Scan Report
Created by ORT, the OSS Review Toolkit, version cc543c9380-dirty on 2023-05-24T10:04:00.041849834Z.

Project

Scanned revision 632dc00030ba7a60982fa770908f14f88cf52727 of Git repository https://github.com/eclipse-ee4j/jaxr-ri.git

Index

Rule Violation Summary (2 errors, 0 warnings, 1 hints to resolve)

# Rule Package License Message
1 OSADL_PROJECT_LICENSE_COMPATIBILITY Maven:jakarta.xml.registry:jakarta.xml.registry-api:1.0.9 DECLARED: EPL-2.0

The outbound license BSD-3-Clause of project 'Maven:com.sun.xml.registry:jaxr-impl:1.0.9-SNAPSHOT' is incompatible with the inbound license EPL-2.0 of its dependency 'Maven:jakarta.xml.registry:jakarta.xml.registry-api:1.0.9'. Software under a copyleft license such as the EPL-2.0 license normally cannot be redistributed under a non-copyleft license such as the BSD-3-Clause license, except if it were explicitly permitted in the licenses.

How to fix

Remove the dependency on 'Maven:jakarta.xml.registry:jakarta.xml.registry-api:1.0.9' or put 'Maven:com.sun.xml.registry:jaxr-impl:1.0.9-SNAPSHOT' under a different license.
2 OSADL_PROJECT_LICENSE_COMPATIBILITY Maven:jakarta.xml.registry:jakarta.xml.registry-api:1.0.9 DECLARED: GPL-2.0-only WITH Classpath-exception-2.0

The outbound license BSD-3-Clause of project 'Maven:com.sun.xml.registry:jaxr-impl:1.0.9-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:jakarta.xml.registry:jakarta.xml.registry-api:1.0.9'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the BSD-3-Clause license, except if it were explicitly permitted in the licenses.

How to fix

Remove the dependency on 'Maven:jakarta.xml.registry:jakarta.xml.registry-api:1.0.9' or put 'Maven:com.sun.xml.registry:jaxr-impl:1.0.9-SNAPSHOT' under a different license.
3 DEPENDENCY_LICENSE_CHECK Maven:jakarta.xml.registry:jakarta.xml.registry-api:1.0.9 DECLARED: GPL-2.0-only WITH Classpath-exception-2.0

License GPL-2.0-only WITH Classpath-exception-2.0 of dependency 'Maven:jakarta.xml.registry:jakarta.xml.registry-api:1.0.9' is unclassified.

How to fix

Classify GPL-2.0-only WITH Classpath-exception-2.0 as either approved or restricted.

Issue Summary (4 errors, 0 warnings, 0 hints to resolve)

Issues from excluded components are not shown in this summary.

Packages

# Package Analyzer Issues Scanner Issues
1 Maven:com.sun.xml.registry:jaxr-impl:1.0.9-SNAPSHOT Maven:com.sun.xml.registry:jaxr-impl:1.0.9-SNAPSHOT

  • 2023-05-24T10:03:29.656753011Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:com.sun.xml.registry:jaxr-impl:1.0.9-SNAPSHOT': IOException: Could not resolve provenance for 'Maven:com.sun.xml.registry:jaxr-impl:1.0.9-SNAPSHOT' for source code origins [VCS, ARTIFACT].
    Resolution of VCS failed with:
    PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
    Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
2 Maven:jakarta.activation:jakarta.activation-api:1.2.1 Maven:com.sun.xml.registry:jaxr-impl:1.0.9-SNAPSHOT

  • 2023-05-24T10:03:35.739493990Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:jakarta.activation:jakarta.activation-api:1.2.1': IOException: Could not resolve provenance for 'Maven:jakarta.activation:jakarta.activation-api:1.2.1' for source code origins [VCS, ARTIFACT].
    Resolution of VCS failed with:
    PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
    Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
    Resolution of ARTIFACT failed with:
    PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
    Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
3 Maven:jakarta.xml.registry:jakarta.xml.registry-api:1.0.9 Maven:com.sun.xml.registry:jaxr-impl:1.0.9-SNAPSHOT

  • 2023-05-24T10:03:35.739444789Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:jakarta.xml.registry:jakarta.xml.registry-api:1.0.9': IOException: Could not resolve provenance for 'Maven:jakarta.xml.registry:jakarta.xml.registry-api:1.0.9' for source code origins [VCS, ARTIFACT].
    Resolution of VCS failed with:
    PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
    Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
    Resolution of ARTIFACT failed with:
    PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
    Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
4 Maven:jakarta.xml.soap:jakarta.xml.soap-api:1.4.1 Maven:com.sun.xml.registry:jaxr-impl:1.0.9-SNAPSHOT

  • 2023-05-24T10:03:35.739475589Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:jakarta.xml.soap:jakarta.xml.soap-api:1.4.1': IOException: Could not resolve provenance for 'Maven:jakarta.xml.soap:jakarta.xml.soap-api:1.4.1' for source code origins [VCS, ARTIFACT].
    Resolution of VCS failed with:
    PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
    Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
    Resolution of ARTIFACT failed with:
    PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
    Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"

Maven:com.sun.xml.registry:jaxr-impl:1.0.9-SNAPSHOT (pom.xml)

VCS Information

Type Git
URL https://github.com/eclipse-ee4j/jaxr-ri.git
Path
Revision 632dc00030ba7a60982fa770908f14f88cf52727

Packages

# Package Scopes Licenses Analyzer Issues Scanner Issues
1 Maven:com.sun.xml.registry:jaxr-impl:1.0.9-SNAPSHOT Declared Licenses:
Effective License:

    • 2023-05-24T10:03:29.656753011Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:com.sun.xml.registry:jaxr-impl:1.0.9-SNAPSHOT': IOException: Could not resolve provenance for 'Maven:com.sun.xml.registry:jaxr-impl:1.0.9-SNAPSHOT' for source code origins [VCS, ARTIFACT].
      Resolution of VCS failed with:
      PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
      Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
    2 Maven:jakarta.activation:jakarta.activation-api:1.2.1
    • compile
    		 Concluded License:
    Declared Licenses:
    Effective License:

      • 2023-05-24T10:03:35.739493990Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:jakarta.activation:jakarta.activation-api:1.2.1': IOException: Could not resolve provenance for 'Maven:jakarta.activation:jakarta.activation-api:1.2.1' for source code origins [VCS, ARTIFACT].
        Resolution of VCS failed with:
        PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
        Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
        Resolution of ARTIFACT failed with:
        PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
        Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
      3 Maven:jakarta.xml.bind:jakarta.xml.bind-api:2.3.2
      • compile
      		 Declared Licenses:
      Effective License:
          4 Maven:jakarta.xml.registry:jakarta.xml.registry-api:1.0.9
          • compile
          		 Declared Licenses:
          Effective License:

            • 2023-05-24T10:03:35.739444789Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:jakarta.xml.registry:jakarta.xml.registry-api:1.0.9': IOException: Could not resolve provenance for 'Maven:jakarta.xml.registry:jakarta.xml.registry-api:1.0.9' for source code origins [VCS, ARTIFACT].
              Resolution of VCS failed with:
              PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
              Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
              Resolution of ARTIFACT failed with:
              PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
              Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
            5 Maven:jakarta.xml.soap:jakarta.xml.soap-api:1.4.1
            • compile
            		 Declared Licenses:
            Effective License:

              • 2023-05-24T10:03:35.739475589Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:jakarta.xml.soap:jakarta.xml.soap-api:1.4.1': IOException: Could not resolve provenance for 'Maven:jakarta.xml.soap:jakarta.xml.soap-api:1.4.1' for source code origins [VCS, ARTIFACT].
                Resolution of VCS failed with:
                PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
                Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
                Resolution of ARTIFACT failed with:
                PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
                Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"

              Repository Configuration

              
---
excludes:
  paths:
  - pattern: "**/META-INF/DEPENDENCIES"
    reason: "BUILD_TOOL_OF"
    comment: "Licenses contained in this directory reflect content analysed elsewhere."
  - pattern: "**/META-INF/NOTICE*"
    reason: "BUILD_TOOL_OF"
    comment: "Licenses contained in this directory reflect content analysed elsewhere."
  - pattern: "**/*.svg"
    reason: "BUILD_TOOL_OF"
    comment: "SVG files do not contain any license information."
  - pattern: "package-lock.json"
    reason: "BUILD_TOOL_OF"
    comment: "Does not contain any license information."