From 9301cc86204b73deae2a97ed44dbe0219f98171f Mon Sep 17 00:00:00 2001 From: David Diederich <d.diederich@opengroup.org> Date: Fri, 19 Mar 2021 00:35:20 -0400 Subject: [PATCH] Updating FOSSA configuration and the resulting NOTICE file --- .fossa.yml | 30 +++++++++++++++++++++++++----- NOTICE | 37 ++++++++++++++++++++++++++++++++++++- 2 files changed, 61 insertions(+), 6 deletions(-) diff --git a/.fossa.yml b/.fossa.yml index 7b11f22f8..32d19a541 100644 --- a/.fossa.yml +++ b/.fossa.yml @@ -5,7 +5,7 @@ version: 2 cli: server: https://app.fossa.com fetcher: custom - project: OS Schema + project: Schema analyze: modules: - name: os-schema @@ -16,15 +16,35 @@ analyze: type: mvn target: schema-core/pom.xml path: . + - name: os-schema-aws + type: mvn + target: provider/schema-aws/pom.xml + path: . - name: os-schema-gcp type: mvn target: provider/schema-gcp/pom.xml path: . - - name: os-schema-azure + - name: os-schema-ibm type: mvn - target: provider/schema-azure/pom.xml + target: provider/schema-ibm/pom.xml path: . - - name: os-schema-aws + - name: os-schema-azure type: mvn - target: provider/schema-aws/pom.xml + target: provider/schema-azure/pom.xml path: . + - name: aws + type: pip + target: deployments/scripts/aws + path: deployments/scripts/aws + - name: azure + type: pip + target: deployments/scripts/azure + path: deployments/scripts/azure + - name: google + type: pip + target: deployments/scripts/google + path: deployments/scripts/google + - name: scripts + type: pip + target: deployments/scripts + path: deployments/scripts diff --git a/NOTICE b/NOTICE index 1e60f8845..c0eb20883 100644 --- a/NOTICE +++ b/NOTICE @@ -21,6 +21,8 @@ Apache-2.0 ======================================================================== The following software have components provided under the terms of this license: +- AMQP 1.0 JMS Spring Boot AutoConfiguration (from https://repo1.maven.org/maven2/org/amqphub/spring/amqp-10-jms-spring-boot-autoconfigure) +- AMQP 1.0 JMS Spring Boot Starter (from https://repo1.maven.org/maven2/org/amqphub/spring/amqp-10-jms-spring-boot-starter) - ASM Core (from ) - ASM based accessors helper used by json-smart (from ) - AWS Event Stream (from https://github.com/awslabs/aws-eventstream-java) @@ -228,6 +230,7 @@ The following software have components provided under the terms of this license: - Apache Commons Lang (from http://commons.apache.org/proper/commons-lang/) - Apache Commons Logging (from http://commons.apache.org/proper/commons-logging/) - Apache Commons Logging (from http://commons.apache.org/proper/commons-logging/) +- Apache Geronimo JMS Spec 2.0 (from http://geronimo.apache.org/maven/${siteId}/${version}) - Apache HttpAsyncClient (from http://hc.apache.org/httpcomponents-asyncclient) - Apache HttpClient (from http://hc.apache.org/httpcomponents-client) - Apache HttpClient Cache (from http://hc.apache.org/httpcomponents-client) @@ -250,6 +253,7 @@ The following software have components provided under the terms of this license: - ClassMate (from http://github.com/cowtowncoder/java-classmate) - Cloud Storage JSON API v1-rev58-1.21.0 (from ) - CloudWatch Metrics for AWS Java SDK (from https://aws.amazon.com/sdkforjava) +- Commons IO (from http://commons.apache.org/io/) - Converter: Jackson (from ) - Elastic JNA Distribution (from https://github.com/java-native-access/jna) - Elasticsearch: 5.0.0-alpha5 (from https://github.com/elastic/elasticsearch) @@ -276,6 +280,10 @@ The following software have components provided under the terms of this license: - HPPC Collections (from http://labs.carrotsearch.com) - Hibernate Validator Engine (from ) - Hibernate Validator Engine (from ) +- IBM COS Java SDK for Amazon S3 (from https://github.com/ibm/ibm-cos-sdk-java) +- IBM COS Java SDK for COS KMS (from https://github.com/ibm/ibm-cos-sdk-java) +- IBM COS SDK For Java (from https://github.com/ibm/ibm-cos-sdk-java) +- IBM COS SDK for Java - Core (from https://github.com/ibm/ibm-cos-sdk-java) - Identity and Access Management (IAM) API v1-rev247-1.23.0 (from ) - IntelliJ IDEA Annotations (from http://www.jetbrains.org) - J2ObjC Annotations (from https://github.com/google/j2objc/) @@ -374,6 +382,7 @@ The following software have components provided under the terms of this license: - Nimbus Content Type (from https://bitbucket.org/connect2id/nimbus-content-type) - Nimbus JOSE+JWT (from https://bitbucket.org/connect2id/nimbus-jose-jwt) - Nimbus JOSE+JWT (from https://bitbucket.org/connect2id/nimbus-jose-jwt) +- Nimbus JOSE+JWT (from https://bitbucket.org/connect2id/nimbus-jose-jwt) - Nimbus LangTag (from https://bitbucket.org/connect2id/nimbus-language-tags) - Non-Blocking Reactive Foundation for the JVM (from https://github.com/reactor/reactor) - OAuth 2.0 SDK with OpenID Connect extensions (from https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions) @@ -383,6 +392,7 @@ The following software have components provided under the terms of this license: - OkHttp Logging Interceptor (from ) - OkHttp URLConnection (from ) - Okio (from ) +- Okio (from ) - OpenCensus (from https://github.com/census-instrumentation/opencensus-java) - OpenCensus (from https://github.com/census-instrumentation/opencensus-java) - OpenCensus (from https://github.com/census-instrumentation/opencensus-java) @@ -390,6 +400,7 @@ The following software have components provided under the terms of this license: - OpenCensus (from https://github.com/census-instrumentation/opencensus-java) - PWDB :: Database (from https://repo1.maven.org/maven2/org/linguafranca/pwdb/database) - Protocol Buffer extensions to the Google HTTP Client Library for Java. (from ) +- QpidJMS Client (from ) - Reactive Streams Netty driver (from https://github.com/reactor/reactor-netty) - Retrofit (from ) - Simple XML (from http://simple.sourceforge.net) @@ -419,6 +430,8 @@ The following software have components provided under the terms of this license: - Spring Core (from https://github.com/spring-projects/spring-framework) - Spring Data Core (from ) - Spring Expression Language (SpEL) (from https://github.com/spring-projects/spring-framework) +- Spring JMS (from https://github.com/spring-projects/spring-framework) +- Spring Messaging (from https://github.com/spring-projects/spring-framework) - Spring Plugin - Core (from ) - Spring Plugin - Metadata Extension (from ) - Spring TestContext Framework (from https://github.com/spring-projects/spring-framework) @@ -433,6 +446,8 @@ The following software have components provided under the terms of this license: - aalto-xml (from ) - aggs-matrix-stats (from https://github.com/elastic/elasticsearch) - aws-ssm-java-caching-client (from https://github.com/awslabs/aws-ssm-java-caching-client) +- boto3 (from https://github.com/boto/boto3) +- botocore (from https://github.com/boto/botocore) - cli (from https://github.com/elastic/elasticsearch) - com.google.api.grpc:grpc-google-cloud-pubsub-v1 (from https://github.com/googleapis/googleapis) - com.google.api.grpc:proto-google-cloud-logging-v2 (from https://github.com/googleapis/googleapis) @@ -443,6 +458,7 @@ The following software have components provided under the terms of this license: - datastore-v1-proto-client (from ) - elasticsearch-core (from https://github.com/elastic/elasticsearch) - error-prone annotations (from ) +- google-auth (from https://github.com/GoogleCloudPlatform/google-auth-library-python) - io.grpc:grpc-alts (from https://github.com/grpc/grpc-java) - io.grpc:grpc-api (from https://github.com/grpc/grpc-java) - io.grpc:grpc-auth (from https://github.com/grpc/grpc-java) @@ -455,8 +471,11 @@ The following software have components provided under the terms of this license: - io.grpc:grpc-protobuf-lite (from https://github.com/grpc/grpc-java) - io.grpc:grpc-stub (from https://github.com/grpc/grpc-java) - ion-java (from https://github.com/amznlabs/ion-java/) +- ion-java (from https://github.com/amznlabs/ion-java/) - jackson-databind (from http://github.com/FasterXML/jackson) - jackson-databind (from http://github.com/FasterXML/jackson) +- java-cloudant (from https://cloudant.com) +- java-cloudant (from https://cloudant.com) - javatuples (from http://www.javatuples.org) - javax.inject (from http://code.google.com/p/atinject/) - jose4j (from https://bitbucket.org/b_c/jose4j/) @@ -473,12 +492,16 @@ The following software have components provided under the terms of this license: - proto-google-cloud-datastore-v1 (from https://github.com/googleapis/api-client-staging) - proton-j (from ) - rank-eval (from https://github.com/elastic/elasticsearch) +- requests (from http://python-requests.org) - rest (from https://github.com/elastic/elasticsearch) - rest-high-level (from https://github.com/elastic/elasticsearch) - rxjava (from https://github.com/ReactiveX/RxJava) - secure-sm (from https://github.com/elastic/elasticsearch) - spring-security-config (from http://spring.io/spring-security) - spring-security-core (from http://spring.io/spring-security) +- spring-security-oauth2-core (from http://spring.io/spring-security) +- spring-security-oauth2-jose (from http://spring.io/spring-security) +- spring-security-oauth2-resource-server (from http://spring.io/spring-security) - spring-security-web (from http://spring.io/spring-security) - springfox-core (from https://github.com/springfox/springfox) - springfox-schema (from https://github.com/springfox/springfox) @@ -548,6 +571,7 @@ The following software have components provided under the terms of this license: - Spring Core (from https://github.com/spring-projects/spring-framework) - Stax2 API (from http://github.com/FasterXML/stax2-api) - ThreeTen backport (from https://www.threeten.org/threetenbp) +- google (from http://breakingcode.wordpress.com/) - jakarta.xml.bind-api (from ) ======================================================================== @@ -764,21 +788,24 @@ The following software have components provided under the terms of this license: - Microsoft Azure client library for KeyVault Secrets (from https://github.com/Azure/azure-sdk-for-java) - Microsoft Azure common module for Storage (from https://github.com/Azure/azure-sdk-for-java) - Microsoft Azure internal Avro module for Storage (from https://github.com/Azure/azure-sdk-for-java) -- Mockito (from http://www.mockito.org) - Mockito (from http://mockito.org) +- Mockito (from http://www.mockito.org) - Netty/Codec/HTTP (from ) - Netty/Codec/HTTP (from ) - Netty/Common (from ) - Netty/Common (from ) - Project Lombok (from https://projectlombok.org) - Project Lombok (from https://projectlombok.org) +- PyJWT (from http://github.com/jpadilla/pyjwt) - SLF4J API Module (from http://www.slf4j.org) - Spongy Castle (from http://rtyley.github.io/spongycastle/) - Spring Data for Azure Cosmos DB SQL API (from https://github.com/Azure/azure-sdk-for-java/tree/master/sdk/cosmos/azure-spring-data-cosmos) - adal4j (from https://github.com/AzureAD/azure-activedirectory-library-for-java) +- botocore (from https://github.com/boto/botocore) - micrometer-core (from https://github.com/micrometer-metrics/micrometer) - mockito-inline (from https://github.com/mockito/mockito) - mockito-junit-jupiter (from https://github.com/mockito/mockito) +- msal (from https://github.com/AzureAD/microsoft-authentication-library-for-python) - msal4j (from https://github.com/AzureAD/microsoft-authentication-library-for-java) - msal4j-persistence-extension (from https://github.com/AzureAD/microsoft-authentication-extensions-for-java) - spring-security-core (from http://spring.io/spring-security) @@ -815,6 +842,13 @@ The following software have components provided under the terms of this license: - LatencyUtils (from http://latencyutils.github.io/LatencyUtils/) - Spongy Castle (from http://rtyley.github.io/spongycastle/) +======================================================================== +Python-2.0 +======================================================================== +The following software have components provided under the terms of this license: + +- google-auth (from https://github.com/GoogleCloudPlatform/google-auth-library-python) + ======================================================================== SPL-1.0 ======================================================================== @@ -851,6 +885,7 @@ The following software have components provided under the terms of this license: - Project Lombok (from https://projectlombok.org) - Spring Web (from https://github.com/spring-projects/spring-framework) - StAX API (from http://stax.codehaus.org/) +- botocore (from https://github.com/boto/botocore) - msal4j (from https://github.com/AzureAD/microsoft-authentication-library-for-java) - reactive-streams (from http://www.reactive-streams.org/) -- GitLab