From 04f3e32ffa60fe61ba8cc7f7741ab95df906d11a Mon Sep 17 00:00:00 2001 From: Ioannis Kakavas Date: Mon, 6 Jun 2022 12:58:35 +0300 Subject: [PATCH] Add licence mapping for netty (#14117) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Include Netty NOTICE.txt Co-authored-by: João Duarte --- NOTICE.TXT | 70 +++-- .../src/main/resources/licenseMapping.csv | 1 + .../main/resources/notices/netty-NOTICE.txt | 264 ++++++++++++++++++ 3 files changed, 312 insertions(+), 23 deletions(-) create mode 100644 tools/dependencies-report/src/main/resources/notices/netty-NOTICE.txt diff --git a/NOTICE.TXT b/NOTICE.TXT index 569546b59..062b7c862 100644 --- a/NOTICE.TXT +++ b/NOTICE.TXT @@ -1146,7 +1146,7 @@ copyright 2013. amazon web services, inc. all rights reserved. limitations under the License. ========== -Notice for: aws-sigv4-1.4.0 +Notice for: aws-sigv4-1.5.0 ---------- copyright 2013. amazon web services, inc. all rights reserved. @@ -1462,7 +1462,7 @@ You can redistribute it and/or modify it under either the terms of the PURPOSE. ========== -Notice for: bundler-2.3.5 +Notice for: bundler-2.3.14 ---------- Portions copyright (c) 2010 Andre Arko @@ -2884,7 +2884,7 @@ http://www.apache.org/licenses/LICENSE-2.0 See the License for the specific language governing permissions and limitations under the License. ========== -Notice for: com.google.googlejavaformat:google-java-format-1.1 +Notice for: com.google.googlejavaformat:google-java-format-1.13.0 ---------- Copyright 2015 Google Inc. @@ -3160,7 +3160,7 @@ Program Directory ========== -Notice for: com.google.guava:guava-24.1.1-jre +Notice for: com.google.guava:guava-31.0.1-jre ---------- @@ -4241,7 +4241,7 @@ Elastic Workplace Search Ruby client. Copyright 2012-2020 Elasticsearch B.V. ========== -Notice for: elasticsearch-7.16.3 +Notice for: elasticsearch-7.17.1 ---------- source: https://github.com/elastic/elasticsearch-ruby/blob/v5.0.4/elasticsearch-api/LICENSE.txt @@ -4261,7 +4261,7 @@ See the License for the specific language governing permissions and limitations under the License. ========== -Notice for: elasticsearch-api-7.16.3 +Notice for: elasticsearch-api-7.17.1 ---------- source: https://github.com/elastic/elasticsearch-ruby/blob/v5.0.4/elasticsearch-transport/LICENSE.txt @@ -4281,7 +4281,7 @@ See the License for the specific language governing permissions and limitations under the License. ========== -Notice for: elasticsearch-transport-7.16.3 +Notice for: elasticsearch-transport-7.17.1 ---------- source: https://github.com/elastic/elasticsearch-ruby/blob/v5.0.4/elasticsearch/LICENSE.txt @@ -4329,7 +4329,7 @@ OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. ========== -Notice for: faraday-1.9.3 +Notice for: faraday-1.10.0 ---------- source: https://github.com/lostisland/faraday/blob/v0.9.2/LICENSE.md @@ -4680,7 +4680,7 @@ WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. ========== -Notice for: http-cookie-1.0.4 +Notice for: http-cookie-1.0.5 ---------- source: https://github.com/sparklemotion/http-cookie/blob/v1.0.3/LICENSE.txt @@ -4768,7 +4768,7 @@ FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. ========== -Notice for: i18n-1.8.11 +Notice for: i18n-1.10.0 ---------- source: https://github.com/svenfuchs/i18n/blob/v0.6.9/MIT-LICENSE @@ -5072,7 +5072,7 @@ See the License for the specific language governing permissions and limitations under the License. ========== -Notice for: jmespath-1.5.0 +Notice for: jmespath-1.6.1 ---------- source: https://github.com/jmespath/jmespath.rb/blob/v1.4.0/LICENSE.txt @@ -6968,7 +6968,7 @@ The complete text of the GNU General Public License version 3 is as follows: 12. No Surrender of Others' Freedom. If conditions are imposed on you (whether by court order, agreement or -q otherwise) that contradict the conditions of this License, they do not + otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot convey a covered work so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may @@ -7745,7 +7745,7 @@ See the License for the specific language governing permissions and limitations under the License. ========== -Notice for: jruby-openssl-0.11.0 +Notice for: jruby-openssl-0.13.0 ---------- source: https://github.com/jruby/jruby-openssl/blob/v0.9.21/LICENSE.txt @@ -7805,7 +7805,7 @@ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. ========== -Notice for: json-2.6.1 +Notice for: json-2.6.2 ---------- source: https://github.com/tmattia/json-generator/blob/v0.1.0/LICENSE.txt @@ -8075,7 +8075,7 @@ terms of Ruby’s licence or the Simplified BSD licence. * Portions copyright 2004 Mauricio Julio Fernández Pradier. ========== -Notice for: msgpack-1.4.4 +Notice for: msgpack-1.5.1 ---------- source: https://github.com/msgpack/msgpack-ruby/blob/v1.2.4/ext/msgpack/ @@ -8275,7 +8275,7 @@ The above copyright notice and this permission notice shall be included in all c THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. ========== -Notice for: nokogiri-1.12.5 +Notice for: nokogiri-1.13.6 ---------- source: https://github.com/sparklemotion/nokogiri/blob/v1.8.2/LICENSE.md @@ -8337,6 +8337,30 @@ ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. +========== +Notice for: org.apache.httpcomponents:httpclient-4.5.13 +---------- + +source: https://github.com/apache/httpcomponents-client/blob/4.5.x/NOTICE.txt + +Apache HttpComponents Client +Copyright 1999-2021 The Apache Software Foundation + +This product includes software developed at +The Apache Software Foundation (http://www.apache.org/). + +========== +Notice for: org.apache.httpcomponents:httpcore-4.4.14 +---------- + +source: https://github.com/apache/httpcomponents-core/blob/4.4.x/NOTICE.txt + +Apache HttpComponents Core +Copyright 2005-2021 The Apache Software Foundation + +This product includes software developed at +The Apache Software Foundation (http://www.apache.org/). + ========== Notice for: org.apache.logging.log4j:log4j-1.2-api-2.17.1 ---------- @@ -8497,7 +8521,7 @@ Copyright (C) 1999-2019 by Shigeru Chiba, All rights reserved. This software is distributed under the Mozilla Public License Version 1.1, the GNU Lesser General Public License Version 2.1 or later, or the Apache License Version 2.0. ========== -Notice for: org.jruby:jruby-complete-9.2.20.1 +Notice for: org.jruby:jruby-core-9.3.4.0 ---------- JRuby is Copyright (c) 2007-2018 The JRuby project @@ -8780,7 +8804,7 @@ Eclipse Public License - v 2.0 You may add additional accurate notices of copyright ownership. ========== -Notice for: org.logstash:jvm-options-parser-8.3.0 +Notice for: org.logstash:jvm-options-parser-8.4.0 ---------- Copyright (c) 2022 Elasticsearch B.V. @@ -8797,7 +8821,7 @@ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. ========== -Notice for: org.reflections:reflections-0.9.11 +Notice for: org.reflections:reflections-0.9.12 ---------- DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE @@ -8953,7 +8977,7 @@ OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. ========== -Notice for: puma-5.5.2 +Notice for: puma-5.6.4 ---------- Some code copyright (c) 2005, Zed Shaw @@ -9090,7 +9114,7 @@ WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. ========== -Notice for: redis-4.5.1 +Notice for: redis-4.6.0 ---------- Copyright (c) 2009 Ezra Zygmuntowicz @@ -9309,7 +9333,7 @@ See the License for the specific language governing permissions and limitations under the License. ========== -Notice for: sequel-5.52.0 +Notice for: sequel-5.56.0 ---------- Copyright (c) 2007-2008 Sharon Rosner @@ -9869,7 +9893,7 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. ========== -Notice for: tzinfo-data-1.2021.5 +Notice for: tzinfo-data-1.2022.1 ---------- Copyright (c) 2005-2018 Philip Ross diff --git a/tools/dependencies-report/src/main/resources/licenseMapping.csv b/tools/dependencies-report/src/main/resources/licenseMapping.csv index 94ac943b8..653c83aad 100644 --- a/tools/dependencies-report/src/main/resources/licenseMapping.csv +++ b/tools/dependencies-report/src/main/resources/licenseMapping.csv @@ -70,6 +70,7 @@ dependency,dependencyUrl,licenseOverride,copyright,sourceURL "http:",https://github.com/httprb/http,MIT "http_parser.rb:",https://github.com/tmm1/http_parser.rb,MIT "i18n:",https://github.com/svenfuchs/i18n,MIT +"io.netty:netty-all:",https://github.com/netty/netty,Apache-2.0 "insist:",https://github.com/jordansissel/ruby-insist,Apache-2.0 "jar-dependencies:",https://github.com/mkristian/jar-dependencies,MIT "jls-grok:",https://github.com/jordansissel/ruby-grok,Apache-2.0 diff --git a/tools/dependencies-report/src/main/resources/notices/netty-NOTICE.txt b/tools/dependencies-report/src/main/resources/notices/netty-NOTICE.txt new file mode 100644 index 000000000..5ce108238 --- /dev/null +++ b/tools/dependencies-report/src/main/resources/notices/netty-NOTICE.txt @@ -0,0 +1,264 @@ + + The Netty Project + ================= + +Please visit the Netty web site for more information: + + * https://netty.io/ + +Copyright 2014 The Netty Project + +The Netty Project licenses this file to you under the Apache License, +version 2.0 (the "License"); you may not use this file except in compliance +with the License. You may obtain a copy of the License at: + + https://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, WITHOUT +WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the +License for the specific language governing permissions and limitations +under the License. + +Also, please refer to each LICENSE..txt file, which is located in +the 'license' directory of the distribution file, for the license terms of the +components that this product depends on. + +------------------------------------------------------------------------------- +This product contains the extensions to Java Collections Framework which has +been derived from the works by JSR-166 EG, Doug Lea, and Jason T. Greene: + + * LICENSE: + * license/LICENSE.jsr166y.txt (Public Domain) + * HOMEPAGE: + * http://gee.cs.oswego.edu/cgi-bin/viewcvs.cgi/jsr166/ + * http://viewvc.jboss.org/cgi-bin/viewvc.cgi/jbosscache/experimental/jsr166/ + +This product contains a modified version of Robert Harder's Public Domain +Base64 Encoder and Decoder, which can be obtained at: + + * LICENSE: + * license/LICENSE.base64.txt (Public Domain) + * HOMEPAGE: + * http://iharder.sourceforge.net/current/java/base64/ + +This product contains a modified portion of 'Webbit', an event based +WebSocket and HTTP server, which can be obtained at: + + * LICENSE: + * license/LICENSE.webbit.txt (BSD License) + * HOMEPAGE: + * https://github.com/joewalnes/webbit + +This product contains a modified portion of 'SLF4J', a simple logging +facade for Java, which can be obtained at: + + * LICENSE: + * license/LICENSE.slf4j.txt (MIT License) + * HOMEPAGE: + * https://www.slf4j.org/ + +This product contains a modified portion of 'Apache Harmony', an open source +Java SE, which can be obtained at: + + * NOTICE: + * license/NOTICE.harmony.txt + * LICENSE: + * license/LICENSE.harmony.txt (Apache License 2.0) + * HOMEPAGE: + * https://archive.apache.org/dist/harmony/ + +This product contains a modified portion of 'jbzip2', a Java bzip2 compression +and decompression library written by Matthew J. Francis. It can be obtained at: + + * LICENSE: + * license/LICENSE.jbzip2.txt (MIT License) + * HOMEPAGE: + * https://code.google.com/p/jbzip2/ + +This product contains a modified portion of 'libdivsufsort', a C API library to construct +the suffix array and the Burrows-Wheeler transformed string for any input string of +a constant-size alphabet written by Yuta Mori. It can be obtained at: + + * LICENSE: + * license/LICENSE.libdivsufsort.txt (MIT License) + * HOMEPAGE: + * https://github.com/y-256/libdivsufsort + +This product contains a modified portion of Nitsan Wakart's 'JCTools', Java Concurrency Tools for the JVM, + which can be obtained at: + + * LICENSE: + * license/LICENSE.jctools.txt (ASL2 License) + * HOMEPAGE: + * https://github.com/JCTools/JCTools + +This product optionally depends on 'JZlib', a re-implementation of zlib in +pure Java, which can be obtained at: + + * LICENSE: + * license/LICENSE.jzlib.txt (BSD style License) + * HOMEPAGE: + * http://www.jcraft.com/jzlib/ + +This product optionally depends on 'Compress-LZF', a Java library for encoding and +decoding data in LZF format, written by Tatu Saloranta. It can be obtained at: + + * LICENSE: + * license/LICENSE.compress-lzf.txt (Apache License 2.0) + * HOMEPAGE: + * https://github.com/ning/compress + +This product optionally depends on 'lz4', a LZ4 Java compression +and decompression library written by Adrien Grand. It can be obtained at: + + * LICENSE: + * license/LICENSE.lz4.txt (Apache License 2.0) + * HOMEPAGE: + * https://github.com/jpountz/lz4-java + +This product optionally depends on 'lzma-java', a LZMA Java compression +and decompression library, which can be obtained at: + + * LICENSE: + * license/LICENSE.lzma-java.txt (Apache License 2.0) + * HOMEPAGE: + * https://github.com/jponge/lzma-java + +This product optionally depends on 'zstd-jni', a zstd-jni Java compression +and decompression library, which can be obtained at: + + * LICENSE: + * license/LICENSE.zstd-jni.txt (Apache License 2.0) + * HOMEPAGE: + * https://github.com/luben/zstd-jni + +This product contains a modified portion of 'jfastlz', a Java port of FastLZ compression +and decompression library written by William Kinney. It can be obtained at: + + * LICENSE: + * license/LICENSE.jfastlz.txt (MIT License) + * HOMEPAGE: + * https://code.google.com/p/jfastlz/ + +This product contains a modified portion of and optionally depends on 'Protocol Buffers', Google's data +interchange format, which can be obtained at: + + * LICENSE: + * license/LICENSE.protobuf.txt (New BSD License) + * HOMEPAGE: + * https://github.com/google/protobuf + +This product optionally depends on 'Bouncy Castle Crypto APIs' to generate +a temporary self-signed X.509 certificate when the JVM does not provide the +equivalent functionality. It can be obtained at: + + * LICENSE: + * license/LICENSE.bouncycastle.txt (MIT License) + * HOMEPAGE: + * https://www.bouncycastle.org/ + +This product optionally depends on 'Snappy', a compression library produced +by Google Inc, which can be obtained at: + + * LICENSE: + * license/LICENSE.snappy.txt (New BSD License) + * HOMEPAGE: + * https://github.com/google/snappy + +This product optionally depends on 'JBoss Marshalling', an alternative Java +serialization API, which can be obtained at: + + * LICENSE: + * license/LICENSE.jboss-marshalling.txt (Apache License 2.0) + * HOMEPAGE: + * https://github.com/jboss-remoting/jboss-marshalling + +This product optionally depends on 'Caliper', Google's micro- +benchmarking framework, which can be obtained at: + + * LICENSE: + * license/LICENSE.caliper.txt (Apache License 2.0) + * HOMEPAGE: + * https://github.com/google/caliper + +This product optionally depends on 'Apache Commons Logging', a logging +framework, which can be obtained at: + + * LICENSE: + * license/LICENSE.commons-logging.txt (Apache License 2.0) + * HOMEPAGE: + * https://commons.apache.org/logging/ + +This product optionally depends on 'Apache Log4J', a logging framework, which +can be obtained at: + + * LICENSE: + * license/LICENSE.log4j.txt (Apache License 2.0) + * HOMEPAGE: + * https://logging.apache.org/log4j/ + +This product optionally depends on 'Aalto XML', an ultra-high performance +non-blocking XML processor, which can be obtained at: + + * LICENSE: + * license/LICENSE.aalto-xml.txt (Apache License 2.0) + * HOMEPAGE: + * https://wiki.fasterxml.com/AaltoHome + +This product contains a modified version of 'HPACK', a Java implementation of +the HTTP/2 HPACK algorithm written by Twitter. It can be obtained at: + + * LICENSE: + * license/LICENSE.hpack.txt (Apache License 2.0) + * HOMEPAGE: + * https://github.com/twitter/hpack + +This product contains a modified version of 'HPACK', a Java implementation of +the HTTP/2 HPACK algorithm written by Cory Benfield. It can be obtained at: + + * LICENSE: + * license/LICENSE.hyper-hpack.txt (MIT License) + * HOMEPAGE: + * https://github.com/python-hyper/hpack/ + +This product contains a modified version of 'HPACK', a Java implementation of +the HTTP/2 HPACK algorithm written by Tatsuhiro Tsujikawa. It can be obtained at: + + * LICENSE: + * license/LICENSE.nghttp2-hpack.txt (MIT License) + * HOMEPAGE: + * https://github.com/nghttp2/nghttp2/ + +This product contains a modified portion of 'Apache Commons Lang', a Java library +provides utilities for the java.lang API, which can be obtained at: + + * LICENSE: + * license/LICENSE.commons-lang.txt (Apache License 2.0) + * HOMEPAGE: + * https://commons.apache.org/proper/commons-lang/ + + +This product contains the Maven wrapper scripts from 'Maven Wrapper', that provides an easy way to ensure a user has everything necessary to run the Maven build. + + * LICENSE: + * license/LICENSE.mvn-wrapper.txt (Apache License 2.0) + * HOMEPAGE: + * https://github.com/takari/maven-wrapper + +This product contains the dnsinfo.h header file, that provides a way to retrieve the system DNS configuration on MacOS. +This private header is also used by Apple's open source + mDNSResponder (https://opensource.apple.com/tarballs/mDNSResponder/). + + * LICENSE: + * license/LICENSE.dnsinfo.txt (Apple Public Source License 2.0) + * HOMEPAGE: + * https://www.opensource.apple.com/source/configd/configd-453.19/dnsinfo/dnsinfo.h + +This product optionally depends on 'Brotli4j', Brotli compression and +decompression for Java., which can be obtained at: + + * LICENSE: + * license/LICENSE.brotli4j.txt (Apache License 2.0) + * HOMEPAGE: + * https://github.com/hyperxpro/Brotli4j