Scan Report
Created by ORT, the OSS Review Toolkit, version cc543c9380-dirty on 2023-11-29T09:21:42.695144054Z.

Project

Scanned revision 8a878b489601c78d8acb1678fa36b2839a6847a5 of Git repository https://github.com/eclipse-ee4j/wasp.git

Index

Rule Violation Summary (4 errors, 4 warnings, 5 hints to resolve)

# Rule Package License Message
1 OSADL_PROJECT_LICENSE_COMPATIBILITY Maven:jakarta.el:jakarta.el-api:5.0.1 DECLARED: GPL-2.0-only WITH Classpath-exception-2.0

The outbound license EPL-2.0 of project 'Maven:org.glassfish.wasp:wasp:3.2.2-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:jakarta.el:jakarta.el-api:5.0.1'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under another copyleft license such as the EPL-2.0 license, except if it were explicitly permitted in the licenses.

How to fix

Remove the dependency on 'Maven:jakarta.el:jakarta.el-api:5.0.1' or put 'Maven:org.glassfish.wasp:wasp:3.2.2-SNAPSHOT' under a different license.
2 OSADL_PROJECT_LICENSE_COMPATIBILITY Maven:jakarta.servlet:jakarta.servlet-api:6.0.0 DECLARED: GPL-2.0-only WITH Classpath-exception-2.0

The outbound license EPL-2.0 of project 'Maven:org.glassfish.wasp:wasp:3.2.2-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:jakarta.servlet:jakarta.servlet-api:6.0.0'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under another copyleft license such as the EPL-2.0 license, except if it were explicitly permitted in the licenses.

How to fix

Remove the dependency on 'Maven:jakarta.servlet:jakarta.servlet-api:6.0.0' or put 'Maven:org.glassfish.wasp:wasp:3.2.2-SNAPSHOT' under a different license.
3 OSADL_PROJECT_LICENSE_COMPATIBILITY Maven:jakarta.servlet.jsp:jakarta.servlet.jsp-api:3.1.1 DECLARED: GPL-2.0-only WITH Classpath-exception-2.0

The outbound license EPL-2.0 of project 'Maven:org.glassfish.wasp:wasp:3.2.2-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:jakarta.servlet.jsp:jakarta.servlet.jsp-api:3.1.1'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under another copyleft license such as the EPL-2.0 license, except if it were explicitly permitted in the licenses.

How to fix

Remove the dependency on 'Maven:jakarta.servlet.jsp:jakarta.servlet.jsp-api:3.1.1' or put 'Maven:org.glassfish.wasp:wasp:3.2.2-SNAPSHOT' under a different license.
4 OSADL_PROJECT_LICENSE_COMPATIBILITY Maven:jakarta.servlet.jsp.jstl:jakarta.servlet.jsp.jstl-api:3.0.0 DECLARED: GPL-2.0-only WITH Classpath-exception-2.0

The outbound license EPL-2.0 of project 'Maven:org.glassfish.wasp:wasp:3.2.2-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:jakarta.servlet.jsp.jstl:jakarta.servlet.jsp.jstl-api:3.0.0'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under another copyleft license such as the EPL-2.0 license, except if it were explicitly permitted in the licenses.

How to fix

Remove the dependency on 'Maven:jakarta.servlet.jsp.jstl:jakarta.servlet.jsp.jstl-api:3.0.0' or put 'Maven:org.glassfish.wasp:wasp:3.2.2-SNAPSHOT' under a different license.
5 OSADL_PROJECT_LICENSE_COMPATIBILITY Maven:jakarta.el:jakarta.el-api:5.0.1 DECLARED: EPL-2.0

Whether the outbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of project 'Maven:org.glassfish.wasp:wasp:3.2.2-SNAPSHOT' is compatible with the inbound license EPL-2.0 of its dependency 'Maven:jakarta.el:jakarta.el-api:5.0.1' depends on the context. Depending compatibility of the EPL-2.0 license with the GPL-2.0-only license is explicitly stated in the GPL-2.0-only license checklist.

How to fix

Get legal advice and eventually create a (global) rule violation resolution.
6 OSADL_PROJECT_LICENSE_COMPATIBILITY Maven:jakarta.servlet:jakarta.servlet-api:6.0.0 DECLARED: EPL-2.0

Whether the outbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of project 'Maven:org.glassfish.wasp:wasp:3.2.2-SNAPSHOT' is compatible with the inbound license EPL-2.0 of its dependency 'Maven:jakarta.servlet:jakarta.servlet-api:6.0.0' depends on the context. Depending compatibility of the EPL-2.0 license with the GPL-2.0-only license is explicitly stated in the GPL-2.0-only license checklist.

How to fix

Get legal advice and eventually create a (global) rule violation resolution.
7 OSADL_PROJECT_LICENSE_COMPATIBILITY Maven:jakarta.servlet.jsp:jakarta.servlet.jsp-api:3.1.1 DECLARED: EPL-2.0

Whether the outbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of project 'Maven:org.glassfish.wasp:wasp:3.2.2-SNAPSHOT' is compatible with the inbound license EPL-2.0 of its dependency 'Maven:jakarta.servlet.jsp:jakarta.servlet.jsp-api:3.1.1' depends on the context. Depending compatibility of the EPL-2.0 license with the GPL-2.0-only license is explicitly stated in the GPL-2.0-only license checklist.

How to fix

Get legal advice and eventually create a (global) rule violation resolution.
8 OSADL_PROJECT_LICENSE_COMPATIBILITY Maven:jakarta.servlet.jsp.jstl:jakarta.servlet.jsp.jstl-api:3.0.0 DECLARED: EPL-2.0

Whether the outbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of project 'Maven:org.glassfish.wasp:wasp:3.2.2-SNAPSHOT' is compatible with the inbound license EPL-2.0 of its dependency 'Maven:jakarta.servlet.jsp.jstl:jakarta.servlet.jsp.jstl-api:3.0.0' depends on the context. Depending compatibility of the EPL-2.0 license with the GPL-2.0-only license is explicitly stated in the GPL-2.0-only license checklist.

How to fix

Get legal advice and eventually create a (global) rule violation resolution.
9 DEPENDENCY_LICENSE_CHECK Maven:jakarta.el:jakarta.el-api:5.0.1 DECLARED: GPL-2.0-only WITH Classpath-exception-2.0

License GPL-2.0-only WITH Classpath-exception-2.0 of dependency 'Maven:jakarta.el:jakarta.el-api:5.0.1' is unclassified.

How to fix

Classify GPL-2.0-only WITH Classpath-exception-2.0 as either approved or restricted.
10 DEPENDENCY_LICENSE_CHECK Maven:jakarta.servlet:jakarta.servlet-api:6.0.0 DECLARED: GPL-2.0-only WITH Classpath-exception-2.0

License GPL-2.0-only WITH Classpath-exception-2.0 of dependency 'Maven:jakarta.servlet:jakarta.servlet-api:6.0.0' is unclassified.

How to fix

Classify GPL-2.0-only WITH Classpath-exception-2.0 as either approved or restricted.
11 DEPENDENCY_LICENSE_CHECK Maven:jakarta.servlet.jsp:jakarta.servlet.jsp-api:3.1.1 DECLARED: GPL-2.0-only WITH Classpath-exception-2.0

License GPL-2.0-only WITH Classpath-exception-2.0 of dependency 'Maven:jakarta.servlet.jsp:jakarta.servlet.jsp-api:3.1.1' is unclassified.

How to fix

Classify GPL-2.0-only WITH Classpath-exception-2.0 as either approved or restricted.
12 DEPENDENCY_LICENSE_CHECK Maven:jakarta.servlet.jsp.jstl:jakarta.servlet.jsp.jstl-api:3.0.0 DECLARED: GPL-2.0-only WITH Classpath-exception-2.0

License GPL-2.0-only WITH Classpath-exception-2.0 of dependency 'Maven:jakarta.servlet.jsp.jstl:jakarta.servlet.jsp.jstl-api:3.0.0' is unclassified.

How to fix

Classify GPL-2.0-only WITH Classpath-exception-2.0 as either approved or restricted.
13 PROJECT_LICENSE_CHECK Maven:org.glassfish.wasp:wasp:3.2.2-SNAPSHOT DECLARED: GPL-2.0-only WITH Classpath-exception-2.0

License GPL-2.0-only WITH Classpath-exception-2.0 of project 'Maven:org.glassfish.wasp:wasp:3.2.2-SNAPSHOT' is unclassified.

How to fix

Classify GPL-2.0-only WITH Classpath-exception-2.0 as either approved or restricted.

Issue Summary (6 errors, 0 warnings, 0 hints to resolve)

Issues from excluded components are not shown in this summary.

Packages

# Package Analyzer Issues Scanner Issues
1 Maven:jakarta.el:jakarta.el-api:5.0.1 Maven:org.glassfish.wasp:wasp:3.2.2-SNAPSHOT

  • 2023-11-29T09:21:17.677010940Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:jakarta.el:jakarta.el-api:5.0.1': IOException: Could not resolve provenance for 'Maven:jakarta.el:jakarta.el-api:5.0.1' for source code origins [VCS, ARTIFACT].
    Resolution of VCS failed with:
    PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
    Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
    Resolution of ARTIFACT failed with:
    PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
    Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
2 Maven:jakarta.servlet:jakarta.servlet-api:6.0.0 Maven:org.glassfish.wasp:wasp:3.2.2-SNAPSHOT

  • 2023-11-29T09:21:17.676987840Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:jakarta.servlet:jakarta.servlet-api:6.0.0': IOException: Could not resolve provenance for 'Maven:jakarta.servlet:jakarta.servlet-api:6.0.0' for source code origins [VCS, ARTIFACT].
    Resolution of VCS failed with:
    PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
    Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
    Resolution of ARTIFACT failed with:
    PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
    Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
3 Maven:jakarta.servlet.jsp:jakarta.servlet.jsp-api:3.1.1 Maven:org.glassfish.wasp:wasp:3.2.2-SNAPSHOT

  • 2023-11-29T09:21:17.676966739Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:jakarta.servlet.jsp:jakarta.servlet.jsp-api:3.1.1': IOException: Could not resolve provenance for 'Maven:jakarta.servlet.jsp:jakarta.servlet.jsp-api:3.1.1' for source code origins [VCS, ARTIFACT].
    Resolution of VCS failed with:
    PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
    Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
    Resolution of ARTIFACT failed with:
    PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
    Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
4 Maven:jakarta.servlet.jsp.jstl:jakarta.servlet.jsp.jstl-api:3.0.0 Maven:org.glassfish.wasp:wasp:3.2.2-SNAPSHOT

  • 2023-11-29T09:21:17.676999840Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:jakarta.servlet.jsp.jstl:jakarta.servlet.jsp.jstl-api:3.0.0': IOException: Could not resolve provenance for 'Maven:jakarta.servlet.jsp.jstl:jakarta.servlet.jsp.jstl-api:3.0.0' for source code origins [VCS, ARTIFACT].
    Resolution of VCS failed with:
    PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
    Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
    Resolution of ARTIFACT failed with:
    PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
    Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
5 Maven:org.glassfish.wasp:wasp:3.2.2-SNAPSHOT Maven:org.glassfish.wasp:wasp:3.2.2-SNAPSHOT

  • 2023-11-29T09:21:09.608737558Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:org.glassfish.wasp:wasp:3.2.2-SNAPSHOT': IOException: Could not resolve provenance for 'Maven:org.glassfish.wasp:wasp:3.2.2-SNAPSHOT' for source code origins [VCS, ARTIFACT].
    Resolution of VCS failed with:
    PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
    Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
6 Maven:xalan:xalan:2.7.3 Maven:org.glassfish.wasp:wasp:3.2.2-SNAPSHOT

  • 2023-11-29T09:21:17.677021140Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:xalan:xalan:2.7.3': IOException: Could not resolve provenance for 'Maven:xalan:xalan:2.7.3' for source code origins [VCS, ARTIFACT].

Maven:org.glassfish.wasp:wasp:3.2.2-SNAPSHOT (pom.xml)

VCS Information

Type Git
URL https://github.com/eclipse-ee4j/wasp.git
Path
Revision 8a878b489601c78d8acb1678fa36b2839a6847a5

Packages

# Package Scopes Licenses Analyzer Issues Scanner Issues
1 Maven:org.glassfish.wasp:wasp:3.2.2-SNAPSHOT Declared Licenses:
Effective License:

    • 2023-11-29T09:21:09.608737558Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:org.glassfish.wasp:wasp:3.2.2-SNAPSHOT': IOException: Could not resolve provenance for 'Maven:org.glassfish.wasp:wasp:3.2.2-SNAPSHOT' for source code origins [VCS, ARTIFACT].
      Resolution of VCS failed with:
      PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
      Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
    2 Maven:jakarta.el:jakarta.el-api:5.0.1
    • provided
    		 Declared Licenses:
    Effective License:

      • 2023-11-29T09:21:17.677010940Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:jakarta.el:jakarta.el-api:5.0.1': IOException: Could not resolve provenance for 'Maven:jakarta.el:jakarta.el-api:5.0.1' for source code origins [VCS, ARTIFACT].
        Resolution of VCS failed with:
        PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
        Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
        Resolution of ARTIFACT failed with:
        PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
        Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
      3 Maven:jakarta.servlet:jakarta.servlet-api:6.0.0
      • provided
      		 Declared Licenses:
      Effective License:

        • 2023-11-29T09:21:17.676987840Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:jakarta.servlet:jakarta.servlet-api:6.0.0': IOException: Could not resolve provenance for 'Maven:jakarta.servlet:jakarta.servlet-api:6.0.0' for source code origins [VCS, ARTIFACT].
          Resolution of VCS failed with:
          PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
          Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
          Resolution of ARTIFACT failed with:
          PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
          Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
        4 Maven:jakarta.servlet.jsp:jakarta.servlet.jsp-api:3.1.1
        • provided
        		 Declared Licenses:
        Effective License:

          • 2023-11-29T09:21:17.676966739Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:jakarta.servlet.jsp:jakarta.servlet.jsp-api:3.1.1': IOException: Could not resolve provenance for 'Maven:jakarta.servlet.jsp:jakarta.servlet.jsp-api:3.1.1' for source code origins [VCS, ARTIFACT].
            Resolution of VCS failed with:
            PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
            Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
            Resolution of ARTIFACT failed with:
            PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
            Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
          5 Maven:jakarta.servlet.jsp.jstl:jakarta.servlet.jsp.jstl-api:3.0.0
          • provided
          		 Declared Licenses:
          Effective License:

            • 2023-11-29T09:21:17.676999840Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:jakarta.servlet.jsp.jstl:jakarta.servlet.jsp.jstl-api:3.0.0': IOException: Could not resolve provenance for 'Maven:jakarta.servlet.jsp.jstl:jakarta.servlet.jsp.jstl-api:3.0.0' for source code origins [VCS, ARTIFACT].
              Resolution of VCS failed with:
              PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
              Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
              Resolution of ARTIFACT failed with:
              PoolInitializationException: Failed to initialize pool: FATAL: password authentication failed for user "ortuser"
              Caused by: PSQLException: FATAL: password authentication failed for user "ortuser"
            6 Maven:xalan:xalan:2.7.3
            • compile

              • 2023-11-29T09:21:17.677021140Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:xalan:xalan:2.7.3': IOException: Could not resolve provenance for 'Maven:xalan:xalan:2.7.3' for source code origins [VCS, ARTIFACT].

              Repository Configuration

              
---
excludes:
  paths:
  - pattern: "**/META-INF/DEPENDENCIES"
    reason: "BUILD_TOOL_OF"
    comment: "Licenses contained in this directory reflect content analysed elsewhere."
  - pattern: "**/META-INF/NOTICE*"
    reason: "BUILD_TOOL_OF"
    comment: "Licenses contained in this directory reflect content analysed elsewhere."
  - pattern: "**/*.svg"
    reason: "BUILD_TOOL_OF"
    comment: "SVG files do not contain any license information."
  - pattern: "package-lock.json"
    reason: "BUILD_TOOL_OF"
    comment: "Does not contain any license information."