Scan Report

Created by ORT, the OSS Review Toolkit, version cc543c9380-dirty on 2023-03-04T14:23:55.201585430Z.

Project

Scanned revision a60885e0d15570ecf5010b4d286b5ee5eabe858a of Git repository https://github.com/eclipse/microprofile-metrics.git

Index

Rule Violation Summary (239 errors, 197 warnings, 100 hints to resolve)
Issue Summary (2 errors, 0 warnings, 0 hints to resolve)
Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api:5.0.1-SNAPSHOT
Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api-tck:5.0.1-SNAPSHOT
Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT
Maven:org.eclipse.microprofile.metrics:microprofile-metrics-parent:5.0.1-SNAPSHOT
Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT
Maven:org.eclipse.microprofile.metrics:microprofile-metrics-spec:5.0.1-SNAPSHOT
Maven:org.eclipse.microprofile.metrics:microprofile-metrics-tck:5.0.1-SNAPSHOT
Repository Configuration

Rule Violation Summary (239 errors, 197 warnings, 100 hints to resolve)

Issue Summary (2 errors, 0 warnings, 0 hints to resolve)

Issues from excluded components are not shown in this summary.

Packages

#	Package	Analyzer Issues	Scanner Issues
1	Maven:org.apache.httpcomponents:httpcore:4.4.6		Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT 2023-03-04T12:55:06.121299164Z [ERROR]: scanner - Could not resolve nested provenance for package 'Maven:org.apache.httpcomponents:httpcore:4.4.6': SVNException: svn: E175002: Connection reset svn: E175002: REPORT request failed on '/repos/asf/!svn/vcc/default' Caused by: SocketException: Connection reset Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT 2023-03-04T12:55:06.121299164Z [ERROR]: scanner - Could not resolve nested provenance for package 'Maven:org.apache.httpcomponents:httpcore:4.4.6': SVNException: svn: E175002: Connection reset svn: E175002: REPORT request failed on '/repos/asf/!svn/vcc/default' Caused by: SocketException: Connection reset

Package

Analyzer Issues

Scanner Issues

Maven:org.apache.httpcomponents:httpcore:4.4.6

Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT

2023-03-04T12:55:06.121299164Z [ERROR]: scanner - Could not resolve nested provenance for package 'Maven:org.apache.httpcomponents:httpcore:4.4.6': SVNException: svn: E175002: Connection reset
svn: E175002: REPORT request failed on '/repos/asf/!svn/vcc/default'
Caused by: SocketException: Connection reset

Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT

2023-03-04T12:55:06.121299164Z [ERROR]: scanner - Could not resolve nested provenance for package 'Maven:org.apache.httpcomponents:httpcore:4.4.6': SVNException: svn: E175002: Connection reset
svn: E175002: REPORT request failed on '/repos/asf/!svn/vcc/default'
Caused by: SocketException: Connection reset

Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api:5.0.1-SNAPSHOT (api/pom.xml)

VCS Information

Type	Git
URL	https://github.com/eclipse/microprofile-metrics.git
Path	api
Revision	a60885e0d15570ecf5010b4d286b5ee5eabe858a

Packages

#	Package	Scopes	Licenses
1	Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api:5.0.1-SNAPSHOT		Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 52 locations) Effective License: Apache-2.0
2	Maven:jakarta.annotation:jakarta.annotation-api:2.1.0	compile	Declared Licenses: EPL-2.0 GPL-2.0-only WITH Classpath-exception-2.0 Detected Licenses (from VCS): CDDL-1.0 (link to the location) EPL-2.0 (exemplary link to the first of 27 locations) GPL-2.0-only (link to the location) GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 26 locations) LicenseRef-scancode-efsl-1.0 (exemplary link to the first of 2 locations) NOASSERTION (link to the location) NOASSERTION WITH Classpath-exception-2.0 (link to the location) Effective License: CDDL-1.0 AND EPL-2.0 AND GPL-2.0-only AND GPL-2.0-only WITH Classpath-exception-2.0 AND LicenseRef-scancode-efsl-1.0 AND NOASSERTION AND NOASSERTION WITH Classpath-exception-2.0
3	Maven:jakarta.enterprise:jakarta.enterprise.cdi-api:4.0.1	provided Excluded: PROVIDED_DEPENDENCY_OF - Packages provided at runtime by the JDK or container only.	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 212 locations) EPL-2.0 (exemplary link to the first of 37 locations) NOASSERTION (exemplary link to the first of 3 locations) Effective License: Apache-2.0 AND EPL-2.0 AND NOASSERTION
4	Maven:jakarta.inject:jakarta.inject-api:2.0.1	provided Excluded: PROVIDED_DEPENDENCY_OF - Packages provided at runtime by the JDK or container only.	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 11 locations) BSD-3-Clause (link to the location) Effective License: Apache-2.0 AND BSD-3-Clause
5	Maven:jakarta.interceptor:jakarta.interceptor-api:2.1.0	compile	Declared Licenses: EPL-2.0 GPL-2.0-only WITH Classpath-exception-2.0 Detected Licenses (from artifact): CDDL-1.0 (exemplary link to the first of 2 locations) EPL-2.0 (exemplary link to the first of 18 locations) GPL-2.0-only (link to the location) GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 16 locations) NOASSERTION (link to the location) NOASSERTION WITH Classpath-exception-2.0 (exemplary link to the first of 2 locations) Effective License: CDDL-1.0 AND EPL-2.0 AND GPL-2.0-only AND GPL-2.0-only WITH Classpath-exception-2.0 AND NOASSERTION AND NOASSERTION WITH Classpath-exception-2.0
6	Maven:org.osgi:org.osgi.annotation.versioning:1.1.0	provided Excluded: PROVIDED_DEPENDENCY_OF - Packages provided at runtime by the JDK or container only.	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 4 locations) Effective License: Apache-2.0

Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api-tck:5.0.1-SNAPSHOT (tck/api/pom.xml)

VCS Information

Type	Git
URL	https://github.com/eclipse/microprofile-metrics.git
Path	tck/api
Revision	a60885e0d15570ecf5010b4d286b5ee5eabe858a

Packages

#	Package	Scopes	Licenses
1	Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api-tck:5.0.1-SNAPSHOT		Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 113 locations) Effective License: Apache-2.0
2	Maven:jakarta.annotation:jakarta.annotation-api:2.1.0	provided Excluded: PROVIDED_DEPENDENCY_OF - Packages provided at runtime by the JDK or container only.	Declared Licenses: EPL-2.0 GPL-2.0-only WITH Classpath-exception-2.0 Detected Licenses (from VCS): CDDL-1.0 (link to the location) EPL-2.0 (exemplary link to the first of 27 locations) GPL-2.0-only (link to the location) GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 26 locations) LicenseRef-scancode-efsl-1.0 (exemplary link to the first of 2 locations) NOASSERTION (link to the location) NOASSERTION WITH Classpath-exception-2.0 (link to the location) Effective License: CDDL-1.0 AND EPL-2.0 AND GPL-2.0-only AND GPL-2.0-only WITH Classpath-exception-2.0 AND LicenseRef-scancode-efsl-1.0 AND NOASSERTION AND NOASSERTION WITH Classpath-exception-2.0
3	Maven:jakarta.enterprise:jakarta.enterprise.cdi-api:4.0.1	provided Excluded: PROVIDED_DEPENDENCY_OF - Packages provided at runtime by the JDK or container only.	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 212 locations) EPL-2.0 (exemplary link to the first of 37 locations) NOASSERTION (exemplary link to the first of 3 locations) Effective License: Apache-2.0 AND EPL-2.0 AND NOASSERTION
4	Maven:jakarta.inject:jakarta.inject-api:2.0.1	provided Excluded: PROVIDED_DEPENDENCY_OF - Packages provided at runtime by the JDK or container only.	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 11 locations) BSD-3-Clause (link to the location) Effective License: Apache-2.0 AND BSD-3-Clause
5	Maven:jakarta.interceptor:jakarta.interceptor-api:2.1.0	provided Excluded: PROVIDED_DEPENDENCY_OF - Packages provided at runtime by the JDK or container only.	Declared Licenses: EPL-2.0 GPL-2.0-only WITH Classpath-exception-2.0 Detected Licenses (from artifact): CDDL-1.0 (exemplary link to the first of 2 locations) EPL-2.0 (exemplary link to the first of 18 locations) GPL-2.0-only (link to the location) GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 16 locations) NOASSERTION (link to the location) NOASSERTION WITH Classpath-exception-2.0 (exemplary link to the first of 2 locations) Effective License: CDDL-1.0 AND EPL-2.0 AND GPL-2.0-only AND GPL-2.0-only WITH Classpath-exception-2.0 AND NOASSERTION AND NOASSERTION WITH Classpath-exception-2.0
6	Maven:junit:junit:4.13.1	compile	Declared Licenses: EPL-1.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 4 locations) EPL-1.0 (exemplary link to the first of 5 locations) EPL-2.0 (link to the location) NOASSERTION (link to the location) Effective License: Apache-2.0 AND EPL-1.0 AND EPL-2.0 AND NOASSERTION
7	Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api:5.0.1-SNAPSHOT	provided Excluded: PROVIDED_DEPENDENCY_OF - Packages provided at runtime by the JDK or container only.	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 52 locations) Effective License: Apache-2.0
8	Maven:org.hamcrest:hamcrest-all:1.3	compile	Concluded License: BSD-3-Clause Declared Licenses: BSD-3-Clause Effective License: BSD-3-Clause
9	Maven:org.hamcrest:hamcrest-core:1.3	compile	Concluded License: BSD-2-Clause Declared Licenses: BSD-3-Clause Effective License: BSD-2-Clause
10	Maven:org.jboss.arquillian.config:arquillian-config-api:1.7.0.Alpha10	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
11	Maven:org.jboss.arquillian.config:arquillian-config-impl-base:1.7.0.Alpha10	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
12	Maven:org.jboss.arquillian.config:arquillian-config-spi:1.7.0.Alpha10	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
13	Maven:org.jboss.arquillian.container:arquillian-container-impl-base:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
14	Maven:org.jboss.arquillian.container:arquillian-container-spi:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
15	Maven:org.jboss.arquillian.container:arquillian-container-test-api:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
16	Maven:org.jboss.arquillian.container:arquillian-container-test-impl-base:1.7.0.Alpha10	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
17	Maven:org.jboss.arquillian.container:arquillian-container-test-spi:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
18	Maven:org.jboss.arquillian.core:arquillian-core-api:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
19	Maven:org.jboss.arquillian.core:arquillian-core-impl-base:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
20	Maven:org.jboss.arquillian.core:arquillian-core-spi:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
21	Maven:org.jboss.arquillian.junit:arquillian-junit-container:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
22	Maven:org.jboss.arquillian.junit:arquillian-junit-core:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
23	Maven:org.jboss.arquillian.test:arquillian-test-api:1.7.0.Alpha10	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
24	Maven:org.jboss.arquillian.test:arquillian-test-impl-base:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
25	Maven:org.jboss.arquillian.test:arquillian-test-spi:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
26	Maven:org.jboss.shrinkwrap:shrinkwrap-api:1.2.6	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 254 locations) LicenseRef-scancode-public-domain (exemplary link to the first of 2 locations) LicenseRef-scancode-public-domain-disclaimer (exemplary link to the first of 9 locations) Effective License: Apache-2.0 AND LicenseRef-scancode-public-domain AND LicenseRef-scancode-public-domain-disclaimer
27	Maven:org.jboss.shrinkwrap:shrinkwrap-impl-base:1.2.6	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 254 locations) LicenseRef-scancode-public-domain (exemplary link to the first of 2 locations) LicenseRef-scancode-public-domain-disclaimer (exemplary link to the first of 9 locations) Effective License: Apache-2.0 AND LicenseRef-scancode-public-domain AND LicenseRef-scancode-public-domain-disclaimer
28	Maven:org.jboss.shrinkwrap:shrinkwrap-spi:1.2.6	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 254 locations) LicenseRef-scancode-public-domain (exemplary link to the first of 2 locations) LicenseRef-scancode-public-domain-disclaimer (exemplary link to the first of 9 locations) Effective License: Apache-2.0 AND LicenseRef-scancode-public-domain AND LicenseRef-scancode-public-domain-disclaimer
29	Maven:org.jboss.shrinkwrap.descriptors:shrinkwrap-descriptors-api-base:2.0.0	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 173 locations) BSD-3-Clause (exemplary link to the first of 10 locations) CDDL-1.0 (exemplary link to the first of 56 locations) CDDL-1.1 (exemplary link to the first of 17 locations) EPL-1.0 (exemplary link to the first of 7 locations) GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 73 locations) LGPL-2.1-or-later (exemplary link to the first of 11 locations) LicenseRef-scancode-public-domain (exemplary link to the first of 4 locations) Effective License: Apache-2.0 AND BSD-3-Clause AND CDDL-1.0 AND CDDL-1.1 AND EPL-1.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND LGPL-2.1-or-later AND LicenseRef-scancode-public-domain
30	Maven:org.jboss.shrinkwrap.descriptors:shrinkwrap-descriptors-spi:2.0.0	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 173 locations) BSD-3-Clause (exemplary link to the first of 10 locations) CDDL-1.0 (exemplary link to the first of 56 locations) CDDL-1.1 (exemplary link to the first of 17 locations) EPL-1.0 (exemplary link to the first of 7 locations) GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 73 locations) LGPL-2.1-or-later (exemplary link to the first of 11 locations) LicenseRef-scancode-public-domain (exemplary link to the first of 4 locations) Effective License: Apache-2.0 AND BSD-3-Clause AND CDDL-1.0 AND CDDL-1.1 AND EPL-1.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND LGPL-2.1-or-later AND LicenseRef-scancode-public-domain

Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT (tck/optional/pom.xml)

VCS Information

Type	Git
URL	https://github.com/eclipse/microprofile-metrics.git
Path	tck/optional
Revision	a60885e0d15570ecf5010b4d286b5ee5eabe858a

Packages

#	Package	Scopes	Licenses	Scanner Issues
1	Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT		Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 23 locations) Effective License: Apache-2.0
2	Maven:com.google.guava:guava:18.0	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 465 locations) CC-PDDC (link to the location) CC0-1.0 (exemplary link to the first of 5 locations) LicenseRef-scancode-public-domain (exemplary link to the first of 4 locations) Effective License: Apache-2.0
3	Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1	compile	Declared Licenses: CDDL-1.0 GPL-2.0-or-later Detected Licenses (from artifact): Apache-1.1 Apache-2.0 BSD-3-Clause CDDL-1.1 GPL-2.0-only GPL-2.0-only WITH Classpath-exception-2.0 GPL-2.0-or-later LGPL-2.1-or-later LicenseRef-scancode-jsr-107-jcache-spec-2013 LicenseRef-scancode-proprietary-license LicenseRef-scancode-public-domain LicenseRef-scancode-public-domain-disclaimer MIT MPL-1.1 NOASSERTION SAX-PD Effective License: Apache-1.1 AND Apache-2.0 AND BSD-3-Clause AND CDDL-1.0 AND CDDL-1.1 AND GPL-2.0-only AND GPL-2.0-only WITH Classpath-exception-2.0 AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LicenseRef-scancode-jsr-107-jcache-spec-2013 AND LicenseRef-scancode-proprietary-license AND LicenseRef-scancode-public-domain AND LicenseRef-scancode-public-domain-disclaimer AND MIT AND MPL-1.1 AND NOASSERTION AND SAX-PD OR Apache-1.1 AND Apache-2.0 AND BSD-3-Clause AND CDDL-1.1 AND GPL-2.0-only AND GPL-2.0-only WITH Classpath-exception-2.0 AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LicenseRef-scancode-jsr-107-jcache-spec-2013 AND LicenseRef-scancode-proprietary-license AND LicenseRef-scancode-public-domain AND LicenseRef-scancode-public-domain-disclaimer AND MIT AND MPL-1.1 AND NOASSERTION AND SAX-PD
4	Maven:commons-codec:commons-codec:1.9	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 189 locations) LicenseRef-scancode-public-domain (exemplary link to the first of 3 locations) Effective License: Apache-2.0
5	Maven:commons-io:commons-io:2.2	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 112 locations) Effective License: Apache-2.0
6	Maven:commons-lang:commons-lang:2.6	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 99 locations) LGPL-2.1-only (link to the location) Effective License: Apache-2.0
7	Maven:commons-logging:commons-logging:1.2	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Effective License: Apache-2.0
8	Maven:io.rest-assured:json-path:4.3.0	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 651 locations) NOASSERTION (link to the location) Effective License: Apache-2.0 AND NOASSERTION
9	Maven:io.rest-assured:rest-assured:4.3.0	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 651 locations) NOASSERTION (link to the location) Effective License: Apache-2.0 AND NOASSERTION
10	Maven:io.rest-assured:rest-assured-common:4.3.0	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 651 locations) NOASSERTION (link to the location) Effective License: Apache-2.0 AND NOASSERTION
11	Maven:io.rest-assured:xml-path:4.3.0	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 651 locations) NOASSERTION (link to the location) Effective License: Apache-2.0 AND NOASSERTION
12	Maven:jakarta.activation:jakarta.activation-api:1.2.1	compile	Declared Licenses: BSD-3-Clause Detected Licenses (from artifact): BSD-3-Clause (exemplary link to the first of 43 locations) EPL-2.0 (link to the location) Effective License: BSD-3-Clause AND EPL-2.0
13	Maven:jakarta.annotation:jakarta.annotation-api:2.1.0	provided Excluded: PROVIDED_DEPENDENCY_OF - Packages provided at runtime by the JDK or container only.	Declared Licenses: EPL-2.0 GPL-2.0-only WITH Classpath-exception-2.0 Detected Licenses (from VCS): CDDL-1.0 (link to the location) EPL-2.0 (exemplary link to the first of 27 locations) GPL-2.0-only (link to the location) GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 26 locations) LicenseRef-scancode-efsl-1.0 (exemplary link to the first of 2 locations) NOASSERTION (link to the location) NOASSERTION WITH Classpath-exception-2.0 (link to the location) Effective License: CDDL-1.0 AND EPL-2.0 AND GPL-2.0-only AND GPL-2.0-only WITH Classpath-exception-2.0 AND LicenseRef-scancode-efsl-1.0 AND NOASSERTION AND NOASSERTION WITH Classpath-exception-2.0
14	Maven:jakarta.enterprise:jakarta.enterprise.cdi-api:4.0.1	provided Excluded: PROVIDED_DEPENDENCY_OF - Packages provided at runtime by the JDK or container only.	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 212 locations) EPL-2.0 (exemplary link to the first of 37 locations) NOASSERTION (exemplary link to the first of 3 locations) Effective License: Apache-2.0 AND EPL-2.0 AND NOASSERTION
15	Maven:jakarta.inject:jakarta.inject-api:2.0.1	provided Excluded: PROVIDED_DEPENDENCY_OF - Packages provided at runtime by the JDK or container only.	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 11 locations) BSD-3-Clause (link to the location) Effective License: Apache-2.0 AND BSD-3-Clause
16	Maven:jakarta.interceptor:jakarta.interceptor-api:2.1.0	provided Excluded: PROVIDED_DEPENDENCY_OF - Packages provided at runtime by the JDK or container only.	Declared Licenses: EPL-2.0 GPL-2.0-only WITH Classpath-exception-2.0 Detected Licenses (from artifact): CDDL-1.0 (exemplary link to the first of 2 locations) EPL-2.0 (exemplary link to the first of 18 locations) GPL-2.0-only (link to the location) GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 16 locations) NOASSERTION (link to the location) NOASSERTION WITH Classpath-exception-2.0 (exemplary link to the first of 2 locations) Effective License: CDDL-1.0 AND EPL-2.0 AND GPL-2.0-only AND GPL-2.0-only WITH Classpath-exception-2.0 AND NOASSERTION AND NOASSERTION WITH Classpath-exception-2.0
17	Maven:jakarta.ws.rs:jakarta.ws.rs-api:3.1.0	provided Excluded: PROVIDED_DEPENDENCY_OF - Packages provided at runtime by the JDK or container only.	Declared Licenses: EPL-2.0 GPL-2.0-only WITH Classpath-exception-2.0 Detected Licenses (from VCS): Apache-1.1 (exemplary link to the first of 8 locations) Apache-2.0 (exemplary link to the first of 3 locations) BSD-3-Clause (exemplary link to the first of 98 locations) CPL-1.0 (link to the location) EPL-2.0 (exemplary link to the first of 1051 locations) GPL-2.0-only (link to the location) GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 1047 locations) GPL-2.0-or-later (exemplary link to the first of 2 locations) LGPL-2.1-only (link to the location) LGPL-2.1-or-later (exemplary link to the first of 2 locations) LicenseRef-scancode-efsl-1.0 (exemplary link to the first of 2 locations) LicenseRef-scancode-zipeg (link to the location) MIT (link to the location) NOASSERTION (exemplary link to the first of 100 locations) NOASSERTION WITH Classpath-exception-2.0 (exemplary link to the first of 4 locations) Effective License: Apache-1.1 AND Apache-2.0 AND BSD-3-Clause AND CPL-1.0 AND EPL-2.0 AND GPL-2.0-only AND GPL-2.0-only WITH Classpath-exception-2.0 AND GPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND LicenseRef-scancode-efsl-1.0 AND LicenseRef-scancode-zipeg AND MIT AND NOASSERTION AND NOASSERTION WITH Classpath-exception-2.0
18	Maven:jakarta.xml.bind:jakarta.xml.bind-api:2.3.2	compile	Declared Licenses: BSD-3-Clause Detected Licenses (from VCS): Apache-2.0 (link to the location) BSD-3-Clause (exemplary link to the first of 254 locations) NOASSERTION (link to the location) Effective License: Apache-2.0 AND BSD-3-Clause AND NOASSERTION
19	Maven:javax.activation:activation:1.1.1	compile	Concluded License: CDDL-1.0 Declared Licenses: CDDL-1.0 Detected Licenses (from artifact): CDDL-1.0 (exemplary link to the first of 29 locations) GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 29 locations) Effective License: CDDL-1.0
20	Maven:javax.inject:javax.inject:1	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 7 locations) Effective License: Apache-2.0
21	Maven:junit:junit:4.13.1	compile	Declared Licenses: EPL-1.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 4 locations) EPL-1.0 (exemplary link to the first of 5 locations) EPL-2.0 (link to the location) NOASSERTION (link to the location) Effective License: Apache-2.0 AND EPL-1.0 AND EPL-2.0 AND NOASSERTION
22	Maven:org.apache.commons:commons-lang3:3.8.1	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-1.1 Apache-2.0 NOASSERTION Effective License: Apache-2.0
23	Maven:org.apache.httpcomponents:httpclient:4.5.3	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 MPL-2.0 NOASSERTION Effective License: Apache-2.0
24	Maven:org.apache.httpcomponents:httpcore:4.4.6	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Effective License: Apache-2.0	2023-03-04T12:55:06.121299164Z [ERROR]: scanner - Could not resolve nested provenance for package 'Maven:org.apache.httpcomponents:httpcore:4.4.6': SVNException: svn: E175002: Connection reset svn: E175002: REPORT request failed on '/repos/asf/!svn/vcc/default' Caused by: SocketException: Connection reset
25	Maven:org.apache.httpcomponents:httpmime:4.5.3	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 MPL-2.0 NOASSERTION Effective License: Apache-2.0 AND MPL-2.0 AND NOASSERTION
26	Maven:org.apache.maven:maven-aether-provider:3.2.5	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 CDDL-1.0 CPL-1.0 LicenseRef-scancode-jsr-107-jcache-spec-2013 NOASSERTION Effective License: Apache-2.0 AND CDDL-1.0 AND CPL-1.0 AND LicenseRef-scancode-jsr-107-jcache-spec-2013 AND NOASSERTION
27	Maven:org.apache.maven:maven-artifact:3.6.3	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 BSD-3-Clause CDDL-1.0 CPL-1.0 EPL-1.0 LicenseRef-scancode-jsr-107-jcache-spec-2013 LicenseRef-scancode-proprietary-license MIT NOASSERTION Effective License: Apache-2.0 AND BSD-3-Clause AND CDDL-1.0 AND CPL-1.0 AND EPL-1.0 AND LicenseRef-scancode-jsr-107-jcache-spec-2013 AND LicenseRef-scancode-proprietary-license AND MIT AND NOASSERTION
28	Maven:org.apache.maven:maven-builder-support:3.6.3	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 BSD-3-Clause CDDL-1.0 CPL-1.0 EPL-1.0 LicenseRef-scancode-jsr-107-jcache-spec-2013 LicenseRef-scancode-proprietary-license MIT NOASSERTION Effective License: Apache-2.0 AND BSD-3-Clause AND CDDL-1.0 AND CPL-1.0 AND EPL-1.0 AND LicenseRef-scancode-jsr-107-jcache-spec-2013 AND LicenseRef-scancode-proprietary-license AND MIT AND NOASSERTION
29	Maven:org.apache.maven:maven-model:3.6.3	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 BSD-3-Clause CDDL-1.0 CPL-1.0 EPL-1.0 LicenseRef-scancode-jsr-107-jcache-spec-2013 LicenseRef-scancode-proprietary-license MIT NOASSERTION Effective License: Apache-2.0 AND BSD-3-Clause AND CDDL-1.0 AND CPL-1.0 AND EPL-1.0 AND LicenseRef-scancode-jsr-107-jcache-spec-2013 AND LicenseRef-scancode-proprietary-license AND MIT AND NOASSERTION
30	Maven:org.apache.maven:maven-model-builder:3.6.3	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 BSD-3-Clause CDDL-1.0 CPL-1.0 EPL-1.0 LicenseRef-scancode-jsr-107-jcache-spec-2013 LicenseRef-scancode-proprietary-license MIT NOASSERTION Effective License: Apache-2.0
31	Maven:org.apache.maven:maven-repository-metadata:3.6.3	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 BSD-3-Clause CDDL-1.0 CPL-1.0 EPL-1.0 LicenseRef-scancode-jsr-107-jcache-spec-2013 LicenseRef-scancode-proprietary-license MIT NOASSERTION Effective License: Apache-2.0 AND BSD-3-Clause AND CDDL-1.0 AND CPL-1.0 AND EPL-1.0 AND LicenseRef-scancode-jsr-107-jcache-spec-2013 AND LicenseRef-scancode-proprietary-license AND MIT AND NOASSERTION
32	Maven:org.apache.maven:maven-settings:3.6.3	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 BSD-3-Clause CDDL-1.0 CPL-1.0 EPL-1.0 LicenseRef-scancode-jsr-107-jcache-spec-2013 LicenseRef-scancode-proprietary-license MIT NOASSERTION Effective License: Apache-2.0 AND BSD-3-Clause AND CDDL-1.0 AND CPL-1.0 AND EPL-1.0 AND LicenseRef-scancode-jsr-107-jcache-spec-2013 AND LicenseRef-scancode-proprietary-license AND MIT AND NOASSERTION
33	Maven:org.apache.maven:maven-settings-builder:3.6.3	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 BSD-3-Clause CDDL-1.0 CPL-1.0 EPL-1.0 LicenseRef-scancode-jsr-107-jcache-spec-2013 LicenseRef-scancode-proprietary-license MIT NOASSERTION Effective License: Apache-2.0 AND BSD-3-Clause AND CDDL-1.0 AND CPL-1.0 AND EPL-1.0 AND LicenseRef-scancode-jsr-107-jcache-spec-2013 AND LicenseRef-scancode-proprietary-license AND MIT AND NOASSERTION
34	Maven:org.apache.maven.wagon:wagon-file:3.3.4	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 NOASSERTION Effective License: Apache-2.0 AND NOASSERTION
35	Maven:org.apache.maven.wagon:wagon-http-lightweight:2.6	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 Effective License: Apache-2.0
36	Maven:org.apache.maven.wagon:wagon-http-shared:2.6	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 Effective License: Apache-2.0
37	Maven:org.apache.maven.wagon:wagon-provider-api:3.3.4	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 NOASSERTION Effective License: Apache-2.0 AND NOASSERTION
38	Maven:org.apache.sling:org.apache.sling.javax.activation:0.1.0	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 4 locations) Effective License: Apache-2.0
39	Maven:org.ccil.cowan.tagsoup:tagsoup:1.2.1	compile	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): AFL-3.0 (link to the location) Apache-2.0 (exemplary link to the first of 19 locations) BSD-3-Clause (link to the location) GPL-2.0-only (link to the location) GPL-2.0-or-later (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 2 locations) SAX-PD (link to the location) Effective License: AFL-3.0 AND Apache-2.0 AND BSD-3-Clause AND GPL-2.0-only AND LicenseRef-scancode-public-domain AND SAX-PD OR AFL-3.0 AND Apache-2.0 AND GPL-2.0-only AND GPL-2.0-or-later AND LicenseRef-scancode-public-domain AND SAX-PD
40	Maven:org.codehaus.groovy:groovy:3.0.2	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): ANTLR-PD-fallback (link to the location) Apache-2.0 (exemplary link to the first of 4518 locations) BSD-3-Clause (exemplary link to the first of 40 locations) CC-BY-2.5 (exemplary link to the first of 7 locations) CC-BY-3.0 (exemplary link to the first of 2 locations) CC-BY-4.0 (exemplary link to the first of 2 locations) CC-BY-SA-3.0 (exemplary link to the first of 3 locations) CC-PDDC (link to the location) CDDL-1.0 (exemplary link to the first of 5 locations) CDDL-1.1 (exemplary link to the first of 4 locations) DOC (exemplary link to the first of 4 locations) EPL-1.0 (exemplary link to the first of 10 locations) EPL-2.0 (exemplary link to the first of 4 locations) GPL-1.0-or-later (link to the location) GPL-3.0-or-later (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 9 locations) MIT (exemplary link to the first of 26 locations) NOASSERTION (exemplary link to the first of 46 locations) Effective License: ANTLR-PD-fallback AND Apache-2.0 AND BSD-3-Clause AND CC-BY-2.5 AND CC-BY-3.0 AND CC-BY-SA-3.0 AND CC-PDDC AND CDDL-1.0 AND CDDL-1.1 AND DOC AND EPL-1.0 AND EPL-2.0 AND GPL-1.0-or-later AND GPL-3.0-or-later AND LicenseRef-scancode-public-domain AND MIT AND NOASSERTION OR ANTLR-PD-fallback AND Apache-2.0 AND BSD-3-Clause AND CC-BY-2.5 AND CC-BY-4.0 AND CC-BY-SA-3.0 AND CC-PDDC AND CDDL-1.0 AND CDDL-1.1 AND DOC AND EPL-1.0 AND EPL-2.0 AND GPL-1.0-or-later AND GPL-3.0-or-later AND LicenseRef-scancode-public-domain AND MIT AND NOASSERTION
41	Maven:org.codehaus.groovy:groovy-json:3.0.2	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): ANTLR-PD-fallback (link to the location) Apache-2.0 (exemplary link to the first of 4518 locations) BSD-3-Clause (exemplary link to the first of 40 locations) CC-BY-2.5 (exemplary link to the first of 7 locations) CC-BY-3.0 (exemplary link to the first of 2 locations) CC-BY-4.0 (exemplary link to the first of 2 locations) CC-BY-SA-3.0 (exemplary link to the first of 3 locations) CC-PDDC (link to the location) CDDL-1.0 (exemplary link to the first of 5 locations) CDDL-1.1 (exemplary link to the first of 4 locations) DOC (exemplary link to the first of 4 locations) EPL-1.0 (exemplary link to the first of 10 locations) EPL-2.0 (exemplary link to the first of 4 locations) GPL-1.0-or-later (link to the location) GPL-3.0-or-later (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 9 locations) MIT (exemplary link to the first of 26 locations) NOASSERTION (exemplary link to the first of 46 locations) Effective License: ANTLR-PD-fallback AND Apache-2.0 AND BSD-3-Clause AND CC-BY-2.5 AND CC-BY-3.0 AND CC-BY-SA-3.0 AND CC-PDDC AND CDDL-1.0 AND CDDL-1.1 AND DOC AND EPL-1.0 AND EPL-2.0 AND GPL-1.0-or-later AND GPL-3.0-or-later AND LicenseRef-scancode-public-domain AND MIT AND NOASSERTION OR ANTLR-PD-fallback AND Apache-2.0 AND BSD-3-Clause AND CC-BY-2.5 AND CC-BY-4.0 AND CC-BY-SA-3.0 AND CC-PDDC AND CDDL-1.0 AND CDDL-1.1 AND DOC AND EPL-1.0 AND EPL-2.0 AND GPL-1.0-or-later AND GPL-3.0-or-later AND LicenseRef-scancode-public-domain AND MIT AND NOASSERTION
42	Maven:org.codehaus.groovy:groovy-xml:3.0.2	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): ANTLR-PD-fallback (link to the location) Apache-2.0 (exemplary link to the first of 4518 locations) BSD-3-Clause (exemplary link to the first of 40 locations) CC-BY-2.5 (exemplary link to the first of 7 locations) CC-BY-3.0 (exemplary link to the first of 2 locations) CC-BY-4.0 (exemplary link to the first of 2 locations) CC-BY-SA-3.0 (exemplary link to the first of 3 locations) CC-PDDC (link to the location) CDDL-1.0 (exemplary link to the first of 5 locations) CDDL-1.1 (exemplary link to the first of 4 locations) DOC (exemplary link to the first of 4 locations) EPL-1.0 (exemplary link to the first of 10 locations) EPL-2.0 (exemplary link to the first of 4 locations) GPL-1.0-or-later (link to the location) GPL-3.0-or-later (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 9 locations) MIT (exemplary link to the first of 26 locations) NOASSERTION (exemplary link to the first of 46 locations) Effective License: ANTLR-PD-fallback AND Apache-2.0 AND BSD-3-Clause AND CC-BY-2.5 AND CC-BY-3.0 AND CC-BY-SA-3.0 AND CC-PDDC AND CDDL-1.0 AND CDDL-1.1 AND DOC AND EPL-1.0 AND EPL-2.0 AND GPL-1.0-or-later AND GPL-3.0-or-later AND LicenseRef-scancode-public-domain AND MIT AND NOASSERTION OR ANTLR-PD-fallback AND Apache-2.0 AND BSD-3-Clause AND CC-BY-2.5 AND CC-BY-4.0 AND CC-BY-SA-3.0 AND CC-PDDC AND CDDL-1.0 AND CDDL-1.1 AND DOC AND EPL-1.0 AND EPL-2.0 AND GPL-1.0-or-later AND GPL-3.0-or-later AND LicenseRef-scancode-public-domain AND MIT AND NOASSERTION
43	Maven:org.codehaus.plexus:plexus-interpolation:1.25	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-1.1 (exemplary link to the first of 4 locations) Apache-2.0 (exemplary link to the first of 45 locations) MIT (exemplary link to the first of 2 locations) Effective License: Apache-2.0
44	Maven:org.codehaus.plexus:plexus-utils:3.2.1	compile	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-1.1 (exemplary link to the first of 10 locations) Apache-2.0 (exemplary link to the first of 69 locations) BSD-2-Clause (link to the location) BSD-3-Clause (exemplary link to the first of 4 locations) LicenseRef-scancode-indiana-extreme (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) NOASSERTION (link to the location) SAX-PD (exemplary link to the first of 4 locations) xpp (link to the location) Effective License: Apache-1.1 AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND LicenseRef-scancode-indiana-extreme AND LicenseRef-scancode-public-domain AND NOASSERTION AND SAX-PD AND xpp
45	Maven:org.eclipse.aether:aether-api:1.0.0.v20140518	compile	Declared Licenses: EPL-1.0 Detected Licenses (from artifact): CPL-1.0 (link to the location) EPL-1.0 (exemplary link to the first of 125 locations) NOASSERTION (link to the location) Effective License: CPL-1.0 AND EPL-1.0 AND NOASSERTION
46	Maven:org.eclipse.aether:aether-connector-basic:1.0.0.v20140518	compile	Declared Licenses: EPL-1.0 Detected Licenses (from artifact): CPL-1.0 (link to the location) EPL-1.0 (exemplary link to the first of 11 locations) NOASSERTION (link to the location) Effective License: CPL-1.0 AND EPL-1.0 AND NOASSERTION
47	Maven:org.eclipse.aether:aether-impl:1.0.0.v20140518	compile	Declared Licenses: EPL-1.0 Detected Licenses (from artifact): CPL-1.0 (link to the location) EPL-1.0 (exemplary link to the first of 72 locations) NOASSERTION (link to the location) Effective License: CPL-1.0 AND EPL-1.0 AND NOASSERTION
48	Maven:org.eclipse.aether:aether-spi:1.0.0.v20140518	compile	Declared Licenses: EPL-1.0 Detected Licenses (from artifact): CPL-1.0 (link to the location) EPL-1.0 (exemplary link to the first of 41 locations) NOASSERTION (link to the location) Effective License: CPL-1.0 AND EPL-1.0 AND NOASSERTION
49	Maven:org.eclipse.aether:aether-transport-wagon:1.0.0.v20140518	compile	Declared Licenses: EPL-1.0 Detected Licenses (from artifact): CPL-1.0 (link to the location) EPL-1.0 (exemplary link to the first of 12 locations) NOASSERTION (link to the location) Effective License: CPL-1.0 AND EPL-1.0 AND NOASSERTION
50	Maven:org.eclipse.aether:aether-util:1.0.0.v20140518	compile	Declared Licenses: EPL-1.0 Detected Licenses (from artifact): CPL-1.0 (link to the location) EPL-1.0 (exemplary link to the first of 91 locations) NOASSERTION (link to the location) Effective License: CPL-1.0 AND EPL-1.0 AND NOASSERTION
51	Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api:5.0.1-SNAPSHOT	provided Excluded: PROVIDED_DEPENDENCY_OF - Packages provided at runtime by the JDK or container only.	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 52 locations) Effective License: Apache-2.0
52	Maven:org.eclipse.sisu:org.eclipse.sisu.inject:0.3.4	compile	Declared Licenses: EPL-1.0 Detected Licenses (from artifact): BSD-3-Clause (exemplary link to the first of 24 locations) EPL-1.0 (exemplary link to the first of 146 locations) NOASSERTION (link to the location) Effective License: BSD-3-Clause AND EPL-1.0 AND NOASSERTION
53	Maven:org.hamcrest:hamcrest:2.1	compile	Declared Licenses: BSD-3-Clause Effective License: BSD-3-Clause
54	Maven:org.hamcrest:hamcrest-core:1.3	compile	Concluded License: BSD-2-Clause Declared Licenses: BSD-3-Clause Effective License: BSD-2-Clause
55	Maven:org.jboss.arquillian.config:arquillian-config-api:1.7.0.Alpha10	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
56	Maven:org.jboss.arquillian.config:arquillian-config-impl-base:1.7.0.Alpha10	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
57	Maven:org.jboss.arquillian.config:arquillian-config-spi:1.7.0.Alpha10	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
58	Maven:org.jboss.arquillian.container:arquillian-container-impl-base:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
59	Maven:org.jboss.arquillian.container:arquillian-container-spi:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
60	Maven:org.jboss.arquillian.container:arquillian-container-test-api:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
61	Maven:org.jboss.arquillian.container:arquillian-container-test-impl-base:1.7.0.Alpha10	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
62	Maven:org.jboss.arquillian.container:arquillian-container-test-spi:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
63	Maven:org.jboss.arquillian.core:arquillian-core-api:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
64	Maven:org.jboss.arquillian.core:arquillian-core-impl-base:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
65	Maven:org.jboss.arquillian.core:arquillian-core-spi:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
66	Maven:org.jboss.arquillian.junit:arquillian-junit-container:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
67	Maven:org.jboss.arquillian.junit:arquillian-junit-core:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
68	Maven:org.jboss.arquillian.test:arquillian-test-api:1.7.0.Alpha10	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
69	Maven:org.jboss.arquillian.test:arquillian-test-impl-base:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
70	Maven:org.jboss.arquillian.test:arquillian-test-spi:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
71	Maven:org.jboss.shrinkwrap:shrinkwrap-api:1.2.6	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 254 locations) LicenseRef-scancode-public-domain (exemplary link to the first of 2 locations) LicenseRef-scancode-public-domain-disclaimer (exemplary link to the first of 9 locations) Effective License: Apache-2.0 AND LicenseRef-scancode-public-domain AND LicenseRef-scancode-public-domain-disclaimer
72	Maven:org.jboss.shrinkwrap:shrinkwrap-impl-base:1.2.6	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 254 locations) LicenseRef-scancode-public-domain (exemplary link to the first of 2 locations) LicenseRef-scancode-public-domain-disclaimer (exemplary link to the first of 9 locations) Effective License: Apache-2.0 AND LicenseRef-scancode-public-domain AND LicenseRef-scancode-public-domain-disclaimer
73	Maven:org.jboss.shrinkwrap:shrinkwrap-spi:1.2.6	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 254 locations) LicenseRef-scancode-public-domain (exemplary link to the first of 2 locations) LicenseRef-scancode-public-domain-disclaimer (exemplary link to the first of 9 locations) Effective License: Apache-2.0 AND LicenseRef-scancode-public-domain AND LicenseRef-scancode-public-domain-disclaimer
74	Maven:org.jboss.shrinkwrap.descriptors:shrinkwrap-descriptors-api-base:2.0.0	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 173 locations) BSD-3-Clause (exemplary link to the first of 10 locations) CDDL-1.0 (exemplary link to the first of 56 locations) CDDL-1.1 (exemplary link to the first of 17 locations) EPL-1.0 (exemplary link to the first of 7 locations) GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 73 locations) LGPL-2.1-or-later (exemplary link to the first of 11 locations) LicenseRef-scancode-public-domain (exemplary link to the first of 4 locations) Effective License: Apache-2.0 AND BSD-3-Clause AND CDDL-1.0 AND CDDL-1.1 AND EPL-1.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND LGPL-2.1-or-later AND LicenseRef-scancode-public-domain
75	Maven:org.jboss.shrinkwrap.descriptors:shrinkwrap-descriptors-spi:2.0.0	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 173 locations) BSD-3-Clause (exemplary link to the first of 10 locations) CDDL-1.0 (exemplary link to the first of 56 locations) CDDL-1.1 (exemplary link to the first of 17 locations) EPL-1.0 (exemplary link to the first of 7 locations) GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 73 locations) LGPL-2.1-or-later (exemplary link to the first of 11 locations) LicenseRef-scancode-public-domain (exemplary link to the first of 4 locations) Effective License: Apache-2.0 AND BSD-3-Clause AND CDDL-1.0 AND CDDL-1.1 AND EPL-1.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND LGPL-2.1-or-later AND LicenseRef-scancode-public-domain
76	Maven:org.jboss.shrinkwrap.resolver:shrinkwrap-resolver-api:3.1.4	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 257 locations) LGPL-2.1-or-later (link to the location) Effective License: Apache-2.0 AND LGPL-2.1-or-later
77	Maven:org.jboss.shrinkwrap.resolver:shrinkwrap-resolver-api-maven:3.1.4	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 257 locations) LGPL-2.1-or-later (link to the location) Effective License: Apache-2.0 AND LGPL-2.1-or-later
78	Maven:org.jboss.shrinkwrap.resolver:shrinkwrap-resolver-impl-maven:2.2.4	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 242 locations) LGPL-2.1-or-later (link to the location) Effective License: Apache-2.0 AND LGPL-2.1-or-later
79	Maven:org.jboss.shrinkwrap.resolver:shrinkwrap-resolver-spi:3.1.4	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 257 locations) LGPL-2.1-or-later (link to the location) Effective License: Apache-2.0 AND LGPL-2.1-or-later
80	Maven:org.jboss.shrinkwrap.resolver:shrinkwrap-resolver-spi-maven:3.1.4	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 257 locations) LGPL-2.1-or-later (link to the location) Effective License: Apache-2.0 AND LGPL-2.1-or-later
81	Maven:org.sonatype.plexus:plexus-cipher:1.7	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 6 locations) NOASSERTION (link to the location) Effective License: Apache-2.0
82	Maven:org.sonatype.plexus:plexus-sec-dispatcher:1.4	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 6 locations) Effective License: Apache-2.0

Maven:org.eclipse.microprofile.metrics:microprofile-metrics-parent:5.0.1-SNAPSHOT (pom.xml)

VCS Information

Type	Git
URL	https://github.com/eclipse/microprofile-metrics.git
Path
Revision	a60885e0d15570ecf5010b4d286b5ee5eabe858a

Packages

#	Package	Scopes	Licenses	Analyzer Issues	Scanner Issues
1	Maven:org.eclipse.microprofile.metrics:microprofile-metrics-parent:5.0.1-SNAPSHOT		Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 230 locations) LicenseRef-scancode-efsl-1.0 (link to the location) Effective License: Apache-2.0 AND LicenseRef-scancode-efsl-1.0

Package

Scopes

Licenses

Analyzer Issues

Scanner Issues

Maven:org.eclipse.microprofile.metrics:microprofile-metrics-parent:5.0.1-SNAPSHOT

Declared Licenses:

Apache-2.0

Detected Licenses (from VCS):

Apache-2.0 (exemplary link to the first of 230 locations)

LicenseRef-scancode-efsl-1.0 (link to the location)

Effective License:

Apache-2.0 AND LicenseRef-scancode-efsl-1.0

Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT (tck/rest/pom.xml)

VCS Information

Type	Git
URL	https://github.com/eclipse/microprofile-metrics.git
Path	tck/rest
Revision	a60885e0d15570ecf5010b4d286b5ee5eabe858a

Packages

#	Package	Scopes	Licenses	Scanner Issues
1	Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT		Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 17 locations) Effective License: Apache-2.0
2	Maven:com.google.guava:guava:18.0	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 465 locations) CC-PDDC (link to the location) CC0-1.0 (exemplary link to the first of 5 locations) LicenseRef-scancode-public-domain (exemplary link to the first of 4 locations) Effective License: Apache-2.0
3	Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1	compile	Declared Licenses: CDDL-1.0 GPL-2.0-or-later Detected Licenses (from artifact): Apache-1.1 Apache-2.0 BSD-3-Clause CDDL-1.1 GPL-2.0-only GPL-2.0-only WITH Classpath-exception-2.0 GPL-2.0-or-later LGPL-2.1-or-later LicenseRef-scancode-jsr-107-jcache-spec-2013 LicenseRef-scancode-proprietary-license LicenseRef-scancode-public-domain LicenseRef-scancode-public-domain-disclaimer MIT MPL-1.1 NOASSERTION SAX-PD Effective License: Apache-1.1 AND Apache-2.0 AND BSD-3-Clause AND CDDL-1.0 AND CDDL-1.1 AND GPL-2.0-only AND GPL-2.0-only WITH Classpath-exception-2.0 AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LicenseRef-scancode-jsr-107-jcache-spec-2013 AND LicenseRef-scancode-proprietary-license AND LicenseRef-scancode-public-domain AND LicenseRef-scancode-public-domain-disclaimer AND MIT AND MPL-1.1 AND NOASSERTION AND SAX-PD OR Apache-1.1 AND Apache-2.0 AND BSD-3-Clause AND CDDL-1.1 AND GPL-2.0-only AND GPL-2.0-only WITH Classpath-exception-2.0 AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LicenseRef-scancode-jsr-107-jcache-spec-2013 AND LicenseRef-scancode-proprietary-license AND LicenseRef-scancode-public-domain AND LicenseRef-scancode-public-domain-disclaimer AND MIT AND MPL-1.1 AND NOASSERTION AND SAX-PD
4	Maven:commons-codec:commons-codec:1.9	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 189 locations) LicenseRef-scancode-public-domain (exemplary link to the first of 3 locations) Effective License: Apache-2.0
5	Maven:commons-io:commons-io:2.2	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 112 locations) Effective License: Apache-2.0
6	Maven:commons-lang:commons-lang:2.6	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 99 locations) LGPL-2.1-only (link to the location) Effective License: Apache-2.0
7	Maven:commons-logging:commons-logging:1.2	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Effective License: Apache-2.0
8	Maven:io.rest-assured:json-path:4.3.0	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 651 locations) NOASSERTION (link to the location) Effective License: Apache-2.0 AND NOASSERTION
9	Maven:io.rest-assured:rest-assured:4.3.0	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 651 locations) NOASSERTION (link to the location) Effective License: Apache-2.0 AND NOASSERTION
10	Maven:io.rest-assured:rest-assured-common:4.3.0	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 651 locations) NOASSERTION (link to the location) Effective License: Apache-2.0 AND NOASSERTION
11	Maven:io.rest-assured:xml-path:4.3.0	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 651 locations) NOASSERTION (link to the location) Effective License: Apache-2.0 AND NOASSERTION
12	Maven:jakarta.activation:jakarta.activation-api:1.2.1	compile	Declared Licenses: BSD-3-Clause Detected Licenses (from artifact): BSD-3-Clause (exemplary link to the first of 43 locations) EPL-2.0 (link to the location) Effective License: BSD-3-Clause AND EPL-2.0
13	Maven:jakarta.annotation:jakarta.annotation-api:2.1.0	provided Excluded: PROVIDED_DEPENDENCY_OF - Packages provided at runtime by the JDK or container only.	Declared Licenses: EPL-2.0 GPL-2.0-only WITH Classpath-exception-2.0 Detected Licenses (from VCS): CDDL-1.0 (link to the location) EPL-2.0 (exemplary link to the first of 27 locations) GPL-2.0-only (link to the location) GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 26 locations) LicenseRef-scancode-efsl-1.0 (exemplary link to the first of 2 locations) NOASSERTION (link to the location) NOASSERTION WITH Classpath-exception-2.0 (link to the location) Effective License: CDDL-1.0 AND EPL-2.0 AND GPL-2.0-only AND GPL-2.0-only WITH Classpath-exception-2.0 AND LicenseRef-scancode-efsl-1.0 AND NOASSERTION AND NOASSERTION WITH Classpath-exception-2.0
14	Maven:jakarta.enterprise:jakarta.enterprise.cdi-api:4.0.1	provided Excluded: PROVIDED_DEPENDENCY_OF - Packages provided at runtime by the JDK or container only.	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 212 locations) EPL-2.0 (exemplary link to the first of 37 locations) NOASSERTION (exemplary link to the first of 3 locations) Effective License: Apache-2.0 AND EPL-2.0 AND NOASSERTION
15	Maven:jakarta.inject:jakarta.inject-api:2.0.1	provided Excluded: PROVIDED_DEPENDENCY_OF - Packages provided at runtime by the JDK or container only.	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 11 locations) BSD-3-Clause (link to the location) Effective License: Apache-2.0 AND BSD-3-Clause
16	Maven:jakarta.interceptor:jakarta.interceptor-api:2.1.0	provided Excluded: PROVIDED_DEPENDENCY_OF - Packages provided at runtime by the JDK or container only.	Declared Licenses: EPL-2.0 GPL-2.0-only WITH Classpath-exception-2.0 Detected Licenses (from artifact): CDDL-1.0 (exemplary link to the first of 2 locations) EPL-2.0 (exemplary link to the first of 18 locations) GPL-2.0-only (link to the location) GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 16 locations) NOASSERTION (link to the location) NOASSERTION WITH Classpath-exception-2.0 (exemplary link to the first of 2 locations) Effective License: CDDL-1.0 AND EPL-2.0 AND GPL-2.0-only AND GPL-2.0-only WITH Classpath-exception-2.0 AND NOASSERTION AND NOASSERTION WITH Classpath-exception-2.0
17	Maven:jakarta.xml.bind:jakarta.xml.bind-api:2.3.2	compile	Declared Licenses: BSD-3-Clause Detected Licenses (from VCS): Apache-2.0 (link to the location) BSD-3-Clause (exemplary link to the first of 254 locations) NOASSERTION (link to the location) Effective License: Apache-2.0 AND BSD-3-Clause AND NOASSERTION
18	Maven:javax.activation:activation:1.1.1	compile	Concluded License: CDDL-1.0 Declared Licenses: CDDL-1.0 Detected Licenses (from artifact): CDDL-1.0 (exemplary link to the first of 29 locations) GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 29 locations) Effective License: CDDL-1.0
19	Maven:javax.inject:javax.inject:1	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 7 locations) Effective License: Apache-2.0
20	Maven:junit:junit:4.13.1	compile	Declared Licenses: EPL-1.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 4 locations) EPL-1.0 (exemplary link to the first of 5 locations) EPL-2.0 (link to the location) NOASSERTION (link to the location) Effective License: Apache-2.0 AND EPL-1.0 AND EPL-2.0 AND NOASSERTION
21	Maven:org.apache.commons:commons-lang3:3.8.1	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-1.1 Apache-2.0 NOASSERTION Effective License: Apache-2.0
22	Maven:org.apache.httpcomponents:httpclient:4.5.3	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 MPL-2.0 NOASSERTION Effective License: Apache-2.0
23	Maven:org.apache.httpcomponents:httpcore:4.4.6	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Effective License: Apache-2.0	2023-03-04T12:55:06.121299164Z [ERROR]: scanner - Could not resolve nested provenance for package 'Maven:org.apache.httpcomponents:httpcore:4.4.6': SVNException: svn: E175002: Connection reset svn: E175002: REPORT request failed on '/repos/asf/!svn/vcc/default' Caused by: SocketException: Connection reset
24	Maven:org.apache.httpcomponents:httpmime:4.5.3	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 MPL-2.0 NOASSERTION Effective License: Apache-2.0 AND MPL-2.0 AND NOASSERTION
25	Maven:org.apache.maven:maven-aether-provider:3.2.5	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 CDDL-1.0 CPL-1.0 LicenseRef-scancode-jsr-107-jcache-spec-2013 NOASSERTION Effective License: Apache-2.0 AND CDDL-1.0 AND CPL-1.0 AND LicenseRef-scancode-jsr-107-jcache-spec-2013 AND NOASSERTION
26	Maven:org.apache.maven:maven-artifact:3.6.3	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 BSD-3-Clause CDDL-1.0 CPL-1.0 EPL-1.0 LicenseRef-scancode-jsr-107-jcache-spec-2013 LicenseRef-scancode-proprietary-license MIT NOASSERTION Effective License: Apache-2.0 AND BSD-3-Clause AND CDDL-1.0 AND CPL-1.0 AND EPL-1.0 AND LicenseRef-scancode-jsr-107-jcache-spec-2013 AND LicenseRef-scancode-proprietary-license AND MIT AND NOASSERTION
27	Maven:org.apache.maven:maven-builder-support:3.6.3	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 BSD-3-Clause CDDL-1.0 CPL-1.0 EPL-1.0 LicenseRef-scancode-jsr-107-jcache-spec-2013 LicenseRef-scancode-proprietary-license MIT NOASSERTION Effective License: Apache-2.0 AND BSD-3-Clause AND CDDL-1.0 AND CPL-1.0 AND EPL-1.0 AND LicenseRef-scancode-jsr-107-jcache-spec-2013 AND LicenseRef-scancode-proprietary-license AND MIT AND NOASSERTION
28	Maven:org.apache.maven:maven-model:3.6.3	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 BSD-3-Clause CDDL-1.0 CPL-1.0 EPL-1.0 LicenseRef-scancode-jsr-107-jcache-spec-2013 LicenseRef-scancode-proprietary-license MIT NOASSERTION Effective License: Apache-2.0 AND BSD-3-Clause AND CDDL-1.0 AND CPL-1.0 AND EPL-1.0 AND LicenseRef-scancode-jsr-107-jcache-spec-2013 AND LicenseRef-scancode-proprietary-license AND MIT AND NOASSERTION
29	Maven:org.apache.maven:maven-model-builder:3.6.3	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 BSD-3-Clause CDDL-1.0 CPL-1.0 EPL-1.0 LicenseRef-scancode-jsr-107-jcache-spec-2013 LicenseRef-scancode-proprietary-license MIT NOASSERTION Effective License: Apache-2.0
30	Maven:org.apache.maven:maven-repository-metadata:3.6.3	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 BSD-3-Clause CDDL-1.0 CPL-1.0 EPL-1.0 LicenseRef-scancode-jsr-107-jcache-spec-2013 LicenseRef-scancode-proprietary-license MIT NOASSERTION Effective License: Apache-2.0 AND BSD-3-Clause AND CDDL-1.0 AND CPL-1.0 AND EPL-1.0 AND LicenseRef-scancode-jsr-107-jcache-spec-2013 AND LicenseRef-scancode-proprietary-license AND MIT AND NOASSERTION
31	Maven:org.apache.maven:maven-settings:3.6.3	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 BSD-3-Clause CDDL-1.0 CPL-1.0 EPL-1.0 LicenseRef-scancode-jsr-107-jcache-spec-2013 LicenseRef-scancode-proprietary-license MIT NOASSERTION Effective License: Apache-2.0 AND BSD-3-Clause AND CDDL-1.0 AND CPL-1.0 AND EPL-1.0 AND LicenseRef-scancode-jsr-107-jcache-spec-2013 AND LicenseRef-scancode-proprietary-license AND MIT AND NOASSERTION
32	Maven:org.apache.maven:maven-settings-builder:3.6.3	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 BSD-3-Clause CDDL-1.0 CPL-1.0 EPL-1.0 LicenseRef-scancode-jsr-107-jcache-spec-2013 LicenseRef-scancode-proprietary-license MIT NOASSERTION Effective License: Apache-2.0 AND BSD-3-Clause AND CDDL-1.0 AND CPL-1.0 AND EPL-1.0 AND LicenseRef-scancode-jsr-107-jcache-spec-2013 AND LicenseRef-scancode-proprietary-license AND MIT AND NOASSERTION
33	Maven:org.apache.maven.wagon:wagon-file:3.3.4	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 NOASSERTION Effective License: Apache-2.0 AND NOASSERTION
34	Maven:org.apache.maven.wagon:wagon-http-lightweight:2.6	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 Effective License: Apache-2.0
35	Maven:org.apache.maven.wagon:wagon-http-shared:2.6	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 Effective License: Apache-2.0
36	Maven:org.apache.maven.wagon:wagon-provider-api:3.3.4	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 NOASSERTION Effective License: Apache-2.0 AND NOASSERTION
37	Maven:org.apache.sling:org.apache.sling.javax.activation:0.1.0	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 4 locations) Effective License: Apache-2.0
38	Maven:org.ccil.cowan.tagsoup:tagsoup:1.2.1	compile	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): AFL-3.0 (link to the location) Apache-2.0 (exemplary link to the first of 19 locations) BSD-3-Clause (link to the location) GPL-2.0-only (link to the location) GPL-2.0-or-later (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 2 locations) SAX-PD (link to the location) Effective License: AFL-3.0 AND Apache-2.0 AND BSD-3-Clause AND GPL-2.0-only AND LicenseRef-scancode-public-domain AND SAX-PD OR AFL-3.0 AND Apache-2.0 AND GPL-2.0-only AND GPL-2.0-or-later AND LicenseRef-scancode-public-domain AND SAX-PD
39	Maven:org.codehaus.groovy:groovy:3.0.2	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): ANTLR-PD-fallback (link to the location) Apache-2.0 (exemplary link to the first of 4518 locations) BSD-3-Clause (exemplary link to the first of 40 locations) CC-BY-2.5 (exemplary link to the first of 7 locations) CC-BY-3.0 (exemplary link to the first of 2 locations) CC-BY-4.0 (exemplary link to the first of 2 locations) CC-BY-SA-3.0 (exemplary link to the first of 3 locations) CC-PDDC (link to the location) CDDL-1.0 (exemplary link to the first of 5 locations) CDDL-1.1 (exemplary link to the first of 4 locations) DOC (exemplary link to the first of 4 locations) EPL-1.0 (exemplary link to the first of 10 locations) EPL-2.0 (exemplary link to the first of 4 locations) GPL-1.0-or-later (link to the location) GPL-3.0-or-later (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 9 locations) MIT (exemplary link to the first of 26 locations) NOASSERTION (exemplary link to the first of 46 locations) Effective License: ANTLR-PD-fallback AND Apache-2.0 AND BSD-3-Clause AND CC-BY-2.5 AND CC-BY-3.0 AND CC-BY-SA-3.0 AND CC-PDDC AND CDDL-1.0 AND CDDL-1.1 AND DOC AND EPL-1.0 AND EPL-2.0 AND GPL-1.0-or-later AND GPL-3.0-or-later AND LicenseRef-scancode-public-domain AND MIT AND NOASSERTION OR ANTLR-PD-fallback AND Apache-2.0 AND BSD-3-Clause AND CC-BY-2.5 AND CC-BY-4.0 AND CC-BY-SA-3.0 AND CC-PDDC AND CDDL-1.0 AND CDDL-1.1 AND DOC AND EPL-1.0 AND EPL-2.0 AND GPL-1.0-or-later AND GPL-3.0-or-later AND LicenseRef-scancode-public-domain AND MIT AND NOASSERTION
40	Maven:org.codehaus.groovy:groovy-json:3.0.2	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): ANTLR-PD-fallback (link to the location) Apache-2.0 (exemplary link to the first of 4518 locations) BSD-3-Clause (exemplary link to the first of 40 locations) CC-BY-2.5 (exemplary link to the first of 7 locations) CC-BY-3.0 (exemplary link to the first of 2 locations) CC-BY-4.0 (exemplary link to the first of 2 locations) CC-BY-SA-3.0 (exemplary link to the first of 3 locations) CC-PDDC (link to the location) CDDL-1.0 (exemplary link to the first of 5 locations) CDDL-1.1 (exemplary link to the first of 4 locations) DOC (exemplary link to the first of 4 locations) EPL-1.0 (exemplary link to the first of 10 locations) EPL-2.0 (exemplary link to the first of 4 locations) GPL-1.0-or-later (link to the location) GPL-3.0-or-later (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 9 locations) MIT (exemplary link to the first of 26 locations) NOASSERTION (exemplary link to the first of 46 locations) Effective License: ANTLR-PD-fallback AND Apache-2.0 AND BSD-3-Clause AND CC-BY-2.5 AND CC-BY-3.0 AND CC-BY-SA-3.0 AND CC-PDDC AND CDDL-1.0 AND CDDL-1.1 AND DOC AND EPL-1.0 AND EPL-2.0 AND GPL-1.0-or-later AND GPL-3.0-or-later AND LicenseRef-scancode-public-domain AND MIT AND NOASSERTION OR ANTLR-PD-fallback AND Apache-2.0 AND BSD-3-Clause AND CC-BY-2.5 AND CC-BY-4.0 AND CC-BY-SA-3.0 AND CC-PDDC AND CDDL-1.0 AND CDDL-1.1 AND DOC AND EPL-1.0 AND EPL-2.0 AND GPL-1.0-or-later AND GPL-3.0-or-later AND LicenseRef-scancode-public-domain AND MIT AND NOASSERTION
41	Maven:org.codehaus.groovy:groovy-xml:3.0.2	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): ANTLR-PD-fallback (link to the location) Apache-2.0 (exemplary link to the first of 4518 locations) BSD-3-Clause (exemplary link to the first of 40 locations) CC-BY-2.5 (exemplary link to the first of 7 locations) CC-BY-3.0 (exemplary link to the first of 2 locations) CC-BY-4.0 (exemplary link to the first of 2 locations) CC-BY-SA-3.0 (exemplary link to the first of 3 locations) CC-PDDC (link to the location) CDDL-1.0 (exemplary link to the first of 5 locations) CDDL-1.1 (exemplary link to the first of 4 locations) DOC (exemplary link to the first of 4 locations) EPL-1.0 (exemplary link to the first of 10 locations) EPL-2.0 (exemplary link to the first of 4 locations) GPL-1.0-or-later (link to the location) GPL-3.0-or-later (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 9 locations) MIT (exemplary link to the first of 26 locations) NOASSERTION (exemplary link to the first of 46 locations) Effective License: ANTLR-PD-fallback AND Apache-2.0 AND BSD-3-Clause AND CC-BY-2.5 AND CC-BY-3.0 AND CC-BY-SA-3.0 AND CC-PDDC AND CDDL-1.0 AND CDDL-1.1 AND DOC AND EPL-1.0 AND EPL-2.0 AND GPL-1.0-or-later AND GPL-3.0-or-later AND LicenseRef-scancode-public-domain AND MIT AND NOASSERTION OR ANTLR-PD-fallback AND Apache-2.0 AND BSD-3-Clause AND CC-BY-2.5 AND CC-BY-4.0 AND CC-BY-SA-3.0 AND CC-PDDC AND CDDL-1.0 AND CDDL-1.1 AND DOC AND EPL-1.0 AND EPL-2.0 AND GPL-1.0-or-later AND GPL-3.0-or-later AND LicenseRef-scancode-public-domain AND MIT AND NOASSERTION
42	Maven:org.codehaus.plexus:plexus-interpolation:1.25	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-1.1 (exemplary link to the first of 4 locations) Apache-2.0 (exemplary link to the first of 45 locations) MIT (exemplary link to the first of 2 locations) Effective License: Apache-2.0
43	Maven:org.codehaus.plexus:plexus-utils:3.2.1	compile	Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-1.1 (exemplary link to the first of 10 locations) Apache-2.0 (exemplary link to the first of 69 locations) BSD-2-Clause (link to the location) BSD-3-Clause (exemplary link to the first of 4 locations) LicenseRef-scancode-indiana-extreme (link to the location) LicenseRef-scancode-public-domain (exemplary link to the first of 6 locations) NOASSERTION (link to the location) SAX-PD (exemplary link to the first of 4 locations) xpp (link to the location) Effective License: Apache-1.1 AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND LicenseRef-scancode-indiana-extreme AND LicenseRef-scancode-public-domain AND NOASSERTION AND SAX-PD AND xpp
44	Maven:org.eclipse.aether:aether-api:1.0.0.v20140518	compile	Declared Licenses: EPL-1.0 Detected Licenses (from artifact): CPL-1.0 (link to the location) EPL-1.0 (exemplary link to the first of 125 locations) NOASSERTION (link to the location) Effective License: CPL-1.0 AND EPL-1.0 AND NOASSERTION
45	Maven:org.eclipse.aether:aether-connector-basic:1.0.0.v20140518	compile	Declared Licenses: EPL-1.0 Detected Licenses (from artifact): CPL-1.0 (link to the location) EPL-1.0 (exemplary link to the first of 11 locations) NOASSERTION (link to the location) Effective License: CPL-1.0 AND EPL-1.0 AND NOASSERTION
46	Maven:org.eclipse.aether:aether-impl:1.0.0.v20140518	compile	Declared Licenses: EPL-1.0 Detected Licenses (from artifact): CPL-1.0 (link to the location) EPL-1.0 (exemplary link to the first of 72 locations) NOASSERTION (link to the location) Effective License: CPL-1.0 AND EPL-1.0 AND NOASSERTION
47	Maven:org.eclipse.aether:aether-spi:1.0.0.v20140518	compile	Declared Licenses: EPL-1.0 Detected Licenses (from artifact): CPL-1.0 (link to the location) EPL-1.0 (exemplary link to the first of 41 locations) NOASSERTION (link to the location) Effective License: CPL-1.0 AND EPL-1.0 AND NOASSERTION
48	Maven:org.eclipse.aether:aether-transport-wagon:1.0.0.v20140518	compile	Declared Licenses: EPL-1.0 Detected Licenses (from artifact): CPL-1.0 (link to the location) EPL-1.0 (exemplary link to the first of 12 locations) NOASSERTION (link to the location) Effective License: CPL-1.0 AND EPL-1.0 AND NOASSERTION
49	Maven:org.eclipse.aether:aether-util:1.0.0.v20140518	compile	Declared Licenses: EPL-1.0 Detected Licenses (from artifact): CPL-1.0 (link to the location) EPL-1.0 (exemplary link to the first of 91 locations) NOASSERTION (link to the location) Effective License: CPL-1.0 AND EPL-1.0 AND NOASSERTION
50	Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api:5.0.1-SNAPSHOT	provided Excluded: PROVIDED_DEPENDENCY_OF - Packages provided at runtime by the JDK or container only.	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 52 locations) Effective License: Apache-2.0
51	Maven:org.eclipse.sisu:org.eclipse.sisu.inject:0.3.4	compile	Declared Licenses: EPL-1.0 Detected Licenses (from artifact): BSD-3-Clause (exemplary link to the first of 24 locations) EPL-1.0 (exemplary link to the first of 146 locations) NOASSERTION (link to the location) Effective License: BSD-3-Clause AND EPL-1.0 AND NOASSERTION
52	Maven:org.hamcrest:hamcrest:2.1	compile	Declared Licenses: BSD-3-Clause Effective License: BSD-3-Clause
53	Maven:org.hamcrest:hamcrest-core:1.3	compile	Concluded License: BSD-2-Clause Declared Licenses: BSD-3-Clause Effective License: BSD-2-Clause
54	Maven:org.jboss.arquillian.config:arquillian-config-api:1.7.0.Alpha10	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
55	Maven:org.jboss.arquillian.config:arquillian-config-impl-base:1.7.0.Alpha10	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
56	Maven:org.jboss.arquillian.config:arquillian-config-spi:1.7.0.Alpha10	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
57	Maven:org.jboss.arquillian.container:arquillian-container-impl-base:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
58	Maven:org.jboss.arquillian.container:arquillian-container-spi:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
59	Maven:org.jboss.arquillian.container:arquillian-container-test-api:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
60	Maven:org.jboss.arquillian.container:arquillian-container-test-impl-base:1.7.0.Alpha10	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
61	Maven:org.jboss.arquillian.container:arquillian-container-test-spi:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
62	Maven:org.jboss.arquillian.core:arquillian-core-api:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
63	Maven:org.jboss.arquillian.core:arquillian-core-impl-base:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
64	Maven:org.jboss.arquillian.core:arquillian-core-spi:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
65	Maven:org.jboss.arquillian.junit:arquillian-junit-container:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
66	Maven:org.jboss.arquillian.junit:arquillian-junit-core:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
67	Maven:org.jboss.arquillian.test:arquillian-test-api:1.7.0.Alpha10	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
68	Maven:org.jboss.arquillian.test:arquillian-test-impl-base:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
69	Maven:org.jboss.arquillian.test:arquillian-test-spi:1.7.0.Alpha10	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 630 locations) Effective License: Apache-2.0
70	Maven:org.jboss.shrinkwrap:shrinkwrap-api:1.2.6	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 254 locations) LicenseRef-scancode-public-domain (exemplary link to the first of 2 locations) LicenseRef-scancode-public-domain-disclaimer (exemplary link to the first of 9 locations) Effective License: Apache-2.0 AND LicenseRef-scancode-public-domain AND LicenseRef-scancode-public-domain-disclaimer
71	Maven:org.jboss.shrinkwrap:shrinkwrap-impl-base:1.2.6	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 254 locations) LicenseRef-scancode-public-domain (exemplary link to the first of 2 locations) LicenseRef-scancode-public-domain-disclaimer (exemplary link to the first of 9 locations) Effective License: Apache-2.0 AND LicenseRef-scancode-public-domain AND LicenseRef-scancode-public-domain-disclaimer
72	Maven:org.jboss.shrinkwrap:shrinkwrap-spi:1.2.6	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 254 locations) LicenseRef-scancode-public-domain (exemplary link to the first of 2 locations) LicenseRef-scancode-public-domain-disclaimer (exemplary link to the first of 9 locations) Effective License: Apache-2.0 AND LicenseRef-scancode-public-domain AND LicenseRef-scancode-public-domain-disclaimer
73	Maven:org.jboss.shrinkwrap.descriptors:shrinkwrap-descriptors-api-base:2.0.0	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 173 locations) BSD-3-Clause (exemplary link to the first of 10 locations) CDDL-1.0 (exemplary link to the first of 56 locations) CDDL-1.1 (exemplary link to the first of 17 locations) EPL-1.0 (exemplary link to the first of 7 locations) GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 73 locations) LGPL-2.1-or-later (exemplary link to the first of 11 locations) LicenseRef-scancode-public-domain (exemplary link to the first of 4 locations) Effective License: Apache-2.0 AND BSD-3-Clause AND CDDL-1.0 AND CDDL-1.1 AND EPL-1.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND LGPL-2.1-or-later AND LicenseRef-scancode-public-domain
74	Maven:org.jboss.shrinkwrap.descriptors:shrinkwrap-descriptors-spi:2.0.0	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 173 locations) BSD-3-Clause (exemplary link to the first of 10 locations) CDDL-1.0 (exemplary link to the first of 56 locations) CDDL-1.1 (exemplary link to the first of 17 locations) EPL-1.0 (exemplary link to the first of 7 locations) GPL-2.0-only WITH Classpath-exception-2.0 (exemplary link to the first of 73 locations) LGPL-2.1-or-later (exemplary link to the first of 11 locations) LicenseRef-scancode-public-domain (exemplary link to the first of 4 locations) Effective License: Apache-2.0 AND BSD-3-Clause AND CDDL-1.0 AND CDDL-1.1 AND EPL-1.0 AND GPL-2.0-only WITH Classpath-exception-2.0 AND LGPL-2.1-or-later AND LicenseRef-scancode-public-domain
75	Maven:org.jboss.shrinkwrap.resolver:shrinkwrap-resolver-api:3.1.4	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 257 locations) LGPL-2.1-or-later (link to the location) Effective License: Apache-2.0 AND LGPL-2.1-or-later
76	Maven:org.jboss.shrinkwrap.resolver:shrinkwrap-resolver-api-maven:3.1.4	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 257 locations) LGPL-2.1-or-later (link to the location) Effective License: Apache-2.0 AND LGPL-2.1-or-later
77	Maven:org.jboss.shrinkwrap.resolver:shrinkwrap-resolver-impl-maven:2.2.4	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 242 locations) LGPL-2.1-or-later (link to the location) Effective License: Apache-2.0 AND LGPL-2.1-or-later
78	Maven:org.jboss.shrinkwrap.resolver:shrinkwrap-resolver-spi:3.1.4	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 257 locations) LGPL-2.1-or-later (link to the location) Effective License: Apache-2.0 AND LGPL-2.1-or-later
79	Maven:org.jboss.shrinkwrap.resolver:shrinkwrap-resolver-spi-maven:3.1.4	compile	Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 257 locations) LGPL-2.1-or-later (link to the location) Effective License: Apache-2.0 AND LGPL-2.1-or-later
80	Maven:org.sonatype.plexus:plexus-cipher:1.7	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 6 locations) NOASSERTION (link to the location) Effective License: Apache-2.0
81	Maven:org.sonatype.plexus:plexus-sec-dispatcher:1.4	compile	Concluded License: Apache-2.0 Declared Licenses: Apache-2.0 Detected Licenses (from artifact): Apache-2.0 (exemplary link to the first of 6 locations) Effective License: Apache-2.0

Maven:org.eclipse.microprofile.metrics:microprofile-metrics-spec:5.0.1-SNAPSHOT (spec/pom.xml)

VCS Information

Type	Git
URL	https://github.com/eclipse/microprofile-metrics.git
Path	spec
Revision	a60885e0d15570ecf5010b4d286b5ee5eabe858a

Packages

#	Package	Scopes	Licenses	Analyzer Issues	Scanner Issues
1	Maven:org.eclipse.microprofile.metrics:microprofile-metrics-spec:5.0.1-SNAPSHOT		Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 16 locations) LicenseRef-scancode-efsl-1.0 (link to the location) Effective License: Apache-2.0 AND LicenseRef-scancode-efsl-1.0

Package

Scopes

Licenses

Analyzer Issues

Scanner Issues

Maven:org.eclipse.microprofile.metrics:microprofile-metrics-spec:5.0.1-SNAPSHOT

Declared Licenses:

Apache-2.0

Detected Licenses (from VCS):

Apache-2.0 (exemplary link to the first of 16 locations)

LicenseRef-scancode-efsl-1.0 (link to the location)

Effective License:

Apache-2.0 AND LicenseRef-scancode-efsl-1.0

Maven:org.eclipse.microprofile.metrics:microprofile-metrics-tck:5.0.1-SNAPSHOT (tck/pom.xml)

VCS Information

Type	Git
URL	https://github.com/eclipse/microprofile-metrics.git
Path	tck
Revision	a60885e0d15570ecf5010b4d286b5ee5eabe858a

Packages

#	Package	Scopes	Licenses	Analyzer Issues	Scanner Issues
1	Maven:org.eclipse.microprofile.metrics:microprofile-metrics-tck:5.0.1-SNAPSHOT		Declared Licenses: Apache-2.0 Detected Licenses (from VCS): Apache-2.0 (exemplary link to the first of 153 locations) Effective License: Apache-2.0

Package

Scopes

Licenses

Analyzer Issues

Scanner Issues

Maven:org.eclipse.microprofile.metrics:microprofile-metrics-tck:5.0.1-SNAPSHOT

Declared Licenses:

Apache-2.0

Detected Licenses (from VCS):

Apache-2.0 (exemplary link to the first of 153 locations)

Effective License:

Apache-2.0

Repository Configuration


---
excludes:
  paths:
  - pattern: "**/META-INF/DEPENDENCIES"
    reason: "BUILD_TOOL_OF"
    comment: "Licenses contained in this directory reflect content analysed elsewhere."
  - pattern: "**/META-INF/NOTICE*"
    reason: "BUILD_TOOL_OF"
    comment: "Licenses contained in this directory reflect content analysed elsewhere."
  - pattern: "**/*.svg"
    reason: "BUILD_TOOL_OF"
    comment: "SVG files do not contain any license information."
  - pattern: "package-lock.json"
    reason: "BUILD_TOOL_OF"
    comment: "Does not contain any license information."
  scopes:
  - pattern: "provided"
    reason: "PROVIDED_DEPENDENCY_OF"
    comment: "Packages provided at runtime by the JDK or container only."

#	Rule	Package	License	Message
1	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1	DECLARED: CDDL-1.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license CDDL-1.0 of its dependency 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1'. Software under a copyleft license such as the CDDL-1.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' under a different license.
2	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1	DECLARED: CDDL-1.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license CDDL-1.0 of its dependency 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1'. Software under a copyleft license such as the CDDL-1.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT' under a different license.
3	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1	DETECTED: CDDL-1.1	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license CDDL-1.1 of its dependency 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1'. Software under a copyleft license such as the CDDL-1.1 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' under a different license.
4	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1	DETECTED: CDDL-1.1	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license CDDL-1.1 of its dependency 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1'. Software under a copyleft license such as the CDDL-1.1 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT' under a different license.
5	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1	DETECTED: GPL-2.0-only	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only of its dependency 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' under a different license.
6	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1	DETECTED: GPL-2.0-only	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only of its dependency 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT' under a different license.
7	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1	DETECTED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' under a different license.
8	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1	DETECTED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT' under a different license.
9	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1	DECLARED: GPL-2.0-or-later	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-or-later of its dependency 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1'. Software under a copyleft license such as the GPL-2.0-or-later license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' under a different license.
10	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1	DETECTED: GPL-2.0-or-later	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-or-later of its dependency 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1'. Software under a copyleft license such as the GPL-2.0-or-later license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' under a different license.
11	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1	DECLARED: GPL-2.0-or-later	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-or-later of its dependency 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1'. Software under a copyleft license such as the GPL-2.0-or-later license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT' under a different license.
12	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1	DETECTED: GPL-2.0-or-later	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-or-later of its dependency 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1'. Software under a copyleft license such as the GPL-2.0-or-later license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT' under a different license.
13	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1	DETECTED: LGPL-2.1-or-later	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license LGPL-2.1-or-later of its dependency 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1'. Software under a copyleft license such as the LGPL-2.1-or-later license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' under a different license.
14	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1	DETECTED: LGPL-2.1-or-later	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license LGPL-2.1-or-later of its dependency 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1'. Software under a copyleft license such as the LGPL-2.1-or-later license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT' under a different license.
15	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1	DETECTED: MPL-1.1	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license MPL-1.1 of its dependency 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1'. Software under a copyleft license such as the MPL-1.1 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' under a different license.
16	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1	DETECTED: MPL-1.1	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license MPL-1.1 of its dependency 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1'. Software under a copyleft license such as the MPL-1.1 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:com.sun.xml.bind:jaxb-osgi:2.3.0.1' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT' under a different license.
17	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.activation:jakarta.activation-api:1.2.1	DETECTED: EPL-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license EPL-2.0 of its dependency 'Maven:jakarta.activation:jakarta.activation-api:1.2.1'. Software under a copyleft license such as the EPL-2.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.activation:jakarta.activation-api:1.2.1' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' under a different license.
18	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.activation:jakarta.activation-api:1.2.1	DETECTED: EPL-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license EPL-2.0 of its dependency 'Maven:jakarta.activation:jakarta.activation-api:1.2.1'. Software under a copyleft license such as the EPL-2.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.activation:jakarta.activation-api:1.2.1' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT' under a different license.
19	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.0	DETECTED: CDDL-1.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license CDDL-1.0 of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0'. Software under a copyleft license such as the CDDL-1.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api-tck:5.0.1-SNAPSHOT' under a different license.
20	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.0	DETECTED: CDDL-1.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api:5.0.1-SNAPSHOT' is incompatible with the inbound license CDDL-1.0 of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0'. Software under a copyleft license such as the CDDL-1.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api:5.0.1-SNAPSHOT' under a different license.
21	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.0	DETECTED: CDDL-1.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license CDDL-1.0 of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0'. Software under a copyleft license such as the CDDL-1.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' under a different license.
22	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.0	DETECTED: CDDL-1.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license CDDL-1.0 of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0'. Software under a copyleft license such as the CDDL-1.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT' under a different license.
23	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.0	DECLARED: EPL-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license EPL-2.0 of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0'. Software under a copyleft license such as the EPL-2.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api-tck:5.0.1-SNAPSHOT' under a different license.
24	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.0	DETECTED: EPL-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license EPL-2.0 of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0'. Software under a copyleft license such as the EPL-2.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api-tck:5.0.1-SNAPSHOT' under a different license.
25	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.0	DECLARED: EPL-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api:5.0.1-SNAPSHOT' is incompatible with the inbound license EPL-2.0 of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0'. Software under a copyleft license such as the EPL-2.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api:5.0.1-SNAPSHOT' under a different license.
26	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.0	DETECTED: EPL-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api:5.0.1-SNAPSHOT' is incompatible with the inbound license EPL-2.0 of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0'. Software under a copyleft license such as the EPL-2.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api:5.0.1-SNAPSHOT' under a different license.
27	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.0	DECLARED: EPL-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license EPL-2.0 of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0'. Software under a copyleft license such as the EPL-2.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' under a different license.
28	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.0	DETECTED: EPL-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license EPL-2.0 of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0'. Software under a copyleft license such as the EPL-2.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' under a different license.
29	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.0	DECLARED: EPL-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license EPL-2.0 of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0'. Software under a copyleft license such as the EPL-2.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT' under a different license.
30	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.0	DETECTED: EPL-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license EPL-2.0 of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0'. Software under a copyleft license such as the EPL-2.0 license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT' under a different license.
31	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.0	DETECTED: GPL-2.0-only	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api-tck:5.0.1-SNAPSHOT' under a different license.
32	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.0	DETECTED: GPL-2.0-only	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api:5.0.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api:5.0.1-SNAPSHOT' under a different license.
33	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.0	DETECTED: GPL-2.0-only	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' under a different license.
34	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.0	DETECTED: GPL-2.0-only	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-rest-tck:5.0.1-SNAPSHOT' under a different license.
35	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.0	DECLARED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api-tck:5.0.1-SNAPSHOT' under a different license.
36	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.0	DETECTED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api-tck:5.0.1-SNAPSHOT' under a different license.
37	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.0	DECLARED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api:5.0.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api:5.0.1-SNAPSHOT' under a different license.
38	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.0	DETECTED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api:5.0.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-api:5.0.1-SNAPSHOT' under a different license.
39	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.0	DECLARED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' under a different license.
40	OSADL_PROJECT_LICENSE_COMPATIBILITY	Maven:jakarta.annotation:jakarta.annotation-api:2.1.0	DETECTED: GPL-2.0-only WITH Classpath-exception-2.0	The outbound license Apache-2.0 of project 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' is incompatible with the inbound license GPL-2.0-only (simplified from 'GPL-2.0-only WITH Classpath-exception-2.0') of its dependency 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0'. Software under a copyleft license such as the GPL-2.0-only license normally cannot be redistributed under a non-copyleft license such as the Apache-2.0 license, except if it were explicitly permitted in the licenses. How to fix Remove the dependency on 'Maven:jakarta.annotation:jakarta.annotation-api:2.1.0' or put 'Maven:org.eclipse.microprofile.metrics:microprofile-metrics-optional-tck:5.0.1-SNAPSHOT' under a different license.