzers (from ) -- Lucene Core (from ) -- Lucene Suggest (from ) +- Apache Commons Codec (from https://commons.apache.org/proper/commons-codec/) +- Google APIs Client Library for Java (from https://repo1.maven.org/maven2/com/google/api-client/google-api-client) +- Lucene Common Analyzers (from https://repo1.maven.org/maven2/org/apache/lucene/lucene-analyzers-common) +- Lucene Core (from https://repo1.maven.org/maven2/org/apache/lucene/lucene-core) +- Lucene Suggest (from https://repo1.maven.org/maven2/org/apache/lucene/lucene-suggest) - Microsoft Application Insights Java SDK Spring Boot starter (from https://github.com/Microsoft/ApplicationInsights-Java) - Microsoft Application Insights Java SDK Web Module (from https://github.com/Microsoft/ApplicationInsights-Java) - Microsoft Application Insights Log4j 2 Appender (from https://github.com/Microsoft/ApplicationInsights-Java) - Mockito (from http://www.mockito.org) -- Netty/Codec/HTTP (from ) -- Netty/Codec/HTTP (from ) -- Protocol Buffer Java API (from https://developers.google.com/protocol-buffers/) -- Spring Core (from https://github.com/spring-projects/spring-framework) -- Spring Core (from https://github.com/spring-projects/spring-framework) +- Netty/Codec/HTTP (from https://repo1.maven.org/maven2/io/netty/netty-codec-http) +- Netty/Codec/HTTP (from https://repo1.maven.org/maven2/io/netty/netty-codec-http) +- Protocol Buffers [Core] (from https://repo1.maven.org/maven2/com/google/protobuf/protobuf-java) +- Reflections (from http://github.com/ronmamo/reflections) +- SnakeYAML (from http://code.google.com/p/snakeyaml/) +- Spring core (from https://repo1.maven.org/maven2/org/springframework/spring-core) ======================================================================== CC-BY-2.5 @@ -414,10 +380,6 @@ CC0-1.0 ======================================================================== The following software have components provided under the terms of this license: -- HdrHistogram (from http://hdrhistogram.github.io/HdrHistogram/) -- LatencyUtils (from http://latencyutils.github.io/LatencyUtils/) -- Netty/Common (from ) -- reactive-streams (from http://www.reactive-streams.org/) - reactive-streams (from http://www.reactive-streams.org/) ======================================================================== @@ -425,11 +387,9 @@ CDDL-1.0 ======================================================================== The following software have components provided under the terms of this license: -- Apache Log4j Core (from ) -- Common Annotations 1.2 API (from ) -- JavaBeans(TM) Activation Framework (from http://java.sun.com/javase/technologies/desktop/javabeans/jaf/index.jsp) -- Old JAXB Core (from ) -- Old JAXB Runtime (from ) +- JavaBeans Activation Framework API jar (from ) +- Old JAXB Core (from https://repo1.maven.org/maven2/com/sun/xml/bind/jaxb-core) +- jaxb-impl (from https://repo1.maven.org/maven2/com/sun/xml/bind/jaxb-impl) ======================================================================== CDDL-1.1 @@ -437,10 +397,16 @@ CDDL-1.1 The following software have components provided under the terms of this license: - Common Annotations 1.2 API (from ) -- Java Architecture For XML Binding (from ) -- Java Architecture For XML Binding (from ) +- Expression Language 3.0 (from http://uel.java.net) +- Java Architecture for XML Binding (from http://jaxb.java.net/) +- Java Architecture for XML Binding (from http://jaxb.java.net/) +- Java Servlet 4.0 API (from ) +- Java Servlet API (from http://servlet-spec.java.net) - Java(TM) API for WebSocket (from ) +- JavaBeans Activation Framework (from ) - JavaBeans(TM) Activation Framework (from http://java.sun.com/javase/technologies/desktop/javabeans/jaf/index.jsp) +- JavaMail API (from https://repo1.maven.org/maven2/com/sun/mail/javax.mail) +- javax.annotation-api (from http://jcp.org/en/jsr/detail?id=250) ======================================================================== CPL-1.0 @@ -454,21 +420,27 @@ DOC ======================================================================== The following software have components provided under the terms of this license: +- Lucene Core (from https://repo1.maven.org/maven2/org/apache/lucene/lucene-core) - Woodstox (from https://github.com/FasterXML/woodstox) -- aalto-xml (from ) ======================================================================== EPL-1.0 ======================================================================== The following software have components provided under the terms of this license: +- Common Annotations 1.3 API (from ) - Expression Language 3.0 (from https://projects.eclipse.org/projects/ee4j.el) - JUnit Jupiter (Aggregator) (from https://junit.org/junit5/) +- Java Servlet 4.0 API (from ) - Java Servlet API (from https://projects.eclipse.org/projects/ee4j.servlet) +- Java(TM) API for WebSocket (from ) +- Logback Classic Module (from http://logback.qos.ch) - Logback Contrib :: JSON :: Classic (from ) +- Logback Core Module (from http://logback.qos.ch) - Microsoft Application Insights Java SDK Spring Boot starter (from https://github.com/Microsoft/ApplicationInsights-Java) - Microsoft Application Insights Java SDK Web Module (from https://github.com/Microsoft/ApplicationInsights-Java) - Microsoft Application Insights Log4j 2 Appender (from https://github.com/Microsoft/ApplicationInsights-Java) +- SnakeYAML (from http://code.google.com/p/snakeyaml/) - org.junit.jupiter:junit-jupiter-api (from http://junit.org/junit5/) - org.junit.jupiter:junit-jupiter-engine (from http://junit.org/junit5/) - org.junit.jupiter:junit-jupiter-params (from http://junit.org/junit5/) @@ -480,8 +452,12 @@ EPL-2.0 ======================================================================== The following software have components provided under the terms of this license: +- Common Annotations 1.3 API (from ) - Expression Language 3.0 (from https://projects.eclipse.org/projects/ee4j.el) - JUnit Jupiter (Aggregator) (from https://junit.org/junit5/) +- Java Servlet 4.0 API (from ) +- Java Servlet API (from https://projects.eclipse.org/projects/ee4j.servlet) +- Java(TM) API for WebSocket (from ) - org.junit.jupiter:junit-jupiter-api (from http://junit.org/junit5/) - org.junit.jupiter:junit-jupiter-engine (from http://junit.org/junit5/) - org.junit.jupiter:junit-jupiter-params (from http://junit.org/junit5/) @@ -494,44 +470,59 @@ GPL-2.0-only The following software have components provided under the terms of this license: - Common Annotations 1.2 API (from ) -- Expression Language 3.0 (from https://projects.eclipse.org/projects/ee4j.el) - Expression Language 3.0 (from http://uel.java.net) +- Java Architecture for XML Binding (from http://jaxb.java.net/) +- Java Architecture for XML Binding (from http://jaxb.java.net/) +- Java Servlet 4.0 API (from ) - Java Servlet API (from http://servlet-spec.java.net) - Java(TM) API for WebSocket (from ) -- Old JAXB Core (from ) -- Old JAXB Runtime (from ) +- JavaBeans Activation Framework (from ) +- Old JAXB Core (from https://repo1.maven.org/maven2/com/sun/xml/bind/jaxb-core) - javax.annotation-api (from http://jcp.org/en/jsr/detail?id=250) +- jaxb-impl (from https://repo1.maven.org/maven2/com/sun/xml/bind/jaxb-impl) ======================================================================== -GPL-2.0-with-classpath-exception +GPL-2.0-or-later ======================================================================== The following software have components provided under the terms of this license: -- Expression Language 3.0 (from https://projects.eclipse.org/projects/ee4j.el) -- Java Architecture For XML Binding (from ) -- Java Architecture For XML Binding (from ) -- Java(TM) API for WebSocket (from ) -- Old JAXB Core (from ) -- Old JAXB Runtime (from ) +- SnakeYAML (from http://code.google.com/p/snakeyaml/) ======================================================================== -GPL-3.0-only +GPL-2.0-with-classpath-exception ======================================================================== The following software have components provided under the terms of this license: +- Common Annotations 1.3 API (from ) +- Expression Language 3.0 (from http://uel.java.net) - Expression Language 3.0 (from https://projects.eclipse.org/projects/ee4j.el) +- Java Architecture for XML Binding (from http://jaxb.java.net/) +- Java Architecture for XML Binding (from http://jaxb.java.net/) +- Java Servlet 4.0 API (from ) +- Java Servlet 4.0 API (from ) - Java Servlet API (from https://projects.eclipse.org/projects/ee4j.servlet) +- Java Servlet API (from http://servlet-spec.java.net) - Java(TM) API for WebSocket (from ) -- Old JAXB Core (from ) -- Old JAXB Runtime (from ) -- Project Lombok (from https://projectlombok.org) +- Java(TM) API for WebSocket (from ) +- JavaBeans Activation Framework (from ) +- Old JAXB Core (from https://repo1.maven.org/maven2/com/sun/xml/bind/jaxb-core) +- javax.annotation-api (from http://jcp.org/en/jsr/detail?id=250) +- jaxb-impl (from https://repo1.maven.org/maven2/com/sun/xml/bind/jaxb-impl) ======================================================================== -ISC +GPL-3.0-only ======================================================================== The following software have components provided under the terms of this license: -- Java Native Access Platform (from https://github.com/java-native-access/jna) +- Common Annotations 1.3 API (from ) +- Expression Language 3.0 (from https://projects.eclipse.org/projects/ee4j.el) +- Java Servlet 4.0 API (from ) +- Java Servlet 4.0 API (from ) +- Java Servlet API (from https://projects.eclipse.org/projects/ee4j.servlet) +- Java(TM) API for WebSocket (from ) +- Old JAXB Core (from https://repo1.maven.org/maven2/com/sun/xml/bind/jaxb-core) +- Project Lombok (from https://projectlombok.org) +- jaxb-impl (from https://repo1.maven.org/maven2/com/sun/xml/bind/jaxb-impl) ======================================================================== ImageMagick @@ -540,7 +531,6 @@ The following software have components provided under the terms of this license: - Stax2 API (from http://github.com/FasterXML/stax2-api) - Woodstox (from https://github.com/FasterXML/woodstox) -- aalto-xml (from ) ======================================================================== JSON @@ -559,19 +549,38 @@ The following software have components provided under the terms of this license: - Java Native Access Platform (from https://github.com/java-native-access/jna) - Javassist (from http://www.javassist.org/) - Javassist (from http://www.javassist.org/) +- Logback Classic Module (from http://logback.qos.ch) - Logback Contrib :: JSON :: Classic (from ) +- Logback Core Module (from http://logback.qos.ch) - Microsoft Application Insights Java SDK Spring Boot starter (from https://github.com/Microsoft/ApplicationInsights-Java) - Microsoft Application Insights Java SDK Web Module (from https://github.com/Microsoft/ApplicationInsights-Java) - Microsoft Application Insights Log4j 2 Appender (from https://github.com/Microsoft/ApplicationInsights-Java) +======================================================================== +LGPL-2.1-or-later +======================================================================== +The following software have components provided under the terms of this license: + +- JBoss Threads (from ) +- Javassist (from http://www.javassist.org/) +- Javassist (from http://www.javassist.org/) +- SnakeYAML (from http://code.google.com/p/snakeyaml/) + +======================================================================== +LGPL-3.0-only +======================================================================== +The following software have components provided under the terms of this license: + +- Apache Log4j API (from https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-api) +- Apache Log4j Core (from https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-core) + ======================================================================== MIT ======================================================================== The following software have components provided under the terms of this license: - AWS Java SDK for AWS Lambda (from https://aws.amazon.com/sdkforjava) -- Animal Sniffer Annotations (from ) -- Apache Log4j SLF4J Binding (from ) +- Animal Sniffer Annotations (from https://repo1.maven.org/maven2/org/codehaus/mojo/animal-sniffer-annotations) - Azure Java Client Authentication Library for AutoRest (from https://github.com/Azure/autorest-clientruntime-for-java) - Azure Java Client Runtime for ARM (from https://github.com/Azure/autorest-clientruntime-for-java) - Azure Java Client Runtime for AutoRest (from https://github.com/Azure/autorest-clientruntime-for-java) @@ -580,10 +589,8 @@ The following software have components provided under the terms of this license: - Extensions on Apache Proton-J library (from https://github.com/Azure/qpid-proton-j-extensions) - JOpt Simple (from http://pholser.github.io/jopt-simple) - JUL to SLF4J bridge (from http://www.slf4j.org) -- JUL to SLF4J bridge (from http://www.slf4j.org) - Java Client Runtime for AutoRest (from https://github.com/Azure/autorest-clientruntime-for-java) -- Java JWT (from http://www.jwt.io) -- Lucene Core (from ) +- Lucene Core (from https://repo1.maven.org/maven2/org/apache/lucene/lucene-core) - Microsoft Application Insights Java SDK Core (from https://github.com/Microsoft/ApplicationInsights-Java) - Microsoft Application Insights Java SDK Spring Boot starter (from https://github.com/Microsoft/ApplicationInsights-Java) - Microsoft Application Insights Java SDK Web Module (from https://github.com/Microsoft/ApplicationInsights-Java) @@ -602,25 +609,32 @@ The following software have components provided under the terms of this license: - Microsoft Azure common module for Storage (from https://github.com/Azure/azure-sdk-for-java) - Microsoft Azure internal Avro module for Storage (from https://github.com/Azure/azure-sdk-for-java) - Mockito (from http://www.mockito.org) -- Mockito (from http://mockito.org) -- Netty/Codec/HTTP (from ) -- Netty/Codec/HTTP (from ) -- Netty/Common (from ) -- Netty/Common (from ) +- Netty/Codec/HTTP (from https://repo1.maven.org/maven2/io/netty/netty-codec-http) +- Netty/Codec/HTTP (from https://repo1.maven.org/maven2/io/netty/netty-codec-http) +- Netty/Common (from https://repo1.maven.org/maven2/io/netty/netty-common) +- Netty/Common (from https://repo1.maven.org/maven2/io/netty/netty-common) - Project Lombok (from https://projectlombok.org) - SLF4J API Module (from http://www.slf4j.org) -- SLF4J API Module (from http://www.slf4j.org) - Spongy Castle (from http://rtyley.github.io/spongycastle/) - Spring Data for Azure Cosmos DB SQL API (from https://github.com/Azure/azure-sdk-for-java/tree/master/sdk/cosmos/azure-spring-data-cosmos) +- Spring Security - Core (from https://repo1.maven.org/maven2/org/springframework/security/spring-security-core) - adal4j (from https://github.com/AzureAD/azure-activedirectory-library-for-java) - azure-documentdb (from https://azure.microsoft.com/en-us/services/cosmos-db/) - documentdb-bulkexecutor (from http://azure.microsoft.com/en-us/services/documentdb/) +- java jwt (from http://www.jwt.io) - micrometer-core (from https://github.com/micrometer-metrics/micrometer) +- mockito-core (from https://github.com/mockito/mockito) - mockito-junit-jupiter (from https://github.com/mockito/mockito) - msal4j (from https://github.com/AzureAD/microsoft-authentication-library-for-java) - msal4j-persistence-extension (from https://github.com/AzureAD/microsoft-authentication-extensions-for-java) -- spring-security-core (from http://spring.io/spring-security) -- spring-security-core (from http://spring.io/spring-security) + +======================================================================== +MPL-1.1 +======================================================================== +The following software have components provided under the terms of this license: + +- Javassist (from http://www.javassist.org/) +- Javassist (from http://www.javassist.org/) ======================================================================== MPL-2.0 @@ -629,6 +643,7 @@ The following software have components provided under the terms of this license: - Javassist (from http://www.javassist.org/) - Javassist (from http://www.javassist.org/) +- OkHttp (from https://repo1.maven.org/maven2/com/squareup/okhttp3/okhttp) ======================================================================== MS-RL @@ -642,9 +657,23 @@ Public-Domain ======================================================================== The following software have components provided under the terms of this license: -- Old JAXB Core (from ) -- Old JAXB Runtime (from ) +- Old JAXB Core (from https://repo1.maven.org/maven2/com/sun/xml/bind/jaxb-core) - Spongy Castle (from http://rtyley.github.io/spongycastle/) +- jaxb-impl (from https://repo1.maven.org/maven2/com/sun/xml/bind/jaxb-impl) + +======================================================================== +SPL-1.0 +======================================================================== +The following software have components provided under the terms of this license: + +- Checker Qual (from https://checkerframework.org) + +======================================================================== +SunPro +======================================================================== +The following software have components provided under the terms of this license: + +- Lucene Core (from https://repo1.maven.org/maven2/org/apache/lucene/lucene-core) ======================================================================== WTFPL @@ -653,6 +682,13 @@ The following software have components provided under the terms of this license: - Reflections (from http://github.com/ronmamo/reflections) +======================================================================== +X11 +======================================================================== +The following software have components provided under the terms of this license: + +- Lucene Core (from https://repo1.maven.org/maven2/org/apache/lucene/lucene-core) + ======================================================================== public-domain ======================================================================== @@ -660,29 +696,34 @@ The following software have components provided under the terms of this license: - AWS Java SDK :: SDK Core (from https://aws.amazon.com/sdkforjava) - Asynchronous Http Client (from ) -- Guava: Google Core Libraries for Java (from https://github.com/google/guava.git) +- Guava: Google Core Libraries for Java (from https://repo1.maven.org/maven2/com/google/guava/guava) - HdrHistogram (from http://hdrhistogram.github.io/HdrHistogram/) -- Joda-Time (from http://www.joda.org/joda-time/) -- Joda-Time (from http://www.joda.org/joda-time/) +- Joda-Time (from https://www.joda.org/joda-time/) - LatencyUtils (from http://latencyutils.github.io/LatencyUtils/) - Microsoft Application Insights Java SDK Core (from https://github.com/Microsoft/ApplicationInsights-Java) - Microsoft Azure SDK for EventGrid Management (from https://github.com/Azure/azure-sdk-for-java) - Microsoft Azure SDK for SQL API of Azure Cosmos DB Service (from https://github.com/Azure/azure-sdk-for-java) - Microsoft Azure client library for Blob Storage (from https://github.com/Azure/azure-sdk-for-java) - Project Lombok (from https://projectlombok.org) -- Spring Web (from https://github.com/spring-projects/spring-framework) -- Spring Web (from https://github.com/spring-projects/spring-framework) +- Spring web (from https://repo1.maven.org/maven2/org/springframework/spring-web) - azure-documentdb (from https://azure.microsoft.com/en-us/services/cosmos-db/) - msal4j (from https://github.com/AzureAD/microsoft-authentication-library-for-java) +- reactive-streams (from http://www.reactive-streams.org/) ======================================================================== unknown ======================================================================== The following software have components provided under the terms of this license: -- Byte Buddy (without dependencies) (from ) +- Byte Buddy (without dependencies) (from https://repo1.maven.org/maven2/net/bytebuddy/byte-buddy) - JSON in Java (from https://github.com/douglascrockford/JSON-java) - JUnit (from http://junit.org) +- JUnit Jupiter (Aggregator) (from https://junit.org/junit5/) - Spongy Castle (from http://rtyley.github.io/spongycastle/) +- org.junit.jupiter:junit-jupiter-api (from http://junit.org/junit5/) +- org.junit.jupiter:junit-jupiter-engine (from http://junit.org/junit5/) +- org.junit.jupiter:junit-jupiter-params (from http://junit.org/junit5/) +- org.junit.platform:junit-platform-commons (from http://junit.org/junit5/) +- org.junit.platform:junit-platform-engine (from http://junit.org/junit5/) diff --git a/devops/azure/development-pipeline.yml b/devops/azure/development-pipeline.yml index 532aa11e8b05cca1b058dc0b25f68efca0f6c51d..eca20d42ae0d6678d4b2b21ff820a58657982be8 100644 --- a/devops/azure/development-pipeline.yml +++ b/devops/azure/development-pipeline.yml @@ -57,8 +57,8 @@ stages: parameters: mavenGoal: 'package' mavenPublishJUnitResults: true - serviceCoreMavenOptions: '-P notification-core --settings .mvn/community-maven.settings.xml' - mavenOptions: '-P notification-azure --settings .mvn/community-maven.settings.xml -Dmaven.repo.local=$(MAVEN_CACHE_FOLDER)' + serviceCoreMavenOptions: '-pl notification-core --settings .mvn/community-maven.settings.xml -Dmaven.repo.local=$(MAVEN_CACHE_FOLDER)' + mavenOptions: '-pl provider/notification-azure --settings .mvn/community-maven.settings.xml -Dmaven.repo.local=$(MAVEN_CACHE_FOLDER)' copyFileContents: | pom.xml provider/notification-azure/maven/settings.xml diff --git a/devops/azure/pipeline.yml b/devops/azure/pipeline.yml index 13617a7552be024dd921f877b6d371190c2a6c8c..f5c86d139932a3f7c90e5aa8e632f67b81d3b2e2 100644 --- a/devops/azure/pipeline.yml +++ b/devops/azure/pipeline.yml @@ -57,8 +57,9 @@ stages: parameters: mavenGoal: 'package' mavenPublishJUnitResults: true - serviceCoreMavenOptions: '-P notification-core --settings .mvn/community-maven.settings.xml' - mavenOptions: '-P notification-azure --settings .mvn/community-maven.settings.xml -Dmaven.repo.local=$(MAVEN_CACHE_FOLDER)' + serviceCoreMavenOptions: '-pl notification-core --settings .mvn/community-maven.settings.xml -Dmaven.repo.local=$(MAVEN_CACHE_FOLDER)' + mavenOptions: '-pl provider/notification-azure --settings .mvn/community-maven.settings.xml -Dmaven.repo.local=$(MAVEN_CACHE_FOLDER)' + copyFileContents: | pom.xml provider/notification-azure/maven/settings.xml diff --git a/notification-core/pom.xml b/notification-core/pom.xml index 4fadc3d8619a364904fc97fca963b1972f4dd284..de0485a83f4b62ab52d668ba42b6c852574b6b09 100644 --- a/notification-core/pom.xml +++ b/notification-core/pom.xml @@ -36,6 +36,8 @@ <maven.compiler.target>${java.version}</maven.compiler.target> <maven.compiler.source>${java.version}</maven.compiler.source> <springfox-version>2.7.0</springfox-version> + <netty.version>4.1.65.Final</netty.version> + <undertow.version>2.1.7.Final</undertow.version> </properties> <dependencies> @@ -131,11 +133,6 @@ </exclusion> </exclusions> </dependency> - <dependency> - <groupId>io.undertow</groupId> - <artifactId>undertow-core</artifactId> - <version>2.0.27.Final</version> - </dependency> <dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-validation</artifactId> @@ -215,6 +212,83 @@ <artifactId>spring-test</artifactId> <scope>test</scope> </dependency> + + <!-- overriding packages with known vulnerabilities --> + <!-- See: https://nvd.nist.gov/vuln/search/results?form_type=Advanced&results_type=overview&search_type=all&cpe_vendor=cpe%3A%2F%3Anetty&cpe_product=cpe%3A%2F%3Anetty%3Anetty&cpe_version=cpe%3A%2F%3Anetty%3Anetty%3A4.1.38--> + <!-- See: https://ossindex.sonatype.org/component/pkg:maven/com.google.oauth-client/google-oauth-client@1.30.1?utm_source=dependency-check&utm_medium=integration&utm_content=6.1.6--> + <!-- See: https://nvd.nist.gov/vuln/search/results?form_type=Advanced&results_type=overview&search_type=all&cpe_vendor=cpe%3A%2F%3Aredhat&cpe_product=cpe%3A%2F%3Aredhat%3Aundertow&cpe_version=cpe%3A%2F%3Aredhat%3Aundertow%3A2.0.23--> + <dependency> + <groupId>io.netty</groupId> + <artifactId>netty-transport</artifactId> + <version>${netty.version}</version> + </dependency> + <dependency> + <groupId>io.netty</groupId> + <artifactId>netty-transport-native-unix-common</artifactId> + <version>${netty.version}</version> + </dependency> + <dependency> + <groupId>io.netty</groupId> + <artifactId>netty-codec</artifactId> + <version>${netty.version}</version> + </dependency> + <dependency> + <groupId>io.netty</groupId> + <artifactId>netty-buffer</artifactId> + <version>${netty.version}</version> + </dependency> + <dependency> + <groupId>io.netty</groupId> + <artifactId>netty-common</artifactId> + <version>${netty.version}</version> + </dependency> + <dependency> + <groupId>io.netty</groupId> + <artifactId>netty-resolver</artifactId> + <version>${netty.version}</version> + </dependency> + <dependency> + <groupId>io.netty</groupId> + <artifactId>netty-handler</artifactId> + <version>${netty.version}</version> + </dependency> + <dependency> + <groupId>io.netty</groupId> + <artifactId>netty-codec-http</artifactId> + <version>${netty.version}</version> + </dependency> + <dependency> + <groupId>io.netty</groupId> + <artifactId>netty-codec-http2</artifactId> + <version>${netty.version}</version> + </dependency> + <dependency> + <groupId>io.netty</groupId> + <artifactId>netty-transport-native-epoll</artifactId> + <version>${netty.version}</version> + <classifier>linux-x86_64</classifier> + <type>jar</type> + </dependency> + <dependency> + <groupId>com.google.oauth-client</groupId> + <artifactId>google-oauth-client</artifactId> + <version>1.31.5</version> + </dependency> + <dependency> + <groupId>io.undertow</groupId> + <artifactId>undertow-core</artifactId> + <version>${undertow.version}</version> + </dependency> + <dependency> + <groupId>io.undertow</groupId> + <artifactId>undertow-servlet</artifactId> + <version>${undertow.version}</version> + </dependency> + <dependency> + <groupId>io.undertow</groupId> + <artifactId>undertow-websockets-jsr</artifactId> + <version>${undertow.version}</version> + </dependency> </dependencies> <build> <plugins> diff --git a/pom.xml b/pom.xml index 66dac6053767ca9c32d9b671520c8289db2ca89e..e926c0eb615f49d3035dc63664a9c7cd70f2c2e5 100644 --- a/pom.xml +++ b/pom.xml @@ -43,7 +43,7 @@ <dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-dependencies</artifactId> - <version>2.1.7.RELEASE</version> + <version>2.1.18.RELEASE</version> <type>pom</type> <scope>import</scope> </dependency> @@ -53,6 +53,24 @@ <artifactId>os-core-common</artifactId> <version>${os-core-common.version}</version> </dependency> + + <!-- overriding packages with known vulnerabilities --> + <!-- See: https://nvd.nist.gov/vuln/search/results?form_type=Advanced&results_type=overview&search_type=all&cpe_vendor=cpe%3A%2F%3Afasterxml&cpe_product=cpe%3A%2F%3Afasterxml%3Ajackson-databind&cpe_version=cpe%3A%2F%3Afasterxml%3Ajackson-databind%3A2.9.9--> + <dependency> + <groupId>com.fasterxml.jackson.core</groupId> + <artifactId>jackson-core</artifactId> + <version>2.12.3</version> + </dependency> + <dependency> + <groupId>com.fasterxml.jackson.core</groupId> + <artifactId>jackson-databind</artifactId> + <version>2.12.3</version> + </dependency> + <dependency> + <groupId>com.fasterxml.jackson.core</groupId> + <artifactId>jackson-annotations</artifactId> + <version>2.12.3</version> + </dependency> </dependencies> </dependencyManagement> diff --git a/provider/notification-aws/maven/settings.xml b/provider/notification-aws/maven/settings.xml index 3dbde15f47c27d083537fa2f0b280f97f9aa54b5..1bfc43ac96aafb6790498c6f0acef3ca0818a98f 100644 --- a/provider/notification-aws/maven/settings.xml +++ b/provider/notification-aws/maven/settings.xml @@ -1,18 +1,19 @@ <?xml version="1.0" encoding="UTF-8"?> <!-- - Copyright © 2020 Amazon Web Services - Licensed under the Apache License, Version 2.0 (the "License"); - you may not use this file except in compliance with the License. - You may obtain a copy of the License at +Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at - http://www.apache.org/licenses/LICENSE-2.0 + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. - Unless required by applicable law or agreed to in writing, software - distributed under the License is distributed on an "AS IS" BASIS, - WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - See the License for the specific language governing permissions and - limitations under the License. --> <settings xmlns="http://maven.apache.org/SETTINGS/1.0.0" @@ -63,15 +64,14 @@ </server> </servers> - <!-- CodeArtifact doesn't support external repos yet that aren't Maven Central. ETA Q4 2020. --> - <!-- <mirrors> --> - <!-- <mirror> --> - <!-- <id>aws-osdu-dev-maven</id> --> - <!-- <name>aws-osdu-dev-maven</name> --> - <!-- <url>https://osdu-dev-888733619319.d.codeartifact.us-east-1.amazonaws.com/maven/osdu-maven/</url> --> - <!-- <mirrorOf>*,!gitlab-os-core-common-maven</mirrorOf> --> - <!-- </mirror> --> - <!-- </mirrors> --> + <mirrors> + <mirror> + <id>aws-osdu-dev-maven</id> + <name>aws-osdu-dev-maven</name> + <url>https://osdu-dev-${AWS_ACCOUNT_ID}.d.codeartifact.us-east-1.amazonaws.com/maven/osdu-maven/</url> + <mirrorOf>central,!gitlab-os-core-common-maven,!gitlab-os-core-lib-aws-maven</mirrorOf> + </mirror> + </mirrors> <activeProfiles> <activeProfile>credentialsConfiguration</activeProfile> diff --git a/provider/notification-aws/pom.xml b/provider/notification-aws/pom.xml index 677d2b4c46862ce406706553a27b0d2a0330912a..f2cf1a2f137b69bb68b806b59c8c70bc94eebcd1 100644 --- a/provider/notification-aws/pom.xml +++ b/provider/notification-aws/pom.xml @@ -39,16 +39,10 @@ </properties> <dependencies> - <!-- <dependency> - <groupId>org.opengroup.osdu</groupId> - <artifactId>os-core-common</artifactId> - </dependency> --> - - <dependency> <groupId>org.opengroup.osdu.core.aws</groupId> <artifactId>os-core-lib-aws</artifactId> - <version>0.9.0</version> + <version>0.10.0-SNAPSHOT</version> </dependency> <!-- https://mvnrepository.com/artifact/com.amazonaws/aws-java-sdk-secretsmanager --> @@ -94,6 +88,7 @@ <version>4.12</version> <scope>test</scope> </dependency> + </dependencies> <build> diff --git a/provider/notification-aws/src/main/resources/application.properties b/provider/notification-aws/src/main/resources/application.properties index 704966d16d904a03b2c712057b97a0772d96bdac..b524fa658546350df74cca9f56401ef12e179289 100644 --- a/provider/notification-aws/src/main/resources/application.properties +++ b/provider/notification-aws/src/main/resources/application.properties @@ -48,3 +48,5 @@ server.ssl.key-store=${SSL_KEY_STORE_PATH:/certs/osduonaws.p12} server.ssl.key-alias=${SSL_KEY_ALIAS:osduonaws} server.ssl.key-password=${SSL_KEY_PASSWORD:} server.ssl.key-store-password=${SSL_KEY_STORE_PASSWORD:} + +spring.autoconfigure.exclude=org.springframework.boot.autoconfigure.security.SecurityAutoConfiguration \ No newline at end of file