Scan Report

Created by ORT, the OSS Review Toolkit, version cc543c9380-dirty on 2023-04-28T02:58:44.887193144Z.

Project

Scanned revision 9717c3ce29b1bd688cb20c951a7543a52d0fc4bc of Git repository https://github.com/eclipse-tractusx/digital-product-pass.git

Index

Rule Violation Summary (126 errors, 1049 warnings, 233 hints to resolve)
Issue Summary (4 errors, 0 warnings, 0 hints to resolve)
Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT
NPM::productpass-consumer-ui:0.5.2
Repository Configuration

Rule Violation Summary (126 errors, 1049 warnings, 233 hints to resolve)

Issue Summary (4 errors, 0 warnings, 0 hints to resolve)

Issues from excluded components are not shown in this summary.

Packages

#	Package	Analyzer Issues	Scanner Issues
1	Maven:com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava		Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT 2023-04-28T02:39:31.391463464Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava': IOException: Could not resolve provenance for 'Maven:com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava' for source code origins [VCS, ARTIFACT]. Resolution of VCS failed with: IOException: Could not resolve revision for package 'Maven:com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava' with VcsInfo(type=Git, url=https://github.com/google/guava.git, revision=, path=): Could not find any revision candidates for package 'Maven:com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava' with VcsInfo(type=Git, url=https://github.com/google/guava.git, revision=, path=).
2	Maven:com.google.j2objc:j2objc-annotations:1.3		Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT 2023-04-28T02:57:29.561143507Z [ERROR]: Downloader - Could not create file archive for 'Maven:com.google.j2objc:j2objc-annotations:1.3': DownloadException: Unable to initialize a Subversion working tree in '/tmp/ort-DefaultWorkingTreeCache7778956957120696258' from http://svn.sonatype.org/spice. Caused by: SVNException: svn: E175002: timed out waiting for server svn: E175002: OPTIONS request failed on '/spice' Caused by: SocketTimeoutException: Connect timed out
3	Maven:org.sonatype.plexus:plexus-cipher:1.4		Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT 2023-04-28T02:53:28.611940838Z [ERROR]: Downloader - Could not create file archive for 'Maven:org.sonatype.plexus:plexus-cipher:1.4': DownloadException: Unable to initialize a Subversion working tree in '/tmp/ort-DefaultWorkingTreeCache15501175936834069721' from http://svn.sonatype.org/spice. Caused by: SVNException: svn: E175002: timed out waiting for server svn: E175002: OPTIONS request failed on '/spice' Caused by: SocketTimeoutException: Connect timed out
4	NPM::productpass-consumer-ui:0.5.2	NPM::productpass-consumer-ui:0.5.2 2023-04-28T02:36:24.598063887Z [ERROR]: NPM - code ERESOLVE ERESOLVE could not resolve While resolving: cypress-keycloak@1.9.0 Found: cypress@12.5.1 node_modules/cypress dev cypress@"^12.3.0" from the root project Could not resolve dependency: peer cypress@"^6.5.0 \|\| ^7.0.0 \|\| ^8.0.0 \|\| ^9.0.0 \|\| ^10.0.0" from cypress-keycloak@1.9.0 node_modules/cypress-keycloak dev cypress-keycloak@"^1.9.0" from the root project Conflicting peer dependency: cypress@10.11.0 node_modules/cypress peer cypress@"^6.5.0 \|\| ^7.0.0 \|\| ^8.0.0 \|\| ^9.0.0 \|\| ^10.0.0" from cypress-keycloak@1.9.0 node_modules/cypress-keycloak dev cypress-keycloak@"^1.9.0" from the root project Fix the upstream dependency conflict, or retry this command with --force, or --legacy-peer-deps to accept an incorrect (and potentially broken) dependency resolution. See /home/ort/.npm/eresolve-report.txt for a full report.

Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT (consumer-backend/productpass/pom.xml)

VCS Information

Type	Git
URL	https://github.com/eclipse-tractusx/digital-product-pass.git
Path	consumer-backend/productpass
Revision	9717c3ce29b1bd688cb20c951a7543a52d0fc4bc

Packages

#	Package	Scopes	Licenses	Scanner Issues
1	Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT		Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 270 locations) EPL-2.0 (exemplary link to the first of 2 locations) NOASSERTION (exemplary link to the first of 2 locations) Effective License: Apache-2.0 AND EPL-2.0 AND NOASSERTION OR Apache-2.0 AND NOASSERTION
2	Maven:ch.qos.logback:logback-classic:1.4.6	compile	Declared Licenses: EPL-1.0 LGPL-2.1-or-later Detected Licenses (from VCS): Apache-2.0 (link to the location) EPL-1.0 (exemplary link to the first of 1068 locations) LGPL-2.0-or-later (link to the location) LGPL-2.1-only (exemplary link to the first of 1074 locations) LicenseRef-scancode-iso-8879 (exemplary link to the first of 3 locations) Effective License: Apache-2.0 AND EPL-1.0 AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LicenseRef-scancode-iso-8879 OR Apache-2.0 AND EPL-1.0 AND LGPL-2.0-or-later AND LGPL-2.1-only AND LicenseRef-scancode-iso-8879
3	Maven:ch.qos.logback:logback-core:1.4.6	compile	Declared Licenses: EPL-1.0 LGPL-2.1-or-later Detected Licenses (from VCS): Apache-2.0 (link to the location) EPL-1.0 (exemplary link to the first of 1068 locations) LGPL-2.0-or-later (link to the location) LGPL-2.1-only (exemplary link to the first of 1074 locations) LicenseRef-scancode-iso-8879 (exemplary link to the first of 3 locations) Effective License: Apache-2.0 AND EPL-1.0 AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LicenseRef-scancode-iso-8879 OR Apache-2.0 AND EPL-1.0 AND LGPL-2.0-or-later AND LGPL-2.1-only AND LicenseRef-scancode-iso-8879
4	Maven:com.fasterxml.jackson.core:jackson-annotations:2.14.2	compile	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 3 locations) NOASSERTION (exemplary link to the first of 2 locations) Effective License: Apache-2.0 AND NOASSERTION
5	Maven:com.fasterxml.jackson.core:jackson-core:2.14.2	compile	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 22 locations) GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 3 locations) NOASSERTION (exemplary link to the first of 2 locations) Effective License: Apache-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND NOASSERTION
6	Maven:com.fasterxml.jackson.core:jackson-databind:2.14.2	compile	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 6 locations) NOASSERTION (exemplary link to the first of 2 locations) Effective License: Apache-2.0 AND NOASSERTION
7	Maven:com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.14.2	compile	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (link to the location) NOASSERTION (exemplary link to the first of 2 locations) Effective License: Apache-2.0 AND NOASSERTION
8	Maven:com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.14.2	compile	Declared Licenses: Apache-2.0 Effective License: Apache-2.0
9	Maven:com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.14.2	compile	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 27 locations) Effective License: Apache-2.0
10	Maven:com.fasterxml.jackson.module:jackson-module-parameter-names:2.14.2	compile	Declared Licenses: Apache-2.0 Effective License: Apache-2.0
11	Maven:com.github.stephenc.jcip:jcip-annotations:1.0-1	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 9 locations) CC-BY-2.5 (link to the location) Effective License: Apache-2.0
12	Maven:com.google.code.findbugs:jsr305:3.0.2	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from artifact): CC-BY-2.5 (exemplary link to the first of 4 locations) Effective License: Apache-2.0
13	Maven:com.google.code.gson:gson:2.10	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 203 locations) Effective License: Apache-2.0
14	Maven:com.google.errorprone:error_prone_annotations:2.11.0	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 2220 locations) EPL-1.0 (exemplary link to the first of 3 locations) GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 3 locations) ICU (link to the location) NOASSERTION (exemplary link to the first of 2 locations) Effective License: Apache-2.0 AND EPL-1.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND ICU AND NOASSERTION
15	Maven:com.google.guava:failureaccess:1.0.1	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 3157 locations) CC-PDDC (exemplary link to the first of 2 locations) CC0-1.0 (exemplary link to the first of 26 locations) LicenseRef-scancode-public-domain (exemplary link to the first of 11 locations) NOASSERTION (link to the location) Effective License: Apache-2.0
16	Maven:com.google.guava:guava:31.1-jre	compile	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 612 locations) CC-PDDC (link to the location) CC0-1.0 (exemplary link to the first of 7 locations) LicenseRef-scancode-public-domain (exemplary link to the first of 4 locations) Effective License: Apache-2.0 AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-public-domain
17	Maven:com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Effective License: Apache-2.0	2023-04-28T02:39:31.391463464Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava': IOException: Could not resolve provenance for 'Maven:com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava' for source code origins [VCS, ARTIFACT]. Resolution of VCS failed with: IOException: Could not resolve revision for package 'Maven:com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava' with VcsInfo(type=Git, url=https://github.com/google/guava.git, revision=, path=): Could not find any revision candidates for package 'Maven:com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava' with VcsInfo(type=Git, url=https://github.com/google/guava.git, revision=, path=).
18	Maven:com.google.j2objc:j2objc-annotations:1.3	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 LicenseRef-scancode-iso-8879 NOASSERTION Effective License: Apache-2.0	2023-04-28T02:57:29.561143507Z [ERROR]: Downloader - Could not create file archive for 'Maven:com.google.j2objc:j2objc-annotations:1.3': DownloadException: Unable to initialize a Subversion working tree in '/tmp/ort-DefaultWorkingTreeCache7778956957120696258' from http://svn.sonatype.org/spice. Caused by: SVNException: svn: E175002: timed out waiting for server svn: E175002: OPTIONS request failed on '/spice' Caused by: SocketTimeoutException: Connect timed out
19	Maven:com.jayway.jsonpath:json-path:2.7.0	test	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 61 locations) BSD-3-Clause (exemplary link to the first of 10 locations) MIT (link to the location) Effective License: Apache-2.0 AND BSD-3-Clause AND MIT
20	Maven:com.nimbusds:content-type:2.2	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 5 locations) Effective License: Apache-2.0
21	Maven:com.nimbusds:lang-tag:1.7	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 11 locations) Effective License: Apache-2.0
22	Maven:com.nimbusds:nimbus-jose-jwt:9.24.4	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 402 locations) Effective License: Apache-2.0
23	Maven:com.nimbusds:oauth2-oidc-sdk:9.43.1	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 827 locations) NOASSERTION (link to the location) Effective License: Apache-2.0 AND NOASSERTION
24	Maven:com.opencsv:opencsv:5.7.1	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 LGPL-3.0-only NOASSERTION Effective License: Apache-2.0 AND LGPL-3.0-only AND NOASSERTION OR Apache-2.0 AND NOASSERTION
25	Maven:com.vaadin.external.google:android-json:0.0.20131108.vaadin1	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 6 locations) Effective License: Apache-2.0
26	Maven:commons-beanutils:commons-beanutils:1.9.4	compile	Declared Licenses: Apache-2.0 Effective License: Apache-2.0
27	Maven:commons-collections:commons-collections:3.2.2	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Effective License: Apache-2.0
28	Maven:commons-lang:commons-lang:2.6	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Effective License: Apache-2.0
29	Maven:commons-logging:commons-logging:1.2	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Effective License: Apache-2.0
30	Maven:io.github.classgraph:classgraph:4.8.149	compile	Declared Licenses: MIT Detected Licenses (from artifact): MIT (exemplary link to the first of 279 locations) Effective License: MIT
31	Maven:io.micrometer:micrometer-commons:1.10.5	compile	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 39 locations) MIT (exemplary link to the first of 4 locations) Effective License: Apache-2.0 AND MIT
32	Maven:io.micrometer:micrometer-observation:1.10.5	compile	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 34 locations) Effective License: Apache-2.0
33	Maven:io.netty:netty-buffer:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
34	Maven:io.netty:netty-codec:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
35	Maven:io.netty:netty-codec-dns:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
36	Maven:io.netty:netty-codec-http:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
37	Maven:io.netty:netty-codec-http2:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
38	Maven:io.netty:netty-codec-socks:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
39	Maven:io.netty:netty-common:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
40	Maven:io.netty:netty-handler:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
41	Maven:io.netty:netty-handler-proxy:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
42	Maven:io.netty:netty-resolver:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
43	Maven:io.netty:netty-resolver-dns:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
44	Maven:io.netty:netty-resolver-dns-classes-macos:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
45	Maven:io.netty:netty-resolver-dns-native-macos:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
46	Maven:io.netty:netty-transport:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
47	Maven:io.netty:netty-transport-classes-epoll:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
48	Maven:io.netty:netty-transport-native-epoll:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
49	Maven:io.netty:netty-transport-native-unix-common:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
50	Maven:io.projectreactor:reactor-core:3.5.4	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 979 locations) BSD-3-Clause (exemplary link to the first of 4 locations) MIT (exemplary link to the first of 2 locations) NOASSERTION (link to the location) Effective License: Apache-2.0 AND BSD-3-Clause AND MIT AND NOASSERTION
51	Maven:io.projectreactor.netty:reactor-netty-core:1.1.5	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 580 locations) BSD-3-Clause (exemplary link to the first of 4 locations) MIT (exemplary link to the first of 2 locations) NOASSERTION (link to the location) Effective License: Apache-2.0 AND BSD-3-Clause AND MIT AND NOASSERTION
52	Maven:io.projectreactor.netty:reactor-netty-http:1.1.5	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 580 locations) BSD-3-Clause (exemplary link to the first of 4 locations) MIT (exemplary link to the first of 2 locations) NOASSERTION (link to the location) Effective License: Apache-2.0 AND BSD-3-Clause AND MIT AND NOASSERTION
53	Maven:io.swagger.core.v3:swagger-annotations-jakarta:2.2.7	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 4 locations) Effective License: Apache-2.0
54	Maven:io.swagger.core.v3:swagger-core-jakarta:2.2.7	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 4 locations) Effective License: Apache-2.0
55	Maven:io.swagger.core.v3:swagger-models-jakarta:2.2.7	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 4 locations) Effective License: Apache-2.0
56	Maven:jakarta.activation:jakarta.activation-api:2.1.1	test	Declared Licenses: BSD-3-Clause Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 4 locations) BSD-3-Clause (exemplary link to the first of 69 locations) EPL-2.0 (exemplary link to the first of 4 locations) GPL-2.0-only (link to the location) GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 3 locations) LicenseRef-scancode-public-domain (exemplary link to the first of 2 locations) MIT (exemplary link to the first of 2 locations) NOASSERTION (exemplary link to the first of 2 locations) NOASSERTION WITH Classpath-exception-2.0 (exemplary link to the first of 2 locations) OFL-1.1 (link to the location) Effective License: Apache-2.0 AND BSD-3-Clause AND EPL-2.0 AND GPL-2.0-only AND GPL-2.0-only WITH Classpath-exception-2.0 AND LicenseRef-scancode-public-domain AND MIT AND NOASSERTION AND NOASSERTION WITH Classpath-exception-2.0 AND OFL-1.1
57	Maven:jakarta.annotation:jakarta.annotation-api:2.1.1	compile	Declared Licenses: EPL-2.0 GPL-2.0-only WITH Classpath-exception-2.0 Detected Licenses (from VCS): CDDL-1.0 (link to the location) EPL-2.0 (exemplary link to the first of 27 locations) GPL-2.0-only (link to the location) GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 26 locations) LicenseRef-scancode-efsl-1.0 (exemplary link to the first of 2 locations) NOASSERTION (link to the location) NOASSERTION WITH Classpath-exception-2.0 (link to the location) Effective License: CDDL-1.0 AND EPL-2.0 AND GPL-2.0-only AND GPL-2.0-only WITH Classpath-exception-2.0 AND LicenseRef-scancode-efsl-1.0 AND NOASSERTION AND NOASSERTION WITH Classpath-exception-2.0
58	Maven:jakarta.servlet:jakarta.servlet-api:6.0.0	provided	Declared Licenses: EPL-2.0 GPL-2.0-only WITH Classpath-exception-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 46 locations) CDDL-1.0 (exemplary link to the first of 2 locations) EPL-2.0 (exemplary link to the first of 95 locations) GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 93 locations) NOASSERTION WITH Classpath-exception-2.0 (exemplary link to the first of 2 locations) Effective License: Apache-2.0 AND CDDL-1.0 AND EPL-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND NOASSERTION WITH Classpath-exception-2.0
59	Maven:jakarta.validation:jakarta.validation-api:3.0.2	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 233 locations) EPL-2.0 (link to the location) LicenseRef-scancode-efsl-1.0 (link to the location) LicenseRef-scancode-proprietary-license (link to the location) NOASSERTION (link to the location) Effective License: Apache-2.0 AND EPL-2.0 AND LicenseRef-scancode-efsl-1.0 AND LicenseRef-scancode-proprietary-license AND NOASSERTION OR Apache-2.0 AND LicenseRef-scancode-efsl-1.0 AND LicenseRef-scancode-proprietary-license AND NOASSERTION
60	Maven:jakarta.xml.bind:jakarta.xml.bind-api:4.0.0	test	Declared Licenses: BSD-3-Clause Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 2 locations) BSD-3-Clause (exemplary link to the first of 279 locations) EPL-1.0 (exemplary link to the first of 2 locations) EPL-2.0 (exemplary link to the first of 6 locations) GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 6 locations) LicenseRef-scancode-efsl-1.0 (exemplary link to the first of 3 locations) MIT (link to the location) NOASSERTION (exemplary link to the first of 4 locations) Effective License: Apache-2.0 AND BSD-3-Clause AND EPL-1.0 AND EPL-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND LicenseRef-scancode-efsl-1.0 AND MIT AND NOASSERTION
61	Maven:junit:junit:4.13.2	test	Concluded License: EPL-2.0 Declared Licenses: EPL-1.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 4 locations) EPL-1.0 (exemplary link to the first of 5 locations) EPL-2.0 (link to the location) NOASSERTION (link to the location) Effective License: EPL-2.0
62	Maven:net.bytebuddy:byte-buddy:1.12.23	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 318 locations) BSD-3-Clause (exemplary link to the first of 47 locations) NOASSERTION (link to the location) Effective License: Apache-2.0 AND BSD-3-Clause AND NOASSERTION
63	Maven:net.bytebuddy:byte-buddy-agent:1.12.23	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 12 locations) Effective License: Apache-2.0
64	Maven:net.minidev:accessors-smart:2.4.9	test	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 44 locations) Effective License: Apache-2.0
65	Maven:net.minidev:json-smart:2.4.10	test	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 44 locations) Effective License: Apache-2.0
66	Maven:org.apache.commons:commons-collections4:4.4	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 NOASSERTION Effective License: Apache-2.0 AND NOASSERTION
67	Maven:org.apache.commons:commons-lang3:3.12.0	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-1.1 Apache-2.0 NOASSERTION Effective License: Apache-1.1 AND Apache-2.0 AND NOASSERTION
68	Maven:org.apache.commons:commons-text:1.10.0	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 GPL-2.0-only GPL-2.0-only WITH Classpath-exception-2.0 LGPL-2.1-only NOASSERTION Effective License: Apache-2.0 AND GPL-2.0-only AND GPL-2.0-only WITH Classpath-exception-2.0 AND LGPL-2.1-only AND NOASSERTION
69	Maven:org.apache.logging.log4j:log4j-api:2.19.0	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 LGPL-2.0-or-later MIT MPL-2.0 NOASSERTION Effective License: Apache-2.0 AND LGPL-2.0-or-later AND MIT AND MPL-2.0 AND NOASSERTION
70	Maven:org.apache.logging.log4j:log4j-core:2.19.0	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 LGPL-2.0-or-later MIT MPL-2.0 NOASSERTION Effective License: Apache-2.0 AND LGPL-2.0-or-later AND MIT AND MPL-2.0 AND NOASSERTION
71	Maven:org.apache.logging.log4j:log4j-to-slf4j:2.19.0	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 LGPL-2.0-or-later MIT MPL-2.0 NOASSERTION Effective License: Apache-2.0
72	Maven:org.apache.tomcat.embed:tomcat-embed-core:10.1.7	compile	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 1408 locations) CC0-1.0 (link to the location) CDDL-1.0 (exemplary link to the first of 11 locations) CDDL-1.1 (exemplary link to the first of 11 locations) EPL-2.0 (exemplary link to the first of 15 locations) GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 35 locations) LicenseRef-scancode-public-domain (link to the location) NOASSERTION (link to the location) W3C (exemplary link to the first of 10 locations) Effective License: Apache-2.0 AND CC0-1.0 AND CDDL-1.0 AND CDDL-1.1 AND EPL-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND LicenseRef-scancode-public-domain AND NOASSERTION AND W3C
73	Maven:org.apache.tomcat.embed:tomcat-embed-el:10.1.7	compile	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 124 locations) Effective License: Apache-2.0
74	Maven:org.apache.tomcat.embed:tomcat-embed-websocket:10.1.7	compile	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 140 locations) Effective License: Apache-2.0
75	Maven:org.apiguardian:apiguardian-api:1.1.2	test	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 5 locations) Effective License: Apache-2.0
76	Maven:org.assertj:assertj-core:3.23.1	test	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 4748 locations) LGPL-3.0-or-later (exemplary link to the first of 2 locations) Effective License: Apache-2.0 AND LGPL-3.0-or-later
77	Maven:org.atteo:evo-inflector:1.3	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 7 locations) GPL-1.0-or-later (link to the location) Effective License: Apache-2.0 AND GPL-1.0-or-later
78	Maven:org.bouncycastle:bcpkix-jdk15on:1.69	compile	Declared Licenses: MIT Effective License: MIT
79	Maven:org.bouncycastle:bcprov-jdk15on:1.69	compile	Declared Licenses: MIT Effective License: MIT
80	Maven:org.bouncycastle:bcutil-jdk15on:1.69	compile	Declared Licenses: MIT Effective License: MIT
81	Maven:org.checkerframework:checker-qual:3.12.0	compile	Declared Licenses: MIT Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 22 locations) GPL-1.0-or-later (exemplary link to the first of 6 locations) GPL-2.0-only (exemplary link to the first of 4 locations) GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 8 locations) GPL-2.0-or-later WITH Classpath-exception-2.0 (link to the location) LGPL-2.0-or-later (exemplary link to the first of 2 locations) LPPL-1.3c (exemplary link to the first of 3 locations) LicenseRef-scancode-proprietary-license (link to the location) LicenseRef-scancode-public-domain (link to the location) MIT (exemplary link to the first of 16 locations) NOASSERTION (exemplary link to the first of 3 locations) OpenSSL (exemplary link to the first of 3 locations) Effective License: Apache-2.0 AND GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-only WITH Classpath-exception-2.0 AND GPL-2.0-or-later WITH Classpath-exception-2.0 AND LGPL-2.0-or-later AND LPPL-1.3c AND LicenseRef-scancode-proprietary-license AND LicenseRef-scancode-public-domain AND MIT AND NOASSERTION AND OpenSSL
82	Maven:org.codehaus.plexus:plexus-utils:3.2.1	compile	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-1.1 (exemplary link to the first of 10 locations) Apache-2.0 (exemplary link to the first of 69 locations) BSD-2-Clause (link to the location) BSD-3-Clause (exemplary link to the first of 4 locations) LicenseRef-scancode-indiana-extreme (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) NOASSERTION (link to the location) SAX-PD (exemplary link to the first of 4 locations) xpp (link to the location) Effective License: Apache-1.1 AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND LicenseRef-scancode-indiana-extreme AND LicenseRef-scancode-public-domain AND NOASSERTION AND SAX-PD AND xpp
83	Maven:org.hamcrest:hamcrest:2.2	test	Declared Licenses: BSD-3-Clause Effective License: BSD-3-Clause
84	Maven:org.hamcrest:hamcrest-core:2.2	test	Declared Licenses: BSD-3-Clause Effective License: BSD-3-Clause
85	Maven:org.junit.jupiter:junit-jupiter:5.9.2	test	Concluded License: EPL-2.0 Declared Licenses: EPL-2.0 Effective License: EPL-2.0
86	Maven:org.junit.jupiter:junit-jupiter-api:5.9.2	test	Declared Licenses: EPL-2.0 Effective License: EPL-2.0
87	Maven:org.junit.jupiter:junit-jupiter-engine:5.9.2	test	Declared Licenses: EPL-2.0 Effective License: EPL-2.0
88	Maven:org.junit.jupiter:junit-jupiter-params:5.9.2	test	Declared Licenses: EPL-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 9 locations) BSD-3-Clause (link to the location) EPL-1.0 (link to the location) EPL-2.0 (exemplary link to the first of 1284 locations) MIT (exemplary link to the first of 2 locations) NOASSERTION (exemplary link to the first of 27 locations) Unlicense (link to the location) Effective License: Apache-2.0 AND BSD-3-Clause AND EPL-1.0 AND EPL-2.0 AND MIT AND NOASSERTION AND Unlicense OR Apache-2.0 AND EPL-1.0 AND EPL-2.0 AND MIT AND NOASSERTION AND Unlicense
89	Maven:org.junit.platform:junit-platform-commons:1.9.2	test	Declared Licenses: EPL-2.0 Effective License: EPL-2.0
90	Maven:org.junit.platform:junit-platform-engine:1.9.2	test	Declared Licenses: EPL-2.0 Effective License: EPL-2.0
91	Maven:org.mockito:mockito-core:4.8.1	test	Declared Licenses: MIT Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 5 locations) BSD-3-Clause (exemplary link to the first of 4 locations) CC-BY-SA-4.0 (exemplary link to the first of 2 locations) MIT (exemplary link to the first of 975 locations) NOASSERTION (link to the location) Effective License: Apache-2.0 AND BSD-3-Clause AND CC-BY-SA-4.0 AND MIT AND NOASSERTION
92	Maven:org.mockito:mockito-junit-jupiter:4.8.1	test	Declared Licenses: MIT Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 5 locations) BSD-3-Clause (exemplary link to the first of 4 locations) CC-BY-SA-4.0 (exemplary link to the first of 2 locations) MIT (exemplary link to the first of 975 locations) NOASSERTION (link to the location) Effective License: Apache-2.0 AND BSD-3-Clause AND CC-BY-SA-4.0 AND MIT AND NOASSERTION
93	Maven:org.objenesis:objenesis:3.2	test	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 154 locations) MIT (exemplary link to the first of 2 locations) Effective License: Apache-2.0 AND MIT
94	Maven:org.opentest4j:opentest4j:1.2.0	test	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 17 locations) LicenseRef-scancode-commercial-license (exemplary link to the first of 2 locations) NOASSERTION (exemplary link to the first of 2 locations) Effective License: Apache-2.0 AND LicenseRef-scancode-commercial-license AND NOASSERTION
95	Maven:org.ow2.asm:asm:9.3	test	Declared Licenses: BSD-3-Clause Detected Licenses (from VCS): BSD-3-Clause NOASSERTION Effective License: BSD-3-Clause AND NOASSERTION
96	Maven:org.reactivestreams:reactive-streams:1.0.4	compile	Declared Licenses: MIT-0 Detected Licenses (from artifact): MIT (exemplary link to the first of 5 locations) MIT-0 (exemplary link to the first of 5 locations) Effective License: MIT AND MIT-0
97	Maven:org.skyscreamer:jsonassert:1.5.1	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 19 locations) Effective License: Apache-2.0
98	Maven:org.slf4j:jul-to-slf4j:2.0.7	compile	Concluded License: MIT Declared Licenses: MIT Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 44 locations) ICU (exemplary link to the first of 3 locations) LGPL-2.1-only (exemplary link to the first of 2 locations) LicenseRef-scancode-dco-1.1 (link to the location) MIT (exemplary link to the first of 182 locations) Effective License: MIT
99	Maven:org.slf4j:slf4j-api:2.0.7	compile	Declared Licenses: MIT Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 44 locations) ICU (exemplary link to the first of 3 locations) LGPL-2.1-only (exemplary link to the first of 2 locations) LicenseRef-scancode-dco-1.1 (link to the location) MIT (exemplary link to the first of 182 locations) Effective License: Apache-2.0 AND ICU AND LGPL-2.1-only AND LicenseRef-scancode-dco-1.1 AND MIT
100	Maven:org.sonarsource.scanner.api:sonar-scanner-api:2.16.2.588	compile	Concluded License: LGPL-3.0-or-later Detected Licenses (from artifact): GPL-3.0-or-later (exemplary link to the first of 2 locations) LGPL-2.1-or-later (exemplary link to the first of 28 locations) LGPL-3.0-or-later (link to the location) Effective License: LGPL-3.0-or-later
101	Maven:org.sonarsource.scanner.maven:sonar-maven-plugin:3.9.1.2184	compile	Concluded License: LGPL-3.0-or-later Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 449 locations) GPL-3.0-or-later (exemplary link to the first of 2 locations) LGPL-2.0-or-later (link to the location) LGPL-2.1-or-later (exemplary link to the first of 25 locations) LGPL-3.0-only (exemplary link to the first of 2 locations) LicenseRef-scancode-mattkruse (exemplary link to the first of 2 locations) LicenseRef-scancode-proprietary-license (link to the location) MIT (link to the location) NOASSERTION (exemplary link to the first of 2 locations) Effective License: LGPL-3.0-or-later
102	Maven:org.sonatype.plexus:plexus-cipher:1.4	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-1.0 Apache-1.1 Apache-2.0 BSD-3-Clause BSD-4-Clause GPL-1.0-or-later LicenseRef-scancode-lucre NOASSERTION NOASSERTION WITH Classpath-exception-2.0 Effective License: Apache-2.0	2023-04-28T02:53:28.611940838Z [ERROR]: Downloader - Could not create file archive for 'Maven:org.sonatype.plexus:plexus-cipher:1.4': DownloadException: Unable to initialize a Subversion working tree in '/tmp/ort-DefaultWorkingTreeCache15501175936834069721' from http://svn.sonatype.org/spice. Caused by: SVNException: svn: E175002: timed out waiting for server svn: E175002: OPTIONS request failed on '/spice' Caused by: SocketTimeoutException: Connect timed out
103	Maven:org.sonatype.plexus:plexus-sec-dispatcher:1.4	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 6 locations) Effective License: Apache-2.0
104	Maven:org.springdoc:springdoc-openapi-starter-common:2.0.2	compile	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 147 locations) Effective License: Apache-2.0
105	Maven:org.springdoc:springdoc-openapi-starter-webmvc-api:2.0.2	compile	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 13 locations) Effective License: Apache-2.0
106	Maven:org.springdoc:springdoc-openapi-starter-webmvc-ui:2.0.2	compile	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 9 locations) Effective License: Apache-2.0
107	Maven:org.springframework:spring-aop:6.0.7	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 7708 locations) BSD-3-Clause (exemplary link to the first of 34 locations) LicenseRef-scancode-iso-8879 (exemplary link to the first of 3 locations) LicenseRef-scancode-public-domain (link to the location) NOASSERTION (exemplary link to the first of 4 locations) Effective License: Apache-2.0 AND BSD-3-Clause AND LicenseRef-scancode-iso-8879 AND LicenseRef-scancode-public-domain AND NOASSERTION
108	Maven:org.springframework:spring-beans:6.0.7	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 7708 locations) BSD-3-Clause (exemplary link to the first of 34 locations) LicenseRef-scancode-iso-8879 (exemplary link to the first of 3 locations) LicenseRef-scancode-public-domain (link to the location) NOASSERTION (exemplary link to the first of 4 locations) Effective License: Apache-2.0 AND BSD-3-Clause AND LicenseRef-scancode-iso-8879 AND LicenseRef-scancode-public-domain AND NOASSERTION
109	Maven:org.springframework:spring-context:6.0.7	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 7708 locations) BSD-3-Clause (exemplary link to the first of 34 locations) LicenseRef-scancode-iso-8879 (exemplary link to the first of 3 locations) LicenseRef-scancode-public-domain (link to the location) NOASSERTION (exemplary link to the first of 4 locations) Effective License: Apache-2.0 AND BSD-3-Clause AND LicenseRef-scancode-iso-8879 AND LicenseRef-scancode-public-domain AND NOASSERTION
110	Maven:org.springframework:spring-core:6.0.7	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 7708 locations) BSD-3-Clause (exemplary link to the first of 34 locations) LicenseRef-scancode-iso-8879 (exemplary link to the first of 3 locations) LicenseRef-scancode-public-domain (link to the location) NOASSERTION (exemplary link to the first of 4 locations) Effective License: Apache-2.0 AND BSD-3-Clause AND LicenseRef-scancode-iso-8879 AND LicenseRef-scancode-public-domain AND NOASSERTION
111	Maven:org.springframework:spring-expression:6.0.7	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 7708 locations) BSD-3-Clause (exemplary link to the first of 34 locations) LicenseRef-scancode-iso-8879 (exemplary link to the first of 3 locations) LicenseRef-scancode-public-domain (link to the location) NOASSERTION (exemplary link to the first of 4 locations) Effective License: Apache-2.0 AND BSD-3-Clause AND LicenseRef-scancode-iso-8879 AND LicenseRef-scancode-public-domain AND NOASSERTION
112	Maven:org.springframework:spring-jcl:6.0.7	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 7708 locations) BSD-3-Clause (exemplary link to the first of 34 locations) LicenseRef-scancode-iso-8879 (exemplary link to the first of 3 locations) LicenseRef-scancode-public-domain (link to the location) NOASSERTION (exemplary link to the first of 4 locations) Effective License: Apache-2.0 AND BSD-3-Clause AND LicenseRef-scancode-iso-8879 AND LicenseRef-scancode-public-domain AND NOASSERTION
113	Maven:org.springframework:spring-jdbc:6.0.7	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 7708 locations) BSD-3-Clause (exemplary link to the first of 34 locations) LicenseRef-scancode-iso-8879 (exemplary link to the first of 3 locations) LicenseRef-scancode-public-domain (link to the location) NOASSERTION (exemplary link to the first of 4 locations) Effective License: Apache-2.0 AND BSD-3-Clause AND LicenseRef-scancode-iso-8879 AND LicenseRef-scancode-public-domain AND NOASSERTION
114	Maven:org.springframework:spring-test:6.0.7	test	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 7708 locations) BSD-3-Clause (exemplary link to the first of 34 locations) LicenseRef-scancode-iso-8879 (exemplary link to the first of 3 locations) LicenseRef-scancode-public-domain (link to the location) NOASSERTION (exemplary link to the first of 4 locations) Effective License: Apache-2.0 AND BSD-3-Clause AND LicenseRef-scancode-iso-8879 AND LicenseRef-scancode-public-domain AND NOASSERTION
115	Maven:org.springframework:spring-tx:6.0.7	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 7708 locations) BSD-3-Clause (exemplary link to the first of 34 locations) LicenseRef-scancode-iso-8879 (exemplary link to the first of 3 locations) LicenseRef-scancode-public-domain (link to the location) NOASSERTION (exemplary link to the first of 4 locations) Effective License: Apache-2.0 AND BSD-3-Clause AND LicenseRef-scancode-iso-8879 AND LicenseRef-scancode-public-domain AND NOASSERTION
116	Maven:org.springframework:spring-web:6.0.7	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 7708 locations) BSD-3-Clause (exemplary link to the first of 34 locations) LicenseRef-scancode-iso-8879 (exemplary link to the first of 3 locations) LicenseRef-scancode-public-domain (link to the location) NOASSERTION (exemplary link to the first of 4 locations) Effective License: Apache-2.0 AND BSD-3-Clause AND LicenseRef-scancode-iso-8879 AND LicenseRef-scancode-public-domain AND NOASSERTION
117	Maven:org.springframework:spring-webflux:6.0.7	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 7708 locations) BSD-3-Clause (exemplary link to the first of 34 locations) LicenseRef-scancode-iso-8879 (exemplary link to the first of 3 locations) LicenseRef-scancode-public-domain (link to the location) NOASSERTION (exemplary link to the first of 4 locations) Effective License: Apache-2.0 AND BSD-3-Clause AND LicenseRef-scancode-iso-8879 AND LicenseRef-scancode-public-domain AND NOASSERTION
118	Maven:org.springframework:spring-webmvc:6.0.7	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 7708 locations) BSD-3-Clause (exemplary link to the first of 34 locations) LicenseRef-scancode-iso-8879 (exemplary link to the first of 3 locations) LicenseRef-scancode-public-domain (link to the location) NOASSERTION (exemplary link to the first of 4 locations) Effective License: Apache-2.0 AND BSD-3-Clause AND LicenseRef-scancode-iso-8879 AND LicenseRef-scancode-public-domain AND NOASSERTION
119	Maven:org.springframework.boot:spring-boot:3.0.5	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 6818 locations) BSD-3-Clause (exemplary link to the first of 4 locations) EPL-1.0 (exemplary link to the first of 6 locations) GPL-1.0-or-later (exemplary link to the first of 4 locations) GPL-2.0-only (link to the location) LGPL-2.0-or-later (exemplary link to the first of 2 locations) LicenseRef-scancode-proprietary-license (link to the location) MIT (exemplary link to the first of 7 locations) NOASSERTION (exemplary link to the first of 9 locations) Noweb (exemplary link to the first of 4 locations) Effective License: Apache-2.0 AND BSD-3-Clause AND EPL-1.0 AND GPL-1.0-or-later AND GPL-2.0-only AND LGPL-2.0-or-later AND LicenseRef-scancode-proprietary-license AND MIT AND NOASSERTION AND Noweb
120	Maven:org.springframework.boot:spring-boot-autoconfigure:3.0.5	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 6818 locations) BSD-3-Clause (exemplary link to the first of 4 locations) EPL-1.0 (exemplary link to the first of 6 locations) GPL-1.0-or-later (exemplary link to the first of 4 locations) GPL-2.0-only (link to the location) LGPL-2.0-or-later (exemplary link to the first of 2 locations) LicenseRef-scancode-proprietary-license (link to the location) MIT (exemplary link to the first of 7 locations) NOASSERTION (exemplary link to the first of 9 locations) Noweb (exemplary link to the first of 4 locations) Effective License: Apache-2.0 AND BSD-3-Clause AND EPL-1.0 AND GPL-1.0-or-later AND GPL-2.0-only AND LGPL-2.0-or-later AND LicenseRef-scancode-proprietary-license AND MIT AND NOASSERTION AND Noweb
121	Maven:org.springframework.boot:spring-boot-starter:3.0.5	compile	Declared Licenses: Apache-2.0 Effective License: Apache-2.0
122	Maven:org.springframework.boot:spring-boot-starter-data-rest:3.0.5	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Effective License: Apache-2.0
123	Maven:org.springframework.boot:spring-boot-starter-json:3.0.5	compile	Declared Licenses: Apache-2.0 Effective License: Apache-2.0
124	Maven:org.springframework.boot:spring-boot-starter-logging:3.0.5	compile	Declared Licenses: Apache-2.0 Effective License: Apache-2.0
125	Maven:org.springframework.boot:spring-boot-starter-oauth2-client:3.0.5	compile	Declared Licenses: Apache-2.0 Effective License: Apache-2.0
126	Maven:org.springframework.boot:spring-boot-starter-reactor-netty:3.0.5	compile	Declared Licenses: Apache-2.0 Effective License: Apache-2.0
127	Maven:org.springframework.boot:spring-boot-starter-security:3.0.2	compile	Declared Licenses: Apache-2.0 Effective License: Apache-2.0
128	Maven:org.springframework.boot:spring-boot-starter-test:3.0.5	test	Declared Licenses: Apache-2.0 Effective License: Apache-2.0
129	Maven:org.springframework.boot:spring-boot-starter-tomcat:3.0.5	compile	Declared Licenses: Apache-2.0 Effective License: Apache-2.0
130	Maven:org.springframework.boot:spring-boot-starter-web:3.0.2	compile	Declared Licenses: Apache-2.0 Effective License: Apache-2.0
131	Maven:org.springframework.boot:spring-boot-starter-webflux:3.0.5	compile	Declared Licenses: Apache-2.0 Effective License: Apache-2.0
132	Maven:org.springframework.boot:spring-boot-test:3.0.5	test	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 6818 locations) BSD-3-Clause (exemplary link to the first of 4 locations) EPL-1.0 (exemplary link to the first of 6 locations) GPL-1.0-or-later (exemplary link to the first of 4 locations) GPL-2.0-only (link to the location) LGPL-2.0-or-later (exemplary link to the first of 2 locations) LicenseRef-scancode-proprietary-license (link to the location) MIT (exemplary link to the first of 7 locations) NOASSERTION (exemplary link to the first of 9 locations) Noweb (exemplary link to the first of 4 locations) Effective License: Apache-2.0 AND BSD-3-Clause AND EPL-1.0 AND GPL-1.0-or-later AND GPL-2.0-only AND LGPL-2.0-or-later AND LicenseRef-scancode-proprietary-license AND MIT AND NOASSERTION AND Noweb
133	Maven:org.springframework.boot:spring-boot-test-autoconfigure:3.0.5	test	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 6818 locations) BSD-3-Clause (exemplary link to the first of 4 locations) EPL-1.0 (exemplary link to the first of 6 locations) GPL-1.0-or-later (exemplary link to the first of 4 locations) GPL-2.0-only (link to the location) LGPL-2.0-or-later (exemplary link to the first of 2 locations) LicenseRef-scancode-proprietary-license (link to the location) MIT (exemplary link to the first of 7 locations) NOASSERTION (exemplary link to the first of 9 locations) Noweb (exemplary link to the first of 4 locations) Effective License: Apache-2.0 AND BSD-3-Clause AND EPL-1.0 AND GPL-1.0-or-later AND GPL-2.0-only AND LGPL-2.0-or-later AND LicenseRef-scancode-proprietary-license AND MIT AND NOASSERTION AND Noweb
134	Maven:org.springframework.cloud:spring-cloud-commons:3.1.5	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 449 locations) NOASSERTION (exemplary link to the first of 4 locations) Effective License: Apache-2.0
135	Maven:org.springframework.cloud:spring-cloud-context:3.1.5	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 449 locations) NOASSERTION (exemplary link to the first of 4 locations) Effective License: Apache-2.0
136	Maven:org.springframework.cloud:spring-cloud-starter:3.1.5	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Effective License: Apache-2.0
137	Maven:org.springframework.cloud:spring-cloud-starter-bootstrap:3.1.5	compile	Declared Licenses: Apache-2.0 Effective License: Apache-2.0
138	Maven:org.springframework.data:spring-data-commons:3.0.4	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 911 locations) NOASSERTION (exemplary link to the first of 2 locations) Effective License: Apache-2.0 AND NOASSERTION
139	Maven:org.springframework.data:spring-data-rest-core:4.0.4	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 76 locations) Effective License: Apache-2.0
140	Maven:org.springframework.data:spring-data-rest-webmvc:4.0.4	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 114 locations) Effective License: Apache-2.0
141	Maven:org.springframework.hateoas:spring-hateoas:2.0.3	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 348 locations) NOASSERTION (exemplary link to the first of 2 locations) Effective License: Apache-2.0 AND NOASSERTION
142	Maven:org.springframework.plugin:spring-plugin-core:3.0.0	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 23 locations) NOASSERTION (exemplary link to the first of 2 locations) Effective License: Apache-2.0
143	Maven:org.springframework.security:spring-security-config:6.0.2	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 3482 locations) GPL-3.0-only (link to the location) ISC (exemplary link to the first of 2 locations) LicenseRef-scancode-bsd-original-uc-1986 (link to the location) LicenseRef-scancode-proprietary-license (exemplary link to the first of 2 locations) LicenseRef-scancode-public-domain (link to the location) NOASSERTION (exemplary link to the first of 7 locations) Effective License: Apache-2.0
144	Maven:org.springframework.security:spring-security-core:6.0.2	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 3482 locations) GPL-3.0-only (link to the location) ISC (exemplary link to the first of 2 locations) LicenseRef-scancode-bsd-original-uc-1986 (link to the location) LicenseRef-scancode-proprietary-license (exemplary link to the first of 2 locations) LicenseRef-scancode-public-domain (link to the location) NOASSERTION (exemplary link to the first of 7 locations) Effective License: Apache-2.0
145	Maven:org.springframework.security:spring-security-crypto:6.0.2	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 3482 locations) GPL-3.0-only (link to the location) ISC (exemplary link to the first of 2 locations) LicenseRef-scancode-bsd-original-uc-1986 (link to the location) LicenseRef-scancode-proprietary-license (exemplary link to the first of 2 locations) LicenseRef-scancode-public-domain (link to the location) NOASSERTION (exemplary link to the first of 7 locations) Effective License: Apache-2.0 AND GPL-3.0-only AND ISC AND LicenseRef-scancode-bsd-original-uc-1986 AND LicenseRef-scancode-proprietary-license AND LicenseRef-scancode-public-domain AND NOASSERTION
146	Maven:org.springframework.security:spring-security-oauth2-client:6.0.2	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 3482 locations) GPL-3.0-only (link to the location) ISC (exemplary link to the first of 2 locations) LicenseRef-scancode-bsd-original-uc-1986 (link to the location) LicenseRef-scancode-proprietary-license (exemplary link to the first of 2 locations) LicenseRef-scancode-public-domain (link to the location) NOASSERTION (exemplary link to the first of 7 locations) Effective License: Apache-2.0 AND GPL-3.0-only AND ISC AND LicenseRef-scancode-bsd-original-uc-1986 AND LicenseRef-scancode-proprietary-license AND LicenseRef-scancode-public-domain AND NOASSERTION
147	Maven:org.springframework.security:spring-security-oauth2-core:6.0.2	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 3482 locations) GPL-3.0-only (link to the location) ISC (exemplary link to the first of 2 locations) LicenseRef-scancode-bsd-original-uc-1986 (link to the location) LicenseRef-scancode-proprietary-license (exemplary link to the first of 2 locations) LicenseRef-scancode-public-domain (link to the location) NOASSERTION (exemplary link to the first of 7 locations) Effective License: Apache-2.0
148	Maven:org.springframework.security:spring-security-oauth2-jose:6.0.2	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 3482 locations) GPL-3.0-only (link to the location) ISC (exemplary link to the first of 2 locations) LicenseRef-scancode-bsd-original-uc-1986 (link to the location) LicenseRef-scancode-proprietary-license (exemplary link to the first of 2 locations) LicenseRef-scancode-public-domain (link to the location) NOASSERTION (exemplary link to the first of 7 locations) Effective License: Apache-2.0
149	Maven:org.springframework.security:spring-security-rsa:1.0.11.RELEASE	compile	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 7 locations) Effective License: Apache-2.0
150	Maven:org.springframework.security:spring-security-web:6.0.2	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 3482 locations) GPL-3.0-only (link to the location) ISC (exemplary link to the first of 2 locations) LicenseRef-scancode-bsd-original-uc-1986 (link to the location) LicenseRef-scancode-proprietary-license (exemplary link to the first of 2 locations) LicenseRef-scancode-public-domain (link to the location) NOASSERTION (exemplary link to the first of 7 locations) Effective License: Apache-2.0
151	Maven:org.springframework.session:spring-session-core:3.0.1	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 400 locations) NOASSERTION (exemplary link to the first of 2 locations) Effective License: Apache-2.0
152	Maven:org.springframework.session:spring-session-jdbc:3.0.1	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 400 locations) NOASSERTION (exemplary link to the first of 2 locations) Effective License: Apache-2.0
153	Maven:org.webjars:swagger-ui:4.15.5	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (link to the location) Effective License: Apache-2.0
154	Maven:org.webjars:webjars-locator-core:0.52	compile	Declared Licenses: MIT Detected Licenses (from VCS): GPL-2.0-or-later (link to the location) LGPL-2.1-or-later (link to the location) MIT (exemplary link to the first of 2 locations) MPL-1.1 (link to the location) Effective License: GPL-2.0-or-later AND MIT AND MPL-1.1 OR LGPL-2.1-or-later AND MIT
155	Maven:org.xmlunit:xmlunit-core:2.9.1	test	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 74 locations) Effective License: Apache-2.0
156	Maven:org.yaml:snakeyaml:2.0	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 654 locations) BSD-3-Clause (exemplary link to the first of 2 locations) EPL-1.0 (exemplary link to the first of 2 locations) GPL-2.0-or-later (exemplary link to the first of 2 locations) LGPL-2.1-or-later (exemplary link to the first of 2 locations) Effective License: Apache-2.0 AND BSD-3-Clause OR Apache-2.0 AND EPL-1.0 AND GPL-2.0-or-later AND LGPL-2.1-or-later

NPM::productpass-consumer-ui:0.5.2 (package.json)

VCS Information

Type	Git
URL	https://github.com/eclipse-tractusx/digital-product-pass.git
Path
Revision	9717c3ce29b1bd688cb20c951a7543a52d0fc4bc

Packages

#	Package	Scopes	Licenses	Analyzer Issues	Scanner Issues
1	NPM::productpass-consumer-ui:0.5.2		Detected Licenses (from VCS): 0BSD (exemplary link to the first of 3 locations) AFL-2.1 (link to the location) Apache-2.0 (exemplary link to the first of 854 locations) Artistic-2.0 (link to the location) BSD-2-Clause (exemplary link to the first of 19 locations) BSD-3-Clause (exemplary link to the first of 40 locations) CC-BY-4.0 (link to the location) CC0-1.0 (exemplary link to the first of 8 locations) CDDL-1.0 (link to the location) EPL-1.0 (exemplary link to the first of 3 locations) EPL-2.0 (exemplary link to the first of 22 locations) GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 4 locations) GPL-2.0-or-later (link to the location) ISC (Excluded: BUILD_TOOL_OF - Does not contain any license information.) (exemplary link to the first of 2 locations) LGPL-2.0-or-later (link to the location) LGPL-2.1-only (exemplary link to the first of 2 locations) LGPL-2.1-or-later (link to the location) LGPL-3.0-or-later (exemplary link to the first of 2 locations) MIT (Excluded: BUILD_TOOL_OF - Does not contain any license information.) (exemplary link to the first of 23 locations) NOASSERTION (exemplary link to the first of 9 locations) NOASSERTION WITH Classpath-exception-2.0 (link to the location) OFL-1.1 (exemplary link to the first of 2 locations) Unlicense (link to the location) W3C-20150513 (link to the location) Effective License: 0BSD AND AFL-2.1 AND Apache-2.0 AND Artistic-2.0 AND BSD-2-Clause AND BSD-3-Clause AND CC-BY-4.0 AND CC0-1.0 AND CDDL-1.0 AND EPL-1.0 AND EPL-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND NOASSERTION AND NOASSERTION WITH Classpath-exception-2.0 AND OFL-1.1 AND Unlicense AND W3C-20150513	2023-04-28T02:36:24.598063887Z [ERROR]: NPM - code ERESOLVE ERESOLVE could not resolve While resolving: cypress-keycloak@1.9.0 Found: cypress@12.5.1 node_modules/cypress dev cypress@"^12.3.0" from the root project Could not resolve dependency: peer cypress@"^6.5.0 \|\| ^7.0.0 \|\| ^8.0.0 \|\| ^9.0.0 \|\| ^10.0.0" from cypress-keycloak@1.9.0 node_modules/cypress-keycloak dev cypress-keycloak@"^1.9.0" from the root project Conflicting peer dependency: cypress@10.11.0 node_modules/cypress peer cypress@"^6.5.0 \|\| ^7.0.0 \|\| ^8.0.0 \|\| ^9.0.0 \|\| ^10.0.0" from cypress-keycloak@1.9.0 node_modules/cypress-keycloak dev cypress-keycloak@"^1.9.0" from the root project Fix the upstream dependency conflict, or retry this command with --force, or --legacy-peer-deps to accept an incorrect (and potentially broken) dependency resolution. See /home/ort/.npm/eresolve-report.txt for a full report.

Package

Scopes

Licenses

Analyzer Issues

Scanner Issues

NPM::productpass-consumer-ui:0.5.2

Detected Licenses (from VCS):

0BSD (exemplary link to the first of 3 locations)

AFL-2.1 (link to the location)

Apache-2.0 (exemplary link to the first of 854 locations)

Artistic-2.0 (link to the location)

BSD-2-Clause (exemplary link to the first of 19 locations)

BSD-3-Clause (exemplary link to the first of 40 locations)

CC-BY-4.0 (link to the location)

CC0-1.0 (exemplary link to the first of 8 locations)

CDDL-1.0 (link to the location)

EPL-1.0 (exemplary link to the first of 3 locations)

EPL-2.0 (exemplary link to the first of 22 locations)

GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 4 locations)

GPL-2.0-or-later (link to the location)

ISC (Excluded: BUILD_TOOL_OF - Does not contain any license information.) (exemplary link to the first of 2 locations)

LGPL-2.0-or-later (link to the location)

LGPL-2.1-only (exemplary link to the first of 2 locations)

LGPL-2.1-or-later (link to the location)

LGPL-3.0-or-later (exemplary link to the first of 2 locations)

MIT (Excluded: BUILD_TOOL_OF - Does not contain any license information.) (exemplary link to the first of 23 locations)

NOASSERTION (exemplary link to the first of 9 locations)

NOASSERTION WITH Classpath-exception-2.0 (link to the location)

OFL-1.1 (exemplary link to the first of 2 locations)

Unlicense (link to the location)

W3C-20150513 (link to the location)

Effective License:

0BSD AND AFL-2.1 AND Apache-2.0 AND Artistic-2.0 AND BSD-2-Clause AND BSD-3-Clause AND CC-BY-4.0 AND CC0-1.0 AND CDDL-1.0 AND EPL-1.0 AND EPL-2.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND NOASSERTION AND NOASSERTION WITH Classpath-exception-2.0 AND OFL-1.1 AND Unlicense AND W3C-20150513

2023-04-28T02:36:24.598063887Z [ERROR]: NPM - code ERESOLVE
ERESOLVE could not resolve
While resolving: cypress-keycloak@1.9.0
Found: cypress@12.5.1
node_modules/cypress
dev cypress@"^12.3.0" from the root project
Could not resolve dependency:
peer cypress@"^6.5.0 || ^7.0.0 || ^8.0.0 || ^9.0.0 || ^10.0.0" from cypress-keycloak@1.9.0
node_modules/cypress-keycloak
dev cypress-keycloak@"^1.9.0" from the root project
Conflicting peer dependency: cypress@10.11.0
node_modules/cypress
peer cypress@"^6.5.0 || ^7.0.0 || ^8.0.0 || ^9.0.0 || ^10.0.0" from cypress-keycloak@1.9.0
node_modules/cypress-keycloak
dev cypress-keycloak@"^1.9.0" from the root project
Fix the upstream dependency conflict, or retry
this command with --force, or --legacy-peer-deps
to accept an incorrect (and potentially broken) dependency resolution.
See /home/ort/.npm/eresolve-report.txt for a full report.

Repository Configuration


---
excludes:
  paths:
  - pattern: "**/META-INF/DEPENDENCIES"
    reason: "BUILD_TOOL_OF"
    comment: "Licenses contained in this directory reflect content analysed elsewhere."
  - pattern: "**/META-INF/NOTICE*"
    reason: "BUILD_TOOL_OF"
    comment: "Licenses contained in this directory reflect content analysed elsewhere."
  - pattern: "**/*.svg"
    reason: "BUILD_TOOL_OF"
    comment: "SVG files do not contain any license information."
  - pattern: "package-lock.json"
    reason: "BUILD_TOOL_OF"
    comment: "Does not contain any license information."

#	Rule	Package	License	Message
1	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:ch.qos.logback:logback-classic:1.4.6	DECLARED: EPL-1.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license EPL-1.0 of its dependency 'Maven:ch.qos.logback:logback-classic:1.4.6'. Software under a copyleft license such as the EPL-1.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:ch.qos.logback:logback-classic:1.4.6' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
2	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:ch.qos.logback:logback-classic:1.4.6	DETECTED: EPL-1.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license EPL-1.0 of its dependency 'Maven:ch.qos.logback:logback-classic:1.4.6'. Software under a copyleft license such as the EPL-1.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:ch.qos.logback:logback-classic:1.4.6' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
3	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:ch.qos.logback:logback-classic:1.4.6	DETECTED: LGPL-2.1-only	The outbound license Apache-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license LGPL-2.1-only of its dependency 'Maven:ch.qos.logback:logback-classic:1.4.6'. Software under a copyleft license such as the LGPL-2.1-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:ch.qos.logback:logback-classic:1.4.6' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
4	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:ch.qos.logback:logback-classic:1.4.6	DETECTED: LGPL-2.1-only	The outbound license EPL-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license LGPL-2.1-only of its dependency 'Maven:ch.qos.logback:logback-classic:1.4.6'. Software under a copyleft license such as the LGPL-2.1-only license normally cannot be redistributed under another copyleft license such as the EPL-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:ch.qos.logback:logback-classic:1.4.6' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
5	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:ch.qos.logback:logback-classic:1.4.6	DECLARED: LGPL-2.1-or-later	The outbound license Apache-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license LGPL-2.1-or-later of its dependency 'Maven:ch.qos.logback:logback-classic:1.4.6'. Software under a copyleft license such as the LGPL-2.1-or-later license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:ch.qos.logback:logback-classic:1.4.6' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
6	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:ch.qos.logback:logback-classic:1.4.6	DECLARED: LGPL-2.1-or-later	The outbound license EPL-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license LGPL-2.1-or-later of its dependency 'Maven:ch.qos.logback:logback-classic:1.4.6'. Software under a copyleft license such as the LGPL-2.1-or-later license normally cannot be redistributed under another copyleft license such as the EPL-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:ch.qos.logback:logback-classic:1.4.6' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
7	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:ch.qos.logback:logback-core:1.4.6	DECLARED: EPL-1.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license EPL-1.0 of its dependency 'Maven:ch.qos.logback:logback-core:1.4.6'. Software under a copyleft license such as the EPL-1.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:ch.qos.logback:logback-core:1.4.6' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
8	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:ch.qos.logback:logback-core:1.4.6	DETECTED: EPL-1.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license EPL-1.0 of its dependency 'Maven:ch.qos.logback:logback-core:1.4.6'. Software under a copyleft license such as the EPL-1.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:ch.qos.logback:logback-core:1.4.6' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
9	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:ch.qos.logback:logback-core:1.4.6	DETECTED: LGPL-2.1-only	The outbound license Apache-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license LGPL-2.1-only of its dependency 'Maven:ch.qos.logback:logback-core:1.4.6'. Software under a copyleft license such as the LGPL-2.1-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:ch.qos.logback:logback-core:1.4.6' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
10	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:ch.qos.logback:logback-core:1.4.6	DETECTED: LGPL-2.1-only	The outbound license EPL-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license LGPL-2.1-only of its dependency 'Maven:ch.qos.logback:logback-core:1.4.6'. Software under a copyleft license such as the LGPL-2.1-only license normally cannot be redistributed under another copyleft license such as the EPL-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:ch.qos.logback:logback-core:1.4.6' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
11	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:ch.qos.logback:logback-core:1.4.6	DECLARED: LGPL-2.1-or-later	The outbound license Apache-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license LGPL-2.1-or-later of its dependency 'Maven:ch.qos.logback:logback-core:1.4.6'. Software under a copyleft license such as the LGPL-2.1-or-later license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:ch.qos.logback:logback-core:1.4.6' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
12	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:ch.qos.logback:logback-core:1.4.6	DECLARED: LGPL-2.1-or-later	The outbound license EPL-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license LGPL-2.1-or-later of its dependency 'Maven:ch.qos.logback:logback-core:1.4.6'. Software under a copyleft license such as the LGPL-2.1-or-later license normally cannot be redistributed under another copyleft license such as the EPL-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:ch.qos.logback:logback-core:1.4.6' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
13	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:com.fasterxml.jackson.core:jackson-core:2.14.2	DETECTED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:com.fasterxml.jackson.core:jackson-core:2.14.2'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:com.fasterxml.jackson.core:jackson-core:2.14.2' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
14	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:com.fasterxml.jackson.core:jackson-core:2.14.2	DETECTED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license EPL-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:com.fasterxml.jackson.core:jackson-core:2.14.2'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under another copyleft license such as the EPL-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:com.fasterxml.jackson.core:jackson-core:2.14.2' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
15	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:com.google.errorprone:error_prone_annotations:2.11.0	DETECTED: EPL-1.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license EPL-1.0 of its dependency 'Maven:com.google.errorprone:error_prone_annotations:2.11.0'. Software under a copyleft license such as the EPL-1.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:com.google.errorprone:error_prone_annotations:2.11.0' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
16	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:com.google.errorprone:error_prone_annotations:2.11.0	DETECTED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:com.google.errorprone:error_prone_annotations:2.11.0'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:com.google.errorprone:error_prone_annotations:2.11.0' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
17	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:com.google.errorprone:error_prone_annotations:2.11.0	DETECTED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license EPL-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:com.google.errorprone:error_prone_annotations:2.11.0'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under another copyleft license such as the EPL-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:com.google.errorprone:error_prone_annotations:2.11.0' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
18	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:com.opencsv:opencsv:5.7.1	DETECTED: LGPL-3.0-only	The outbound license Apache-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license LGPL-3.0-only of its dependency 'Maven:com.opencsv:opencsv:5.7.1'. Software under a copyleft license such as the LGPL-3.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:com.opencsv:opencsv:5.7.1' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
19	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:com.opencsv:opencsv:5.7.1	DETECTED: LGPL-3.0-only	The outbound license EPL-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license LGPL-3.0-only of its dependency 'Maven:com.opencsv:opencsv:5.7.1'. Software under a copyleft license such as the LGPL-3.0-only license normally cannot be redistributed under another copyleft license such as the EPL-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:com.opencsv:opencsv:5.7.1' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
20	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.activation:jakarta.activation-api:2.1.1	DETECTED: EPL-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license EPL-2.0 of its dependency 'Maven:jakarta.activation:jakarta.activation-api:2.1.1'. Software under a copyleft license such as the EPL-2.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.activation:jakarta.activation-api:2.1.1' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
21	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.activation:jakarta.activation-api:2.1.1	DETECTED: GPL-2.0-only	The outbound license Apache-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only of its dependency 'Maven:jakarta.activation:jakarta.activation-api:2.1.1'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.activation:jakarta.activation-api:2.1.1' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
22	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.activation:jakarta.activation-api:2.1.1	DETECTED: GPL-2.0-only	The outbound license EPL-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only of its dependency 'Maven:jakarta.activation:jakarta.activation-api:2.1.1'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under another copyleft license such as the EPL-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.activation:jakarta.activation-api:2.1.1' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
23	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.activation:jakarta.activation-api:2.1.1	DETECTED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:jakarta.activation:jakarta.activation-api:2.1.1'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.activation:jakarta.activation-api:2.1.1' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
24	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.activation:jakarta.activation-api:2.1.1	DETECTED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license EPL-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:jakarta.activation:jakarta.activation-api:2.1.1'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under another copyleft license such as the EPL-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.activation:jakarta.activation-api:2.1.1' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
25	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.1	DETECTED: CDDL-1.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license CDDL-1.0 of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.1'. Software under a copyleft license such as the CDDL-1.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.1' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
26	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.1	DETECTED: CDDL-1.0	The outbound license EPL-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license CDDL-1.0 of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.1'. Software under a copyleft license such as the CDDL-1.0 license normally cannot be redistributed under another copyleft license such as the EPL-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.1' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
27	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.1	DECLARED: EPL-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license EPL-2.0 of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.1'. Software under a copyleft license such as the EPL-2.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.1' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
28	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.1	DETECTED: EPL-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license EPL-2.0 of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.1'. Software under a copyleft license such as the EPL-2.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.1' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
29	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.1	DETECTED: GPL-2.0-only	The outbound license Apache-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.1'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.1' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
30	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.1	DETECTED: GPL-2.0-only	The outbound license EPL-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.1'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under another copyleft license such as the EPL-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.1' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
31	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.1	DECLARED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.1'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.1' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
32	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.1	DETECTED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.1'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.1' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
33	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.1	DECLARED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license EPL-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.1'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under another copyleft license such as the EPL-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.1' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
34	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.1	DETECTED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license EPL-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.1'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under another copyleft license such as the EPL-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.1' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
35	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.servlet:jakarta.servlet-api:6.0.0	DETECTED: CDDL-1.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license CDDL-1.0 of its dependency 'Maven:jakarta.servlet:jakarta.servlet-api:6.0.0'. Software under a copyleft license such as the CDDL-1.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.servlet:jakarta.servlet-api:6.0.0' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
36	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.servlet:jakarta.servlet-api:6.0.0	DETECTED: CDDL-1.0	The outbound license EPL-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license CDDL-1.0 of its dependency 'Maven:jakarta.servlet:jakarta.servlet-api:6.0.0'. Software under a copyleft license such as the CDDL-1.0 license normally cannot be redistributed under another copyleft license such as the EPL-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.servlet:jakarta.servlet-api:6.0.0' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
37	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.servlet:jakarta.servlet-api:6.0.0	DECLARED: EPL-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license EPL-2.0 of its dependency 'Maven:jakarta.servlet:jakarta.servlet-api:6.0.0'. Software under a copyleft license such as the EPL-2.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.servlet:jakarta.servlet-api:6.0.0' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
38	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.servlet:jakarta.servlet-api:6.0.0	DETECTED: EPL-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license EPL-2.0 of its dependency 'Maven:jakarta.servlet:jakarta.servlet-api:6.0.0'. Software under a copyleft license such as the EPL-2.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.servlet:jakarta.servlet-api:6.0.0' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
39	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.servlet:jakarta.servlet-api:6.0.0	DECLARED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:jakarta.servlet:jakarta.servlet-api:6.0.0'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.servlet:jakarta.servlet-api:6.0.0' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.
40	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.servlet:jakarta.servlet-api:6.0.0	DETECTED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:jakarta.servlet:jakarta.servlet-api:6.0.0'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.servlet:jakarta.servlet-api:6.0.0' or put 'Maven:org.eclipse.tractusx:productpass:0.4.1-SNAPSHOT' under a different license.