Scan Report

Created by ORT, the OSS Review Toolkit, version cc543c9380-dirty on 2023-04-05T22:29:15.528711605Z.

Project

Scanned revision 522b622d2f91724bdd037f44d1de57bde4bf14c2 of Git repository https://github.com/eclipse-vertx/vert.x.git

Index

Rule Violation Summary (41 errors, 773 warnings, 120 hints to resolve)
Issue Summary (5 errors, 0 warnings, 0 hints to resolve)
Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT
Repository Configuration

Rule Violation Summary (41 errors, 773 warnings, 120 hints to resolve)

Issue Summary (5 errors, 0 warnings, 0 hints to resolve)

Issues from excluded components are not shown in this summary.

Packages

#	Package	Scanner Issues
1	Maven:antlr:antlr:2.7.7	Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT 2023-04-05T22:04:25.109632236Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:antlr:antlr:2.7.7': IOException: Could not resolve provenance for 'Maven:antlr:antlr:2.7.7' for source code origins [VCS, ARTIFACT].
2	Maven:com.aayushatharva.brotli4j:native-linux-x86_64:1.8.0	Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT 2023-04-05T22:04:25.109610736Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:com.aayushatharva.brotli4j:native-linux-x86_64:1.8.0': IOException: Could not resolve provenance for 'Maven:com.aayushatharva.brotli4j:native-linux-x86_64:1.8.0' for source code origins [VCS, ARTIFACT]. Resolution of VCS failed with: IOException: Could not resolve revision for package 'Maven:com.aayushatharva.brotli4j:native-linux-x86_64:1.8.0' with VcsInfo(type=Git, url=ssh://git@github.com/hyperxpro/Brotli4j.git, revision=, path=): Could not find any revision candidates for package 'Maven:com.aayushatharva.brotli4j:native-linux-x86_64:1.8.0' with VcsInfo(type=Git, url=ssh://git@github.com/hyperxpro/Brotli4j.git, revision=, path=).
3	Maven:commons-lang:commons-lang:2.4	Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT 2023-04-05T22:04:38.107963381Z [ERROR]: scanner - Could not resolve nested provenance for package 'Maven:commons-lang:commons-lang:2.4': DownloadException: Unable to initialize a Subversion working tree in '/tmp/ort-DefaultWorkingTreeCache1364866980632895651' from http://svn.apache.org/repos/asf/commons/proper/lang. Caused by: SVNException: svn: E155004: '/tmp/ort-DefaultWorkingTreeCache1364866980632895651' is already locked via '/tmp/ort-DefaultWorkingTreeCache1364866980632895651'
4	Maven:io.netty:netty-tcnative-boringssl-static:2.0.59.Final	Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT 2023-04-05T22:04:25.109547936Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:io.netty:netty-tcnative-boringssl-static:2.0.59.Final': IOException: Could not resolve provenance for 'Maven:io.netty:netty-tcnative-boringssl-static:2.0.59.Final' for source code origins [VCS, ARTIFACT]. Resolution of VCS failed with: IOException: Could not resolve revision for package 'Maven:io.netty:netty-tcnative-boringssl-static:2.0.59.Final' with VcsInfo(type=Git, url=https://github.com/netty/netty-tcnative.git, revision=, path=boringssl-static): Could not find any revision candidates for package 'Maven:io.netty:netty-tcnative-boringssl-static:2.0.59.Final' with VcsInfo(type=Git, url=https://github.com/netty/netty-tcnative.git, revision=, path=boringssl-static).
5	Maven:org.apache.commons:commons-math3:3.2	Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT 2023-04-05T22:04:38.108058382Z [ERROR]: scanner - Could not resolve nested provenance for package 'Maven:org.apache.commons:commons-math3:3.2': RuntimeException: java.lang.NullPointerException: Cannot invoke "org.tmatesoft.svn.core.wc2.AbstractSvnUpdate.isUpdateLocksOnDemand()" because the return value of "org.tmatesoft.svn.core.internal.wc2.ng.SvnNgAbstractUpdate.getOperation()" is null Caused by: NullPointerException: Cannot invoke "org.tmatesoft.svn.core.wc2.AbstractSvnUpdate.isUpdateLocksOnDemand()" because the return value of "org.tmatesoft.svn.core.internal.wc2.ng.SvnNgAbstractUpdate.getOperation()" is null

Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT (pom.xml)

VCS Information

Type	Git
URL	https://github.com/eclipse-vertx/vert.x.git
Path
Revision	522b622d2f91724bdd037f44d1de57bde4bf14c2

Packages

#	Package	Scopes	Licenses	Scanner Issues
1	Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT		Declared Licenses: Apache-2.0 EPL-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 1803 locations) EPL-1.0 (link to the location) EPL-2.0 (exemplary link to the first of 1797 locations) MIT (exemplary link to the first of 2 locations) NOASSERTION (exemplary link to the first of 3 locations) Effective License: Apache-2.0 AND EPL-1.0 AND EPL-2.0 AND MIT AND NOASSERTION
2	Maven:antlr:antlr:2.7.7	test		2023-04-05T22:04:25.109632236Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:antlr:antlr:2.7.7': IOException: Could not resolve provenance for 'Maven:antlr:antlr:2.7.7' for source code origins [VCS, ARTIFACT].
3	Maven:bouncycastle:bcprov-jdk15:140	test	Declared Licenses: MIT Detected Licenses (from artifact): LicenseRef-scancode-proprietary-license (link to the location) MIT (exemplary link to the first of 2 locations) Effective License: LicenseRef-scancode-proprietary-license AND MIT
4	Maven:com.aayushatharva.brotli4j:brotli4j:1.8.0	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 2 locations) GPL-3.0-or-later (exemplary link to the first of 17 locations) MIT (exemplary link to the first of 12 locations) Effective License: Apache-2.0 AND GPL-3.0-or-later AND MIT
5	Maven:com.aayushatharva.brotli4j:native-linux-x86_64:1.8.0	test	Declared Licenses: Apache-2.0 Effective License: Apache-2.0	2023-04-05T22:04:25.109610736Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:com.aayushatharva.brotli4j:native-linux-x86_64:1.8.0': IOException: Could not resolve provenance for 'Maven:com.aayushatharva.brotli4j:native-linux-x86_64:1.8.0' for source code origins [VCS, ARTIFACT]. Resolution of VCS failed with: IOException: Could not resolve revision for package 'Maven:com.aayushatharva.brotli4j:native-linux-x86_64:1.8.0' with VcsInfo(type=Git, url=ssh://git@github.com/hyperxpro/Brotli4j.git, revision=, path=): Could not find any revision candidates for package 'Maven:com.aayushatharva.brotli4j:native-linux-x86_64:1.8.0' with VcsInfo(type=Git, url=ssh://git@github.com/hyperxpro/Brotli4j.git, revision=, path=).
6	Maven:com.fasterxml.jackson.core:jackson-annotations:2.14.0	compile	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 2 locations) Effective License: Apache-2.0
7	Maven:com.fasterxml.jackson.core:jackson-core:2.14.0	compile	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 22 locations) MIT (exemplary link to the first of 3 locations) NOASSERTION (exemplary link to the first of 2 locations) Effective License: Apache-2.0 AND MIT AND NOASSERTION
8	Maven:com.fasterxml.jackson.core:jackson-databind:2.14.0	compile	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 7 locations) NOASSERTION (exemplary link to the first of 2 locations) Effective License: Apache-2.0 AND NOASSERTION
9	Maven:commons-collections:commons-collections:3.2.1	test	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Effective License: Apache-2.0
10	Maven:commons-lang:commons-lang:2.4	test	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Effective License: Apache-2.0	2023-04-05T22:04:38.107963381Z [ERROR]: scanner - Could not resolve nested provenance for package 'Maven:commons-lang:commons-lang:2.4': DownloadException: Unable to initialize a Subversion working tree in '/tmp/ort-DefaultWorkingTreeCache1364866980632895651' from http://svn.apache.org/repos/asf/commons/proper/lang. Caused by: SVNException: svn: E155004: '/tmp/ort-DefaultWorkingTreeCache1364866980632895651' is already locked via '/tmp/ort-DefaultWorkingTreeCache1364866980632895651'
11	Maven:dom4j:dom4j:1.6.1	test	Concluded License: LicenseRef-DOM4J Detected Licenses (from artifact): LicenseRef-scancode-sun-prop-non-commercial (link to the location) NOASSERTION (exemplary link to the first of 165 locations) Plexus (exemplary link to the first of 165 locations) Effective License: LicenseRef-DOM4J
12	Maven:io.netty:netty-buffer:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
13	Maven:io.netty:netty-codec:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
14	Maven:io.netty:netty-codec-dns:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
15	Maven:io.netty:netty-codec-haproxy:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
16	Maven:io.netty:netty-codec-http:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
17	Maven:io.netty:netty-codec-http2:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
18	Maven:io.netty:netty-codec-socks:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
19	Maven:io.netty:netty-common:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
20	Maven:io.netty:netty-handler:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
21	Maven:io.netty:netty-handler-proxy:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
22	Maven:io.netty:netty-resolver:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
23	Maven:io.netty:netty-resolver-dns:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
24	Maven:io.netty:netty-tcnative-boringssl-static:2.0.59.Final	test	Declared Licenses: Apache-2.0 Effective License: Apache-2.0	2023-04-05T22:04:25.109547936Z [ERROR]: scanner - Could not resolve provenance for package 'Maven:io.netty:netty-tcnative-boringssl-static:2.0.59.Final': IOException: Could not resolve provenance for 'Maven:io.netty:netty-tcnative-boringssl-static:2.0.59.Final' for source code origins [VCS, ARTIFACT]. Resolution of VCS failed with: IOException: Could not resolve revision for package 'Maven:io.netty:netty-tcnative-boringssl-static:2.0.59.Final' with VcsInfo(type=Git, url=https://github.com/netty/netty-tcnative.git, revision=, path=boringssl-static): Could not find any revision candidates for package 'Maven:io.netty:netty-tcnative-boringssl-static:2.0.59.Final' with VcsInfo(type=Git, url=https://github.com/netty/netty-tcnative.git, revision=, path=boringssl-static).
25	Maven:io.netty:netty-tcnative-classes:2.0.59.Final	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 28 locations) Effective License: Apache-2.0
26	Maven:io.netty:netty-transport:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
27	Maven:io.netty:netty-transport-classes-epoll:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
28	Maven:io.netty:netty-transport-classes-kqueue:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
29	Maven:io.netty:netty-transport-native-epoll:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
30	Maven:io.netty:netty-transport-native-kqueue:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
31	Maven:io.netty:netty-transport-native-unix-common:4.1.90.Final	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): APSL-1.0 (link to the location) APSL-2.0 (exemplary link to the first of 3 locations) Apache-2.0 (exemplary link to the first of 3006 locations) BSD-3-Clause (exemplary link to the first of 26 locations) CC-PDDC (exemplary link to the first of 4 locations) CC0-1.0 (link to the location) LicenseRef-scancode-protobuf (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) MIT (exemplary link to the first of 28 locations) Effective License: APSL-1.0 AND APSL-2.0 AND Apache-2.0 AND BSD-3-Clause AND CC-PDDC AND CC0-1.0 AND LicenseRef-scancode-protobuf AND LicenseRef-scancode-public-domain AND MIT
32	Maven:io.vertx:vertx-codegen:5.0.0-20230405.051216-62	compile
33	Maven:io.vertx:vertx-docgen:0.9.4	compile	Declared Licenses: Apache-2.0 EPL-1.0 Effective License: Apache-2.0 OR EPL-1.0
34	Maven:junit:junit:4.13.1	test	Declared Licenses: EPL-1.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 4 locations) EPL-1.0 (exemplary link to the first of 5 locations) EPL-2.0 (link to the location) NOASSERTION (link to the location) Effective License: Apache-2.0 AND EPL-1.0 AND EPL-2.0 AND NOASSERTION
35	Maven:net.sf.jopt-simple:jopt-simple:5.0.4	test	Declared Licenses: MIT Detected Licenses (from VCS): Apache-2.0 (link to the location) MIT (exemplary link to the first of 317 locations) Effective License: Apache-2.0 AND MIT
36	Maven:org.apache.commons:commons-math3:3.2	test	Declared Licenses: Apache-2.0 Effective License: Apache-2.0	2023-04-05T22:04:38.108058382Z [ERROR]: scanner - Could not resolve nested provenance for package 'Maven:org.apache.commons:commons-math3:3.2': RuntimeException: java.lang.NullPointerException: Cannot invoke "org.tmatesoft.svn.core.wc2.AbstractSvnUpdate.isUpdateLocksOnDemand()" because the return value of "org.tmatesoft.svn.core.internal.wc2.ng.SvnNgAbstractUpdate.getOperation()" is null Caused by: NullPointerException: Cannot invoke "org.tmatesoft.svn.core.wc2.AbstractSvnUpdate.isUpdateLocksOnDemand()" because the return value of "org.tmatesoft.svn.core.internal.wc2.ng.SvnNgAbstractUpdate.getOperation()" is null
37	Maven:org.apache.directory.server:apacheds-core:1.5.7	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 91 locations) NOASSERTION (exemplary link to the first of 3 locations) Effective License: Apache-2.0 AND NOASSERTION
38	Maven:org.apache.directory.server:apacheds-core-api:1.5.7	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 93 locations) Effective License: Apache-2.0
39	Maven:org.apache.directory.server:apacheds-core-constants:1.5.7	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 6 locations) Effective License: Apache-2.0
40	Maven:org.apache.directory.server:apacheds-core-entry:1.5.7	test	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 BSD-3-Clause LicenseRef-scancode-bsd-original-uc-1986 LicenseRef-scancode-jdbm-1.00 LicenseRef-scancode-public-domain NOASSERTION OLDAP-2.8 Effective License: Apache-2.0 AND BSD-3-Clause AND LicenseRef-scancode-bsd-original-uc-1986 AND LicenseRef-scancode-jdbm-1.00 AND LicenseRef-scancode-public-domain AND NOASSERTION AND OLDAP-2.8
41	Maven:org.apache.directory.server:apacheds-core-jndi:1.5.7	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 14 locations) Effective License: Apache-2.0
42	Maven:org.apache.directory.server:apacheds-i18n:1.5.7	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 9 locations) Effective License: Apache-2.0
43	Maven:org.apache.directory.server:apacheds-protocol-dns:1.5.7	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 81 locations) Effective License: Apache-2.0
44	Maven:org.apache.directory.server:apacheds-protocol-shared:1.5.7	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 18 locations) Effective License: Apache-2.0
45	Maven:org.apache.directory.server:apacheds-utils:1.5.7	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 3 locations) Effective License: Apache-2.0
46	Maven:org.apache.directory.shared:shared-asn1:0.9.19	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 52 locations) MIT (exemplary link to the first of 35 locations) Effective License: Apache-2.0 AND MIT
47	Maven:org.apache.directory.shared:shared-asn1-codec:0.9.19	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 5 locations) Effective License: Apache-2.0
48	Maven:org.apache.directory.shared:shared-cursor:0.9.19	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 14 locations) Effective License: Apache-2.0
49	Maven:org.apache.directory.shared:shared-dsml-parser:0.9.19	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 52 locations) Effective License: Apache-2.0
50	Maven:org.apache.directory.shared:shared-i18n:0.9.19	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 3 locations) Effective License: Apache-2.0
51	Maven:org.apache.directory.shared:shared-ldap:0.9.19	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): ANTLR-PD (link to the location) Apache-2.0 (exemplary link to the first of 673 locations) NOASSERTION (exemplary link to the first of 2 locations) Effective License: ANTLR-PD AND Apache-2.0 AND NOASSERTION
52	Maven:org.apache.directory.shared:shared-ldap-constants:0.9.19	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 9 locations) Effective License: Apache-2.0
53	Maven:org.apache.directory.shared:shared-ldap-converter:0.9.19	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): ANTLR-PD (link to the location) Apache-2.0 (exemplary link to the first of 15 locations) Effective License: ANTLR-PD AND Apache-2.0
54	Maven:org.apache.directory.shared:shared-ldap-jndi:0.9.19	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 4 locations) Effective License: Apache-2.0
55	Maven:org.apache.directory.shared:shared-ldap-schema:0.9.19	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 6 locations) Effective License: Apache-2.0
56	Maven:org.apache.directory.shared:shared-ldap-schema-dao:0.9.19	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 2 locations) Effective License: Apache-2.0
57	Maven:org.apache.directory.shared:shared-ldap-schema-loader:0.9.19	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 6 locations) Effective License: Apache-2.0
58	Maven:org.apache.directory.shared:shared-ldap-schema-manager:0.9.19	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 3 locations) Effective License: Apache-2.0
59	Maven:org.apache.directory.shared:shared-ldif:0.9.19	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 10 locations) Effective License: Apache-2.0
60	Maven:org.apache.logging.log4j:log4j-api:2.17.1	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 LGPL-2.0-or-later MIT MPL-2.0 NOASSERTION Effective License: Apache-2.0 AND LGPL-2.0-or-later AND MIT AND MPL-2.0 AND NOASSERTION
61	Maven:org.apache.logging.log4j:log4j-core:2.17.1	test	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 LGPL-2.0-or-later MIT MPL-2.0 NOASSERTION Effective License: Apache-2.0 AND LGPL-2.0-or-later AND MIT AND MPL-2.0 AND NOASSERTION
62	Maven:org.apache.mina:mina-core:2.0.0-RC1	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 308 locations) LicenseRef-scancode-eric-glass (link to the location) Effective License: Apache-2.0 AND LicenseRef-scancode-eric-glass
63	Maven:org.assertj:assertj-core:3.4.1	test	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 469 locations) Effective License: Apache-2.0
64	Maven:org.hamcrest:hamcrest-core:1.3	test	Concluded License: BSD-2-Clause Declared Licenses: BSD-3-Clause Effective License: BSD-2-Clause
65	Maven:org.openjdk.jmh:jmh-core:1.36	test	Declared Licenses: GPL-2.0-only WITH Classpath-exception-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 50 locations) BSD-3-Clause (exemplary link to the first of 76 locations) GPL-1.0-or-later (exemplary link to the first of 8 locations) GPL-2.0-only (link to the location) GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 908 locations) GPL-2.0-only WITH LicenseRef-scancode-oracle-openjdk-exception-2.0 (exemplary link to the first of 26 locations) MIT (exemplary link to the first of 50 locations) Effective License: Apache-2.0 AND BSD-3-Clause AND GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-only WITH Classpath-exception-2.0 AND GPL-2.0-only WITH LicenseRef-scancode-oracle-openjdk-exception-2.0 AND MIT
66	Maven:org.slf4j:slf4j-api:1.7.21	compile	Concluded License: MIT Declared Licenses: MIT Detected Licenses (from artifact): MIT (exemplary link to the first of 27 locations) Effective License: MIT
67	Maven:org.slf4j:slf4j-simple:1.7.21	test	Declared Licenses: MIT Detected Licenses (from artifact): MIT (exemplary link to the first of 5 locations) Effective License: MIT
68	Maven:xml-apis:xml-apis:1.0.b2	test	Concluded License: Apache-2.0 AND SAX-PD Declared Licenses: Apache-2.0 Detected Licenses (from artifact): LicenseRef-scancode-iso-8879 (exemplary link to the first of 3 locations) LicenseRef-scancode-public-domain-disclaimer (exemplary link to the first of 14 locations) LicenseRef-scancode-sun-prop-non-commercial (exemplary link to the first of 67 locations) NOASSERTION WITH Classpath-exception-2.0 (exemplary link to the first of 2 locations) SAX-PD (link to the location) Effective License: Apache-2.0 AND SAX-PD
69	Maven:xpp3:xpp3:1.1.4c	test	Declared Licenses: Apache-1.1 LicenseRef-scancode-indiana-extreme LicenseRef-scancode-public-domain-disclaimer Detected Licenses (from artifact): Apache-1.1 (link to the location) NOASSERTION (exemplary link to the first of 4 locations) SAX-PD (exemplary link to the first of 18 locations) xpp (exemplary link to the first of 4 locations) Effective License: Apache-1.1 AND LicenseRef-scancode-indiana-extreme AND NOASSERTION AND SAX-PD AND xpp OR Apache-1.1 AND LicenseRef-scancode-public-domain-disclaimer AND NOASSERTION AND SAX-PD AND xpp

Repository Configuration


---
excludes:
  paths:
  - pattern: "**/META-INF/DEPENDENCIES"
    reason: "BUILD_TOOL_OF"
    comment: "Licenses contained in this directory reflect content analysed elsewhere."
  - pattern: "**/META-INF/NOTICE*"
    reason: "BUILD_TOOL_OF"
    comment: "Licenses contained in this directory reflect content analysed elsewhere."
  - pattern: "**/*.svg"
    reason: "BUILD_TOOL_OF"
    comment: "SVG files do not contain any license information."
  - pattern: "package-lock.json"
    reason: "BUILD_TOOL_OF"
    comment: "Does not contain any license information."

#	Rule	Package	License	Message
1	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:com.aayushatharva.brotli4j:brotli4j:1.8.0	DETECTED: GPL-3.0-or-later	The outbound license Apache-2.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license GPL-3.0-or-later of its dependency 'Maven:com.aayushatharva.brotli4j:brotli4j:1.8.0'. Software under a copyleft license such as the GPL-3.0-or-later license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:com.aayushatharva.brotli4j:brotli4j:1.8.0' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
2	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:com.aayushatharva.brotli4j:brotli4j:1.8.0	DETECTED: GPL-3.0-or-later	The outbound license EPL-1.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license GPL-3.0-or-later of its dependency 'Maven:com.aayushatharva.brotli4j:brotli4j:1.8.0'. Software under a copyleft license such as the GPL-3.0-or-later license normally cannot be redistributed under another copyleft license such as the EPL-1.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:com.aayushatharva.brotli4j:brotli4j:1.8.0' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
3	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:com.aayushatharva.brotli4j:brotli4j:1.8.0	DETECTED: GPL-3.0-or-later	The outbound license EPL-2.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license GPL-3.0-or-later of its dependency 'Maven:com.aayushatharva.brotli4j:brotli4j:1.8.0'. Software under a copyleft license such as the GPL-3.0-or-later license normally cannot be redistributed under another copyleft license such as the EPL-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:com.aayushatharva.brotli4j:brotli4j:1.8.0' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
4	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:com.aayushatharva.brotli4j:brotli4j:1.8.0	DETECTED: GPL-3.0-or-later	The outbound license MIT of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license GPL-3.0-or-later of its dependency 'Maven:com.aayushatharva.brotli4j:brotli4j:1.8.0'. Software under a copyleft license such as the GPL-3.0-or-later license normally cannot be redistributed under a non-copyleft license such as the MIT license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:com.aayushatharva.brotli4j:brotli4j:1.8.0' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
5	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:io.vertx:vertx-docgen:0.9.4	DECLARED: EPL-1.0	The outbound license Apache-2.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license EPL-1.0 of its dependency 'Maven:io.vertx:vertx-docgen:0.9.4'. Software under a copyleft license such as the EPL-1.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:io.vertx:vertx-docgen:0.9.4' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
6	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:io.vertx:vertx-docgen:0.9.4	DECLARED: EPL-1.0	The outbound license MIT of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license EPL-1.0 of its dependency 'Maven:io.vertx:vertx-docgen:0.9.4'. Software under a copyleft license such as the EPL-1.0 license normally cannot be redistributed under a non-copyleft license such as the MIT license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:io.vertx:vertx-docgen:0.9.4' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
7	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:junit:junit:4.13.1	DECLARED: EPL-1.0	The outbound license Apache-2.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license EPL-1.0 of its dependency 'Maven:junit:junit:4.13.1'. Software under a copyleft license such as the EPL-1.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:junit:junit:4.13.1' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
8	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:junit:junit:4.13.1	DETECTED: EPL-1.0	The outbound license Apache-2.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license EPL-1.0 of its dependency 'Maven:junit:junit:4.13.1'. Software under a copyleft license such as the EPL-1.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:junit:junit:4.13.1' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
9	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:junit:junit:4.13.1	DECLARED: EPL-1.0	The outbound license MIT of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license EPL-1.0 of its dependency 'Maven:junit:junit:4.13.1'. Software under a copyleft license such as the EPL-1.0 license normally cannot be redistributed under a non-copyleft license such as the MIT license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:junit:junit:4.13.1' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
10	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:junit:junit:4.13.1	DETECTED: EPL-1.0	The outbound license MIT of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license EPL-1.0 of its dependency 'Maven:junit:junit:4.13.1'. Software under a copyleft license such as the EPL-1.0 license normally cannot be redistributed under a non-copyleft license such as the MIT license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:junit:junit:4.13.1' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
11	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:junit:junit:4.13.1	DETECTED: EPL-2.0	The outbound license Apache-2.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license EPL-2.0 of its dependency 'Maven:junit:junit:4.13.1'. Software under a copyleft license such as the EPL-2.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:junit:junit:4.13.1' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
12	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:junit:junit:4.13.1	DETECTED: EPL-2.0	The outbound license EPL-1.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license EPL-2.0 of its dependency 'Maven:junit:junit:4.13.1'. Software under a copyleft license such as the EPL-2.0 license normally cannot be redistributed under another copyleft license such as the EPL-1.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:junit:junit:4.13.1' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
13	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:junit:junit:4.13.1	DETECTED: EPL-2.0	The outbound license MIT of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license EPL-2.0 of its dependency 'Maven:junit:junit:4.13.1'. Software under a copyleft license such as the EPL-2.0 license normally cannot be redistributed under a non-copyleft license such as the MIT license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:junit:junit:4.13.1' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
14	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:org.apache.logging.log4j:log4j-api:2.17.1	DETECTED: MPL-2.0	The outbound license Apache-2.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license MPL-2.0 of its dependency 'Maven:org.apache.logging.log4j:log4j-api:2.17.1'. Software under a copyleft license such as the MPL-2.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:org.apache.logging.log4j:log4j-api:2.17.1' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
15	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:org.apache.logging.log4j:log4j-api:2.17.1	DETECTED: MPL-2.0	The outbound license EPL-1.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license MPL-2.0 of its dependency 'Maven:org.apache.logging.log4j:log4j-api:2.17.1'. Software under a copyleft license such as the MPL-2.0 license normally cannot be redistributed under another copyleft license such as the EPL-1.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:org.apache.logging.log4j:log4j-api:2.17.1' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
16	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:org.apache.logging.log4j:log4j-api:2.17.1	DETECTED: MPL-2.0	The outbound license EPL-2.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license MPL-2.0 of its dependency 'Maven:org.apache.logging.log4j:log4j-api:2.17.1'. Software under a copyleft license such as the MPL-2.0 license normally cannot be redistributed under another copyleft license such as the EPL-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:org.apache.logging.log4j:log4j-api:2.17.1' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
17	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:org.apache.logging.log4j:log4j-api:2.17.1	DETECTED: MPL-2.0	The outbound license MIT of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license MPL-2.0 of its dependency 'Maven:org.apache.logging.log4j:log4j-api:2.17.1'. Software under a copyleft license such as the MPL-2.0 license normally cannot be redistributed under a non-copyleft license such as the MIT license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:org.apache.logging.log4j:log4j-api:2.17.1' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
18	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:org.apache.logging.log4j:log4j-core:2.17.1	DETECTED: MPL-2.0	The outbound license Apache-2.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license MPL-2.0 of its dependency 'Maven:org.apache.logging.log4j:log4j-core:2.17.1'. Software under a copyleft license such as the MPL-2.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:org.apache.logging.log4j:log4j-core:2.17.1' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
19	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:org.apache.logging.log4j:log4j-core:2.17.1	DETECTED: MPL-2.0	The outbound license EPL-1.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license MPL-2.0 of its dependency 'Maven:org.apache.logging.log4j:log4j-core:2.17.1'. Software under a copyleft license such as the MPL-2.0 license normally cannot be redistributed under another copyleft license such as the EPL-1.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:org.apache.logging.log4j:log4j-core:2.17.1' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
20	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:org.apache.logging.log4j:log4j-core:2.17.1	DETECTED: MPL-2.0	The outbound license EPL-2.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license MPL-2.0 of its dependency 'Maven:org.apache.logging.log4j:log4j-core:2.17.1'. Software under a copyleft license such as the MPL-2.0 license normally cannot be redistributed under another copyleft license such as the EPL-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:org.apache.logging.log4j:log4j-core:2.17.1' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
21	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:org.apache.logging.log4j:log4j-core:2.17.1	DETECTED: MPL-2.0	The outbound license MIT of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license MPL-2.0 of its dependency 'Maven:org.apache.logging.log4j:log4j-core:2.17.1'. Software under a copyleft license such as the MPL-2.0 license normally cannot be redistributed under a non-copyleft license such as the MIT license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:org.apache.logging.log4j:log4j-core:2.17.1' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
22	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:org.openjdk.jmh:jmh-core:1.36	DETECTED: GPL-1.0-or-later	The outbound license Apache-2.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license GPL-1.0-or-later of its dependency 'Maven:org.openjdk.jmh:jmh-core:1.36'. Software under a copyleft license such as the GPL-1.0-or-later license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:org.openjdk.jmh:jmh-core:1.36' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
23	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:org.openjdk.jmh:jmh-core:1.36	DETECTED: GPL-1.0-or-later	The outbound license EPL-1.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license GPL-1.0-or-later of its dependency 'Maven:org.openjdk.jmh:jmh-core:1.36'. Software under a copyleft license such as the GPL-1.0-or-later license normally cannot be redistributed under another copyleft license such as the EPL-1.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:org.openjdk.jmh:jmh-core:1.36' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
24	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:org.openjdk.jmh:jmh-core:1.36	DETECTED: GPL-1.0-or-later	The outbound license EPL-2.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license GPL-1.0-or-later of its dependency 'Maven:org.openjdk.jmh:jmh-core:1.36'. Software under a copyleft license such as the GPL-1.0-or-later license normally cannot be redistributed under another copyleft license such as the EPL-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:org.openjdk.jmh:jmh-core:1.36' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
25	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:org.openjdk.jmh:jmh-core:1.36	DETECTED: GPL-1.0-or-later	The outbound license MIT of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license GPL-1.0-or-later of its dependency 'Maven:org.openjdk.jmh:jmh-core:1.36'. Software under a copyleft license such as the GPL-1.0-or-later license normally cannot be redistributed under a non-copyleft license such as the MIT license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:org.openjdk.jmh:jmh-core:1.36' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
26	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:org.openjdk.jmh:jmh-core:1.36	DETECTED: GPL-2.0-only	The outbound license Apache-2.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only of its dependency 'Maven:org.openjdk.jmh:jmh-core:1.36'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:org.openjdk.jmh:jmh-core:1.36' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
27	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:org.openjdk.jmh:jmh-core:1.36	DETECTED: GPL-2.0-only	The outbound license EPL-1.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only of its dependency 'Maven:org.openjdk.jmh:jmh-core:1.36'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under another copyleft license such as the EPL-1.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:org.openjdk.jmh:jmh-core:1.36' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
28	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:org.openjdk.jmh:jmh-core:1.36	DETECTED: GPL-2.0-only	The outbound license EPL-2.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only of its dependency 'Maven:org.openjdk.jmh:jmh-core:1.36'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under another copyleft license such as the EPL-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:org.openjdk.jmh:jmh-core:1.36' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
29	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:org.openjdk.jmh:jmh-core:1.36	DETECTED: GPL-2.0-only	The outbound license MIT of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only of its dependency 'Maven:org.openjdk.jmh:jmh-core:1.36'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the MIT license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:org.openjdk.jmh:jmh-core:1.36' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
30	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:org.openjdk.jmh:jmh-core:1.36	DECLARED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license Apache-2.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:org.openjdk.jmh:jmh-core:1.36'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:org.openjdk.jmh:jmh-core:1.36' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
31	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:org.openjdk.jmh:jmh-core:1.36	DETECTED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license Apache-2.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:org.openjdk.jmh:jmh-core:1.36'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:org.openjdk.jmh:jmh-core:1.36' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
32	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:org.openjdk.jmh:jmh-core:1.36	DECLARED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license EPL-1.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:org.openjdk.jmh:jmh-core:1.36'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under another copyleft license such as the EPL-1.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:org.openjdk.jmh:jmh-core:1.36' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
33	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:org.openjdk.jmh:jmh-core:1.36	DETECTED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license EPL-1.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:org.openjdk.jmh:jmh-core:1.36'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under another copyleft license such as the EPL-1.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:org.openjdk.jmh:jmh-core:1.36' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
34	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:org.openjdk.jmh:jmh-core:1.36	DECLARED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license EPL-2.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:org.openjdk.jmh:jmh-core:1.36'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under another copyleft license such as the EPL-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:org.openjdk.jmh:jmh-core:1.36' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
35	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:org.openjdk.jmh:jmh-core:1.36	DETECTED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license EPL-2.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:org.openjdk.jmh:jmh-core:1.36'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under another copyleft license such as the EPL-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:org.openjdk.jmh:jmh-core:1.36' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
36	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:org.openjdk.jmh:jmh-core:1.36	DECLARED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license MIT of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:org.openjdk.jmh:jmh-core:1.36'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the MIT license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:org.openjdk.jmh:jmh-core:1.36' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
37	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:org.openjdk.jmh:jmh-core:1.36	DETECTED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license MIT of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:org.openjdk.jmh:jmh-core:1.36'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the MIT license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:org.openjdk.jmh:jmh-core:1.36' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
38	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:org.openjdk.jmh:jmh-core:1.36	DETECTED: GPL-2.0-only WITH LicenseRef-scancode-oracle-openjdk-exception-2.0	The outbound license Apache-2.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH LicenseRef-scancode-oracle-openjdk-exception-2.0') of its dependency 'Maven:org.openjdk.jmh:jmh-core:1.36'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:org.openjdk.jmh:jmh-core:1.36' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
39	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:org.openjdk.jmh:jmh-core:1.36	DETECTED: GPL-2.0-only WITH LicenseRef-scancode-oracle-openjdk-exception-2.0	The outbound license EPL-1.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH LicenseRef-scancode-oracle-openjdk-exception-2.0') of its dependency 'Maven:org.openjdk.jmh:jmh-core:1.36'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under another copyleft license such as the EPL-1.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:org.openjdk.jmh:jmh-core:1.36' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.
40	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:org.openjdk.jmh:jmh-core:1.36	DETECTED: GPL-2.0-only WITH LicenseRef-scancode-oracle-openjdk-exception-2.0	The outbound license EPL-2.0 of project 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH LicenseRef-scancode-oracle-openjdk-exception-2.0') of its dependency 'Maven:org.openjdk.jmh:jmh-core:1.36'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under another copyleft license such as the EPL-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:org.openjdk.jmh:jmh-core:1.36' or put 'Maven:io.vertx:vertx-core:5.0.0-SNAPSHOT' under a different license.