diff --git a/.github/ISSUE_TEMPLATE/license-exception-request.yaml b/.github/ISSUE_TEMPLATE/license-exception-request.yaml index 9c4af9fd..fa80f2e2 100644 --- a/.github/ISSUE_TEMPLATE/license-exception-request.yaml +++ b/.github/ISSUE_TEMPLATE/license-exception-request.yaml @@ -38,6 +38,16 @@ body:
+ # Check for existing exceptions + + Before submitting, please check if an exception already exists for your component(s): + + **[Search the exceptions database](https://exceptions.cncf.io/)** + + If an exception already exists for the same package and license, you do not need to request a new one. + +
+ --- # License Exception Request form diff --git a/.github/workflows/deploy-license-site.yml b/.github/workflows/deploy-license-site.yml new file mode 100644 index 00000000..112672e0 --- /dev/null +++ b/.github/workflows/deploy-license-site.yml @@ -0,0 +1,50 @@ +name: License Exceptions Site Tests + +on: + push: + branches: [main] + paths: + - 'license-exceptions/**' + pull_request: + paths: + - 'license-exceptions/**' + workflow_dispatch: + +permissions: + contents: read + +jobs: + test: + name: Run E2E Tests + runs-on: ubuntu-latest + defaults: + run: + working-directory: license-exceptions + + steps: + - name: Checkout + uses: actions/checkout@v4 + + - name: Setup Node.js + uses: actions/setup-node@v4 + with: + node-version: '20' + cache: 'npm' + cache-dependency-path: license-exceptions/package-lock.json + + - name: Install dependencies + run: npm ci + + - name: Install Playwright Browsers + run: npx playwright install chromium --with-deps + + - name: Run Playwright tests + run: npm test + + - name: Upload test results + uses: actions/upload-artifact@v4 + if: ${{ !cancelled() }} + with: + name: playwright-report + path: license-exceptions/playwright-report/ + retention-days: 7 diff --git a/.github/workflows/e2e-license-site.yml b/.github/workflows/e2e-license-site.yml new file mode 100644 index 00000000..0a9b3b21 --- /dev/null +++ b/.github/workflows/e2e-license-site.yml @@ -0,0 +1,46 @@ +name: E2E Tests - License Exceptions Site + +on: + pull_request: + paths: + - 'license-exceptions/site/**' + - 'license-exceptions/exceptions.json' + - 'license-exceptions/tests/**' + - 'license-exceptions/playwright.config.js' + - 'license-exceptions/package.json' + +jobs: + e2e-tests: + name: Run E2E Tests + runs-on: ubuntu-latest + defaults: + run: + working-directory: license-exceptions + + steps: + - name: Checkout + uses: actions/checkout@v4 + + - name: Setup Node.js + uses: actions/setup-node@v4 + with: + node-version: '20' + cache: 'npm' + cache-dependency-path: license-exceptions/package-lock.json + + - name: Install dependencies + run: npm ci + + - name: Install Playwright Browsers + run: npx playwright install chromium --with-deps + + - name: Run Playwright tests + run: npm test + + - name: Upload test results + uses: actions/upload-artifact@v4 + if: ${{ !cancelled() }} + with: + name: playwright-report + path: license-exceptions/playwright-report/ + retention-days: 7 diff --git a/.github/workflows/license-exception-approved.yml b/.github/workflows/license-exception-approved.yml new file mode 100644 index 00000000..6adc60bd --- /dev/null +++ b/.github/workflows/license-exception-approved.yml @@ -0,0 +1,148 @@ +name: License Exception Decision + +on: + issues: + types: [labeled] + +jobs: + create-pr: + if: github.event.label.name == 'approved' || github.event.label.name == 'denied' + runs-on: ubuntu-latest + permissions: + contents: write + pull-requests: write + issues: write + + steps: + - name: Checkout + uses: actions/checkout@v4 + + - name: Setup Node.js + uses: actions/setup-node@v4 + with: + node-version: '20' + + - name: Parse issue for components + id: parse + uses: actions/github-script@v7 + with: + script: | + const body = context.payload.issue.body || ''; + const issueNumber = context.issue.number; + const today = new Date().toISOString().split('T')[0]; + const labelName = context.payload.label.name; + const status = labelName === 'approved' ? 'approved' : 'denied'; + + // Extract project name + const projectMatch = body.match(/For which CNCF project[^]*?\n\n([^\n]+)/); + const project = projectMatch ? projectMatch[1].trim() : 'Unknown'; + + // Extract scope/usage context if present + const scopeMatch = body.match(/(?:How|Where|What).*(?:used|usage|scope|context)[^]*?\n\n([^\n]+)/i); + const defaultScope = scopeMatch ? scopeMatch[1].trim() : undefined; + + // Extract component table - parse all columns including scope + const tableMatch = body.match(/\|[^\n]*Component[^\n]*\|[\s\S]*?\n\|[-|\s]+\|\n([\s\S]*?)(?=\n\n|\n###|$)/); + const newExceptions = []; + + if (tableMatch) { + const rows = tableMatch[1].trim().split('\n'); + let idx = 1; + for (const row of rows) { + const cells = row.split('|').map(c => c.trim()).filter(c => c); + if (cells.length >= 4 && cells[0]) { + // Try to extract scope from table (column 5 if present) or use default + const scope = (cells.length >= 5 && cells[4]) ? cells[4] : defaultScope; + + newExceptions.push({ + id: `exc-${today}-${String(idx).padStart(3, '0')}`, + package: cells[0], + packageUrl: cells[1] || undefined, + license: cells[3], + project: project, + approvedDate: today, + issueUrl: `https://github.com/${context.repo.owner}/${context.repo.repo}/issues/${issueNumber}`, + status: status, + scope: scope, + comment: cells.length >= 6 ? cells[5] : undefined + }); + idx++; + } + } + } + + // Write to temp file for next step + const fs = require('fs'); + fs.writeFileSync('/tmp/new-exceptions.json', JSON.stringify(newExceptions, null, 2)); + + core.setOutput('project', project); + core.setOutput('count', newExceptions.length); + core.setOutput('date', today); + core.setOutput('status', status); + + - name: Update exceptions.json + run: | + node -e " + const fs = require('fs'); + const newExceptions = JSON.parse(fs.readFileSync('/tmp/new-exceptions.json', 'utf-8')); + const data = JSON.parse(fs.readFileSync('license-exceptions/exceptions.json', 'utf-8')); + + // Add new exceptions at the beginning + data.exceptions.unshift(...newExceptions); + + // Update lastUpdated + data.lastUpdated = new Date().toISOString().split('T')[0]; + + fs.writeFileSync('license-exceptions/exceptions.json', JSON.stringify(data, null, 2)); + console.log('Added', newExceptions.length, 'exceptions'); + " + + - name: Generate derived formats + run: | + cd license-exceptions + node scripts/generate-all.js + + - name: Create Pull Request + id: create-pr + uses: peter-evans/create-pull-request@v6 + with: + token: ${{ secrets.GITHUB_TOKEN }} + branch: license-exception-${{ github.event.issue.number }} + title: "Record license exception decision (${{ steps.parse.outputs.status }}) for ${{ steps.parse.outputs.project }} (#${{ github.event.issue.number }})" + body: | + ## License Exception Decision + + This PR records the license exception decision from #${{ github.event.issue.number }}. + + **Project:** ${{ steps.parse.outputs.project }} + **Decision:** ${{ steps.parse.outputs.status }} + **Decision Date:** ${{ steps.parse.outputs.date }} + **Exceptions Recorded:** ${{ steps.parse.outputs.count }} + + Closes #${{ github.event.issue.number }} + commit-message: "feat(license): record ${{ steps.parse.outputs.status }} exceptions for ${{ steps.parse.outputs.project }} (#${{ github.event.issue.number }})" + add-paths: | + license-exceptions/exceptions.json + license-exceptions/CNCF-licensing-exceptions.csv + license-exceptions/cncf-exceptions-current.spdx + + - name: Comment on issue + uses: actions/github-script@v7 + with: + script: | + const prNumber = '${{ steps.create-pr.outputs.pull-request-number }}'; + const prUrl = '${{ steps.create-pr.outputs.pull-request-url }}'; + const status = '${{ steps.parse.outputs.status }}'; + + if (prNumber) { + const emoji = status === 'approved' ? '✅' : '❌'; + const title = status === 'approved' ? 'Exception Approved' : 'Exception Denied'; + const action = status === 'approved' ? 'add these approved exceptions' : 'record these denied exceptions'; + + await github.rest.issues.createComment({ + owner: context.repo.owner, + repo: context.repo.repo, + issue_number: context.issue.number, + body: `## ${emoji} ${title}\n\nA pull request has been created to ${action} to the database:\n\n${prUrl}\n\nOnce merged, the exceptions will appear in the [exceptions database](https://exceptions.cncf.io/).` + }); + } diff --git a/.github/workflows/license-exception-triage.yml b/.github/workflows/license-exception-triage.yml new file mode 100644 index 00000000..3304993c --- /dev/null +++ b/.github/workflows/license-exception-triage.yml @@ -0,0 +1,114 @@ +name: License Exception Triage + +on: + issues: + types: [opened, edited] + +jobs: + triage: + if: contains(github.event.issue.labels.*.name, 'licensing') + runs-on: ubuntu-latest + permissions: + issues: write + contents: read + + steps: + - name: Checkout + uses: actions/checkout@v4 + + - name: Setup Node.js + uses: actions/setup-node@v4 + with: + node-version: '20' + + - name: Parse issue and check duplicates + id: parse + uses: actions/github-script@v7 + with: + script: | + // Parse issue body + const body = context.payload.issue.body || ''; + + // Extract project name (after "For which CNCF project" question) + const projectMatch = body.match(/For which CNCF project[^]*?\n\n([^\n]+)/); + const project = projectMatch ? projectMatch[1].trim() : 'Unknown'; + + // Extract component table rows + const tableMatch = body.match(/\|[^\n]*Component[^\n]*\|[\s\S]*?\n\|[-|\s]+\|\n([\s\S]*?)(?=\n\n|\n###|$)/); + const components = []; + + if (tableMatch) { + const rows = tableMatch[1].trim().split('\n'); + for (const row of rows) { + const cells = row.split('|').map(c => c.trim()).filter(c => c); + if (cells.length >= 1 && cells[0]) { + components.push(cells[0]); + } + } + } + + // Read exceptions.json + const fs = require('fs'); + const exceptionsData = JSON.parse(fs.readFileSync('license-exceptions/exceptions.json', 'utf-8')); + const existingPackages = new Set(exceptionsData.exceptions.map(e => e.package.toLowerCase())); + + // Check for duplicates + const duplicates = components.filter(c => { + const normalized = c.toLowerCase().replace(/^https?:\/\//, '').replace(/\/$/, ''); + return existingPackages.has(normalized); + }); + + core.setOutput('project', project); + core.setOutput('component_count', components.length); + core.setOutput('duplicates', JSON.stringify(duplicates)); + core.setOutput('has_duplicates', duplicates.length > 0); + + - name: Add labels + uses: actions/github-script@v7 + with: + script: | + const hasDuplicates = ${{ steps.parse.outputs.has_duplicates }}; + + const labels = ['needs-review']; + if (hasDuplicates) { + labels.push('possible-duplicate'); + } + + await github.rest.issues.addLabels({ + owner: context.repo.owner, + repo: context.repo.repo, + issue_number: context.issue.number, + labels: labels + }); + + - name: Post triage comment + uses: actions/github-script@v7 + with: + script: | + const project = `${{ steps.parse.outputs.project }}`; + const componentCount = ${{ steps.parse.outputs.component_count }}; + const duplicates = JSON.parse('${{ steps.parse.outputs.duplicates }}'); + + let comment = `## Automated Triage Summary\n\n`; + comment += `**Project:** ${project}\n`; + comment += `**Components Requested:** ${componentCount}\n\n`; + + if (duplicates.length > 0) { + comment += `### ⚠️ Possible Duplicates Detected\n\n`; + comment += `The following components may already have an exception:\n\n`; + for (const dup of duplicates) { + comment += `- \`${dup}\`\n`; + } + comment += `\nPlease check the [exceptions database](https://exceptions.cncf.io/) to verify.\n\n`; + } + + comment += `---\n`; + comment += `*This issue will be reviewed by the CNCF staff and Legal Committee. `; + comment += `See [process documentation](https://github.com/cncf/foundation/blob/main/policies-guidance/allowed-third-party-license-policy.md#process-for-applying-for-an-exception).*`; + + await github.rest.issues.createComment({ + owner: context.repo.owner, + repo: context.repo.repo, + issue_number: context.issue.number, + body: comment + }); diff --git a/.github/workflows/validate-exceptions.yml b/.github/workflows/validate-exceptions.yml new file mode 100644 index 00000000..aef02c62 --- /dev/null +++ b/.github/workflows/validate-exceptions.yml @@ -0,0 +1,103 @@ +name: Validate License Exceptions + +on: + pull_request: + paths: + - 'license-exceptions/exceptions.json' + - 'license-exceptions/schema/**' + +jobs: + validate: + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v4 + + - name: Setup Node.js + uses: actions/setup-node@v4 + with: + node-version: '20' + + - name: Install ajv-cli + run: npm install -g ajv-cli ajv-formats + + - name: Validate JSON Schema + run: | + ajv validate \ + --spec=draft2020 \ + -s license-exceptions/schema/exception.schema.json \ + -d license-exceptions/exceptions.json \ + --strict=false \ + -c ajv-formats + + - name: Check for duplicate IDs + run: | + node -e " + const data = JSON.parse(require('fs').readFileSync('license-exceptions/exceptions.json', 'utf-8')); + const ids = data.exceptions.map(e => e.id); + const seen = new Set(); + const duplicates = []; + + for (const id of ids) { + if (seen.has(id)) { + duplicates.push(id); + } + seen.add(id); + } + + if (duplicates.length > 0) { + console.error('Duplicate IDs found:', duplicates); + process.exit(1); + } + + console.log('✓ No duplicate IDs found (' + ids.length + ' exceptions)'); + " + + - name: Verify generated files are in sync + run: | + # Generate fresh files + cd license-exceptions + node scripts/generate-all.js + + # Check if CSV changed + if ! git diff --quiet CNCF-licensing-exceptions.csv; then + echo "::error::CSV file is out of sync with exceptions.json" + echo "Run 'node scripts/generate-all.js' and commit the changes" + git diff CNCF-licensing-exceptions.csv + exit 1 + fi + + # Check if SPDX changed + if ! git diff --quiet cncf-exceptions-current.spdx; then + echo "::error::SPDX file is out of sync with exceptions.json" + echo "Run 'node scripts/generate-all.js' and commit the changes" + git diff cncf-exceptions-current.spdx + exit 1 + fi + + echo "✓ All generated files are in sync" + + - name: Validate JSON structure + run: | + node -e " + const data = JSON.parse(require('fs').readFileSync('license-exceptions/exceptions.json', 'utf-8')); + + // Check required top-level fields + if (!data.version) throw new Error('Missing version field'); + if (!data.lastUpdated) throw new Error('Missing lastUpdated field'); + if (!Array.isArray(data.exceptions)) throw new Error('exceptions must be an array'); + + // Check each exception has required fields + for (let i = 0; i < data.exceptions.length; i++) { + const exc = data.exceptions[i]; + if (!exc.id) throw new Error('Exception ' + i + ' missing id'); + if (!exc.package) throw new Error('Exception ' + i + ' missing package'); + if (!exc.license) throw new Error('Exception ' + i + ' missing license'); + if (!exc.status) throw new Error('Exception ' + i + ' missing status'); + if (!['approved', 'denied', 'allowlisted', 'apache-2.0'].includes(exc.status)) { + throw new Error('Exception ' + i + ' has invalid status: ' + exc.status); + } + } + + console.log('✓ JSON structure is valid'); + " diff --git a/license-exceptions/.gitignore b/license-exceptions/.gitignore new file mode 100644 index 00000000..819da3c9 --- /dev/null +++ b/license-exceptions/.gitignore @@ -0,0 +1,10 @@ +# Dependencies +node_modules/ + +# Playwright +test-results/ +playwright-report/ +playwright/.cache/ + +# OS files +.DS_Store diff --git a/license-exceptions/CNCF-licensing-exceptions.csv b/license-exceptions/CNCF-licensing-exceptions.csv index 174f2604..b9a9fa3f 100644 --- a/license-exceptions/CNCF-licensing-exceptions.csv +++ b/license-exceptions/CNCF-licensing-exceptions.csv @@ -1,450 +1,488 @@ -Package Name,License Concluded,Comments,Date Published,Last updated: 8-14-2023 -gonum.org/v1/gonum,((BSD-3-Clause OR CC0-1.0) AND BSD-3-Clause),allowlisted,2019-11-01, -github.com/aws/aws-sdk-go,((MIT OR GPL-3.0) AND BSD-3-Clause AND Apache-2.0 AND MIT),allowlisted,2019-11-01, -ejs,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/cloudfoundry-incubator/candiedyaml,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/docker/cli,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/docker/docker,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/go-openapi/swag,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/go-yaml/yaml,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/ncabatoff/process-exporter,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/skynetservices/skydns,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/spf13/cobra,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/xanzy/ssh-agent,(Apache-2.0 AND MIT),not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/xeipuuv/gojsonschema,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/heketi/heketi REST API,(Apache-2.0 OR LGPL-3.0-or-later),"Apache-2.0, no approval needed",2019-11-01, -github.com/fsouza/go-dockerclient,(BSD-2-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/cloudflare/cfssl,(BSD-2-Clause AND BSD-3-Clause AND ISC),allowlisted,2019-11-01, -github.com/sirupsen/logrus,(BSD-2-Clause AND BSD-3-Clause AND MIT),allowlisted,2019-11-01, -github.com/Sirupsen/logrus,(BSD-2-Clause AND BSD-3-Clause AND MIT),allowlisted,2019-11-01, -github.com/globalsign/mgo,(BSD-2-Clause AND BSD-3-Clause),allowlisted,2019-11-01, -github.com/gogo/protobuf,(BSD-2-Clause AND BSD-3-Clause),allowlisted,2019-11-01, -github.com/magiconair/properties,(BSD-2-Clause AND BSD-3-Clause),allowlisted,2019-11-01, -github.com/scalingdata/gcfg,(BSD-2-Clause AND BSD-3-Clause),allowlisted,2019-11-01, -github.com/zchee/go-vmnet,(BSD-2-Clause AND BSD-3-Clause),not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -gopkg.in/check.v1,(BSD-2-Clause AND BSD-3-Clause),allowlisted,2019-11-01, -speter.net/go/exp,(BSD-2-Clause AND BSD-3-Clause),not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/emirpasic/gods,(BSD-2-Clause AND ISC),allowlisted,2019-11-01, -github.com/gorilla/websocket,(BSD-2-Clause AND MIT),allowlisted,2019-11-01, -github.com/storageos/go-api,(BSD-2-Clause AND MIT),allowlisted,2019-11-01, -github.com/pquerna/ffjson,(BSD-3-Clause AND Apache-2.0 AND ISC),allowlisted,2019-11-01, -google.golang.org/grpc,(BSD-3-Clause AND Apache-2.0 AND LicenseRef-Google-Patents-Notice-GRPC),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/googleapis/gnostic,(BSD-3-Clause AND Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/prometheus/client_golang,(BSD-3-Clause AND Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/spotinst/spotinst-sdk-go,(BSD-3-Clause AND Apache-2.0 AND MIT),not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -google.golang.org/api,(BSD-3-Clause AND Apache-2.0 AND MIT),not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/coreos/etcd,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/docker/engine-api,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/google/certificate-transparency-go,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/grpc-ecosystem/grpc-gateway,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/matttproud/golang_protobuf_extensions,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/pquerna/cachecontrol,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/prometheus/common,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/vmware/govmomi,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/vmware/photon-controller-go-sdk,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -google.golang.org/appengine,(BSD-3-Clause AND Apache-2.0),not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-11-01, -gopkg.in/square/go-jose.v2,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/google/go-github,(BSD-3-Clause AND CC-BY-3.0),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/grpc-ecosystem/grpc-opentracing,(BSD-3-Clause AND LicenseRef-Google-Patents-Notice-GRPC),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -highlight.js,(BSD-3-Clause AND MIT AND CC0-1.0 AND LicenseRef-Public-domain-statement),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/daviddengcn/go-colortext,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -github.com/digitalocean/godo,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -github.com/djherbis/atime,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -github.com/fullsailor/pkcs7,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -github.com/ghodss/yaml,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -github.com/mattn/go-zglob,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -github.com/Microsoft/go-winio,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -github.com/Microsoft/hcsshim,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -gopkg.in/olivere/elastic.v3,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -gopkg.in/olivere/elastic.v5,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -marked,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -sigs.k8s.io/yaml,(BSD-3-Clause AND MIT),fork of github.com/ghodss/yaml; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -font-awesome,(CC-BY-3.0 AND MIT AND OFL-1.1),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -bootstrap,(CC-BY-3.0 AND MIT),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/go-openapi/spec,(CC-BY-4.0 AND Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/containerd/containerd,(CC-BY-4.0 AND Apache-2.0),"Apache-2.0, no approval needed",2019-11-01, -github.com/docker/go-units,(CC-BY-SA-4.0 AND CC-BY-4.0 AND Apache-2.0),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/opencontainers/go-digest,(CC-BY-SA-4.0 AND CC-BY-4.0 AND Apache-2.0),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/docker/spdystream,(CC-BY-SA-4.0 AND CC-BY-4.0 AND BSD-3-Clause AND Apache-2.0),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -jQuery hashchange event,(GPL-2.0+ OR MIT),contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -github.com/howeyc/gopass,(ISC AND CDDL-1.0),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/opencontainers/runc,(LicenseRef-CC-unspecified AND Apache-2.0),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -golang.org/x/net,(LicenseRef-Google-Patents-Notice-Golang AND BSD-2-Clause AND BSD-3-Clause AND CC-BY-3.0 AND (BSD-3-Clause OR LicenseRef-W3C-Test-Suite-License-1)),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -golang.org/x/sys,(LicenseRef-Google-Patents-Notice-Golang AND BSD-2-Clause AND BSD-3-Clause),allowlisted,2019-11-01, -golang.org/x/tools,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause AND Apache-2.0 AND MIT),allowlisted,2019-11-01, -golang.org/x/crypto,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause AND MIT AND LicenseRef-Public-domain-statement),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/golang/dep,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),allowlisted,2019-11-01, -github.com/sigma/go-inotify,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -golang.org/x/build,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),allowlisted,2019-11-01, -golang.org/x/exp,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),allowlisted,2019-11-01, -golang.org/x/sync,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),allowlisted,2019-11-01, -golang.org/x/text,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),allowlisted,2019-11-01, -golang.org/x/time,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),allowlisted,2019-11-01, -golang/expansion,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -golang/go/types,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -golang/reflect,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -golang/template,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -github.com/dgryski/go-onlinestats,(MIT AND LicenseRef-Public-domain-statement),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/mattn/go-sqlite3,(MIT AND LicenseRef-Public-domain-statement),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -jQuery BBQ,(MIT OR GPL-2.0+),contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -github.com/client9/misspell,(Unlicense AND BSD-3-Clause AND MIT),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -cloud.google.com/go,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -code.cloudfoundry.org/clock,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/abbot/go-http-auth,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/aokoli/goutils,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/appc/spec,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/aws/aws-k8s-tester,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/Azure/azure-sdk-for-go,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/Azure/go-autorest,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/bazelbuild/bazel-gazelle,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/bazelbuild/buildtools,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/bluebreezecf/opentsdb-goclient,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/clusterhq/flocker-go,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/cockroachdb/cmux,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/codedellemc/goscaleio,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/container-storage-interface/spec,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/containerd/console,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/containernetworking/cni,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/containernetworking/plugins,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/coredns/coredns,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/coreos/go-etcd,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/coreos/go-oidc,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/coreos/go-semver,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/coreos/go-systemd,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/coreos/pkg,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/coreos/rkt,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/denverdino/aliyungo,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/docker/distribution,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/docker/go-connections,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/docker/libcompose,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/docker/libnetwork,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/docker/libtrust,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/docker/machine,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/euank/go-kmsg-parser,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/flynn/go-shlex,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/go-ini/ini,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/go-openapi/analysis,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/go-openapi/errors,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/go-openapi/jsonpointer,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/go-openapi/jsonreference,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/go-openapi/loads,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/go-openapi/runtime,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/go-openapi/strfmt,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/go-openapi/validate,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/golang/glog,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/golang/groupcache,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/golang/mock,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/google/btree,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/google/cadvisor,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/google/go-containerregistry,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/google/go-tpm,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/google/gofuzz,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/GoogleCloudPlatform/gke-managed-certs,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/gophercloud/gophercloud,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/grpc-ecosystem/go-grpc-middleware,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/grpc-ecosystem/go-grpc-prometheus,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/hawkular/hawkular-client-go,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/inconshreveable/mousetrap,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/jimmidyson/go-download,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/jmespath/go-jmespath,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/jonboulle/clockwork,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/knative/build,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/kubernetes-incubator/apiserver-builder,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/kubernetes-incubator/reference-docs,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/kubernetes-sigs/application,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/kubernetes/repo-infra,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/kylelemons/godebug,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/libopenstorage/openstorage,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/lpabon/godbc,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/mesos/mesos-go,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/mholt/caddy,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/miekg/coredns,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/mindprince/gonvml,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/mistifyio/go-zfs,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/moby/hyperkit,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/modern-go/concurrent,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/modern-go/reflect2,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/mrunalp/fileutils,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/novln/docker-parser,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/NYTimes/gziphandler,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/opencontainers/image-spec,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/opencontainers/runtime-spec,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/opencontainers/selinux,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/openshift/origin,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/paultag/sniff,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/prometheus/client_model,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/prometheus/procfs,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/r2d4/external-storage,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/rackspace/gophercloud,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/rancher/go-rancher,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/samalba/dockerclient,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/soheilhy/cmux,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/spf13/afero,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/thockin/glogr,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/thockin/logr,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/Unknwon/goconfig,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/vishvananda/netlink,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/vishvananda/netns,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/weaveworks/mesh,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/xanzy/go-cloudstack,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/xeipuuv/gojsonpointer,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/xeipuuv/gojsonreference,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -go.opencensus.io,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -go4.org/errorutil,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -google.golang.org/cloud,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -google.golang.org/genproto,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -gopkg.in/src-d,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/bwmarrin/snowflake,BSD-2-Clause,allowlisted,2019-11-01, -github.com/dchest/safefile,BSD-2-Clause,allowlisted,2019-11-01, -github.com/elazarl/go-bindata-assetfs,BSD-2-Clause,allowlisted,2019-11-01, -github.com/fsouza/fake-gcs-server,BSD-2-Clause,allowlisted,2019-11-01, -github.com/GeertJohan/go.rice,BSD-2-Clause,allowlisted,2019-11-01, -github.com/godbus/dbus,BSD-2-Clause,allowlisted,2019-11-01, -github.com/karrick/godirwalk,BSD-2-Clause,allowlisted,2019-11-01, -github.com/pkg/browser,BSD-2-Clause,allowlisted,2019-11-01, -github.com/pkg/errors,BSD-2-Clause,allowlisted,2019-11-01, -github.com/pkg/profile,BSD-2-Clause,allowlisted,2019-11-01, -github.com/pkg/sftp,BSD-2-Clause,allowlisted,2019-11-01, -github.com/russross/blackfriday,BSD-2-Clause,allowlisted,2019-11-01, -github.com/seccomp/libseccomp-golang,BSD-2-Clause,allowlisted,2019-11-01, -github.com/streadway/quantile,BSD-2-Clause,allowlisted,2019-11-01, -github.com/syndtr/gocapability,BSD-2-Clause,allowlisted,2019-11-01, -gopkg.in/warnings.v0,BSD-2-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/Nvveen/Gotty,BSD-2-Clause-FreeBSD,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/rcrowley/go-metrics,BSD-2-Clause-FreeBSD,allowlisted,2019-11-01, -bitbucket.org/ww/goautoneg,BSD-3-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -dialog-polyfill.css,BSD-3-Clause,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -github.com/aclements/go-moremath,BSD-3-Clause,allowlisted,2019-11-01, -github.com/bungle/lua-resty-template,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -github.com/chai2010/gettext-go,BSD-3-Clause,allowlisted,2019-11-01, -github.com/cyphar/filepath-securejoin,BSD-3-Clause,allowlisted,2019-11-01, -github.com/d2g/dhcp4,BSD-3-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/elazarl/goproxy,BSD-3-Clause,allowlisted,2019-11-01, -github.com/evanphx/json-patch,BSD-3-Clause,allowlisted,2019-11-01, -github.com/fsnotify/fsnotify,BSD-3-Clause,allowlisted,2019-11-01, -github.com/golang/lint,BSD-3-Clause,allowlisted,2019-11-01, -github.com/golang/protobuf,BSD-3-Clause,allowlisted,2019-11-01, -github.com/golang/snappy,BSD-3-Clause,allowlisted,2019-11-01, -github.com/gonum/graph,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -github.com/google/go-querystring,BSD-3-Clause,allowlisted,2019-11-01, -github.com/google/uuid,BSD-3-Clause,allowlisted,2019-11-01, -github.com/googleapis/gax-go,BSD-3-Clause,allowlisted,2019-11-01, -github.com/gorilla/context,BSD-3-Clause,allowlisted,2019-11-01, -github.com/gorilla/mux,BSD-3-Clause,allowlisted,2019-11-01, -github.com/gorilla/securecookie,BSD-3-Clause,allowlisted,2019-11-01, -github.com/gorilla/sessions,BSD-3-Clause,allowlisted,2019-11-01, -github.com/imdario/mergo,BSD-3-Clause,allowlisted,2019-11-01, -github.com/JeffAshton/win_pdh,BSD-3-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/kardianos/osext,BSD-3-Clause,allowlisted,2019-11-01, -github.com/kr/fs,BSD-3-Clause,allowlisted,2019-11-01, -github.com/lxn/win,BSD-3-Clause,allowlisted,2019-11-01, -github.com/miekg/dns,BSD-3-Clause,allowlisted,2019-11-01, -github.com/mvdan/xurls,BSD-3-Clause,allowlisted,2019-11-01, -github.com/mxk/go-flowrate,BSD-3-Clause,allowlisted,2019-11-01, -github.com/pborman/uuid,BSD-3-Clause,allowlisted,2019-11-01, -github.com/petar/GoLLRB,BSD-3-Clause,allowlisted,2019-11-01, -github.com/pierrec/lz4,BSD-3-Clause,allowlisted,2019-11-01, -github.com/pierrec/xxHash,BSD-3-Clause,allowlisted,2019-11-01, -github.com/pmezard/go-difflib,BSD-3-Clause,allowlisted,2019-11-01, -github.com/PuerkitoBio/purell,BSD-3-Clause,allowlisted,2019-11-01, -github.com/PuerkitoBio/urlesc,BSD-3-Clause,allowlisted,2019-11-01, -github.com/quobyte/api,BSD-3-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/shurcooL/go,BSD-3-Clause,allowlisted,2019-11-01, -github.com/spf13/pflag,BSD-3-Clause,allowlisted,2019-11-01, -github.com/src-d/gcfg,BSD-3-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/tent/http-link-go,BSD-3-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/ziutek/syslog,BSD-3-Clause,allowlisted,2019-11-01, -go-srcimporter,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -go9p,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -godep,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -golang.org/x/lint,BSD-3-Clause,allowlisted,2019-11-01, -golang.org/x/oauth2,BSD-3-Clause,allowlisted,2019-11-01, -golang/archive/tar,BSD-3-Clause,allowlisted,2019-11-01, -golang/internal/srcimporter,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -golang/json,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -golang/netutil,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -Google Protocol Buffers,BSD-3-Clause,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -gopkg.in/cheggaaa/pb.v1,BSD-3-Clause,allowlisted,2019-11-01, -gopkg.in/fsnotify,BSD-3-Clause,allowlisted,2019-11-01, -gopkg.in/gcfg.v1,BSD-3-Clause,allowlisted,2019-11-01, -gopkg.in/igm/sockjs-go.v2,BSD-3-Clause,allowlisted,2019-11-01, -gopkg.in/inf.v0,BSD-3-Clause,allowlisted,2019-11-01, -gopkg.in/tomb.v1,BSD-3-Clause,allowlisted,2019-11-01, -Highlight,BSD-3-Clause,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -htpasswd,BSD-3-Clause,not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-11-01, -Pure CSS,BSD-3-Clause,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -sprintf() for JavaScript,BSD-3-Clause,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -github.com/jteeuwen/go-bindata,CC0-1.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -VirtualBox Linux Guest Drivers Makefile,GPL-2.0-only,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-05-20,2019-11-01, -github.com/davecgh/go-spew,ISC,allowlisted,2019-11-01, -shred,ISC,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -Angular,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -Asciidoctor,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -Azure acr-docker-credential-helper,MIT,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -Backbone,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -bitbucket.org/bertimus9/systemstat,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -Chart.js,MIT,allowlisted,2019-11-01, -colors,MIT,allowlisted,2019-11-01, -Gingko,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -github.com/andygrunwald/go-gerrit,MIT,allowlisted,2019-11-01, -github.com/armon/circbuf,MIT,allowlisted,2019-11-01, -github.com/armon/go-proxyproto,MIT,allowlisted,2019-11-01, -github.com/armon/go-radix,MIT,allowlisted,2019-11-01, -github.com/asaskevich/govalidator,MIT,allowlisted,2019-11-01, -github.com/Azure/azure-pipeline-go,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/Azure/azure-storage-blob-go,MIT,allowlisted,2019-11-01, -github.com/Azure/go-ansiterm,MIT,allowlisted,2019-11-01, -github.com/beorn7/perks,MIT,allowlisted,2019-11-01, -github.com/blang/semver,MIT,allowlisted,2019-11-01, -github.com/boltdb/bolt,MIT,allowlisted,2019-11-01, -github.com/coreos/bbolt,MIT,allowlisted,2019-11-01, -github.com/cpuguy83/go-md2man,MIT,allowlisted,2019-11-01, -github.com/daaku/go.zipexe,MIT,allowlisted,2019-11-01, -github.com/deckarep/golang-set,MIT,allowlisted,2019-11-01, -github.com/dgrijalva/jwt-go,MIT,allowlisted,2019-11-01, -github.com/dustin/go-humanize,MIT,allowlisted,2019-11-01, -github.com/eapache/channels,MIT,allowlisted,2019-11-01, -github.com/eapache/go-resiliency,MIT,allowlisted,2019-11-01, -github.com/eapache/go-xerial-snappy,MIT,allowlisted,2019-11-01, -github.com/eapache/queue,MIT,allowlisted,2019-11-01, -github.com/emicklei/go-restful,MIT,allowlisted,2019-11-01, -github.com/emicklei/go-restful-swagger12,MIT,allowlisted,2019-11-01, -github.com/exponent-io/jsonpath,MIT,allowlisted,2019-11-01, -github.com/fatih/camelcase,MIT,allowlisted,2019-11-01, -github.com/fatih/structs,MIT,allowlisted,2019-11-01, -github.com/go-ozzo/ozzo-validation,MIT,allowlisted,2019-11-01, -github.com/gobuffalo/envy,MIT,allowlisted,2019-11-01, -github.com/gregjones/httpcache,MIT,allowlisted,2019-11-01, -github.com/hpcloud/tail,MIT,allowlisted,2019-11-01, -github.com/huandu/xstrings,MIT,allowlisted,2019-11-01, -github.com/influxdata/influxdb,MIT,allowlisted,2019-11-01, -github.com/jbenet/go-context,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/jinzhu/gorm,MIT,allowlisted,2019-11-01, -github.com/jinzhu/inflection,MIT,allowlisted,2019-11-01, -github.com/jmank88/nuts,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/jmhodges/clock,MIT,allowlisted,2019-11-01, -github.com/jmoiron/sqlx,MIT,allowlisted,2019-11-01, -github.com/johanneswuerbach/nfsexports,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/joho/godotenv,MIT,allowlisted,2019-11-01, -github.com/joshdk/go-junit,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/jpillora/backoff,MIT,allowlisted,2019-11-01, -github.com/json-iterator/go,MIT,allowlisted,2019-11-01, -github.com/kevinburke/ssh_config,MIT,allowlisted,2019-11-01, -github.com/kisielk/sqlstruct,MIT,allowlisted,2019-11-01, -github.com/konsorten/go-windows-terminal-sequences,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/kr/pretty,MIT,allowlisted,2019-11-01, -github.com/kr/pty,MIT,allowlisted,2019-11-01, -github.com/kr/text,MIT,allowlisted,2019-11-01, -github.com/lib/pq,MIT,allowlisted,2019-11-01, -github.com/libvirt/libvirt-go,MIT,allowlisted,2019-11-01, -github.com/libvirt/libvirt-go-xml,MIT,allowlisted,2019-11-01, -github.com/mailru/easyjson,MIT,allowlisted,2019-11-01, -github.com/MakeNowJust/heredoc,MIT,allowlisted,2019-11-01, -github.com/markbates/inflect,MIT,allowlisted,2019-11-01, -github.com/marpaia/graphite-golang,MIT,allowlisted,2019-11-01, -github.com/marstr/guid,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/Masterminds/semver,MIT,allowlisted,2019-11-01, -github.com/Masterminds/sprig,MIT,allowlisted,2019-11-01, -github.com/Masterminds/vcs,MIT,allowlisted,2019-11-01, -github.com/mattn/go-runewidth,MIT,allowlisted,2019-11-01, -github.com/mattn/go-shellwords,MIT,allowlisted,2019-11-01, -github.com/mitchellh/go-homedir,MIT,allowlisted,2019-11-01, -github.com/mitchellh/go-ps,MIT,allowlisted,2019-11-01, -github.com/mitchellh/go-wordwrap,MIT,allowlisted,2019-11-01, -github.com/mitchellh/hashstructure,MIT,allowlisted,2019-11-01, -github.com/mitchellh/mapstructure,MIT,allowlisted,2019-11-01, -github.com/mohae/deepcopy,MIT,allowlisted,2019-11-01, -github.com/moul/http2curl,MIT,allowlisted,2019-11-01, -github.com/multiarch/qemu-user-static,MIT,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -github.com/nightlyone/lockfile,MIT,allowlisted,2019-11-01, -github.com/olekukonko/tablewriter,MIT,allowlisted,2019-11-01, -github.com/onsi/ginkgo,MIT,allowlisted,2019-11-01, -github.com/onsi/gomega,MIT,allowlisted,2019-11-01, -github.com/opentracing/opentracing-go,MIT,allowlisted,2019-11-01, -github.com/parnurzeal/gorequest,MIT,allowlisted,2019-11-01, -github.com/patrickmn/go-cache,MIT,allowlisted,2019-11-01, -github.com/pelletier/go-buffruneio,MIT,allowlisted,2019-11-01, -github.com/pelletier/go-toml,MIT,allowlisted,2019-11-01, -github.com/peterbourgon/diskv,MIT,allowlisted,2019-11-01, -github.com/renstrom/dedent,MIT,allowlisted,2019-11-01, -github.com/Rican7/retry,MIT,allowlisted,2019-11-01, -github.com/riemann/riemann-go-client,MIT,allowlisted,2019-11-01, -github.com/robfig/cron,MIT,allowlisted,2019-11-01, -github.com/rubiojr/go-vhd,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/satori/go.uuid,MIT,allowlisted,2019-11-01, -github.com/sdboyer/constext,MIT,allowlisted,2019-11-01, -github.com/sergi/go-diff,MIT,allowlisted,2019-11-01, -github.com/Shopify/sarama,MIT,allowlisted,2019-11-01, -github.com/shurcooL/githubv4,MIT,allowlisted,2019-11-01, -github.com/shurcooL/graphql,MIT,allowlisted,2019-11-01, -github.com/shurcooL/sanitized_anchor_name,MIT,allowlisted,2019-11-01, -github.com/smartystreets/go-aws-auth,MIT,allowlisted,2019-11-01, -github.com/spf13/cast,MIT,allowlisted,2019-11-01, -github.com/spf13/jwalterweatherman,MIT,allowlisted,2019-11-01, -github.com/spf13/viper,MIT,allowlisted,2019-11-01, -github.com/stretchr/objx,MIT,allowlisted,2019-11-01, -github.com/stretchr/testify,MIT,allowlisted,2019-11-01, -github.com/tchap/go-patricia,MIT,allowlisted,2019-11-01, -github.com/tmc/grpc-websocket-proxy,MIT,allowlisted,2019-11-01, -github.com/tsenart/vegeta,MIT,allowlisted,2019-11-01, -github.com/ugorji/go,MIT,allowlisted,2019-11-01, -github.com/urfave/cli,MIT,allowlisted,2019-11-01, -github.com/xiang90/probing,MIT,allowlisted,2019-11-01, -github.com/zakjan/cert-chain-resolver,MIT,allowlisted,2019-11-01, -go.uber.org/atomic,MIT,allowlisted,2019-11-01, -go.uber.org/multierr,MIT,allowlisted,2019-11-01, -go.uber.org/zap,MIT,allowlisted,2019-11-01, -gopkg.in/go-playground/pool.v3,MIT,allowlisted,2019-11-01, -gopkg.in/natefinch/lumberjack.v2,MIT,allowlisted,2019-11-01, -gopkg.in/robfig/cron.v2,MIT,allowlisted,2019-11-01, -Handlebars,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -jQuery,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -jquery,MIT,allowlisted,2019-11-01, -jQuery Slideto,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -jQuery Wiggle,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -jquery.scrollto,MIT,allowlisted,2019-11-01, -marked,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -mime,MIT,allowlisted,2019-11-01, -minimist,MIT,allowlisted,2019-11-01, -moment.js,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -node-static,MIT,allowlisted,2019-11-01, -normalize.css,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -Octicons,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -optimist,MIT,allowlisted,2019-11-01, -parseUri,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -Pause,MIT,not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-11-01, -ui-router for Angular,MIT,allowlisted,2019-11-01, -Underscore.js,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -vbom.ml/util,MIT,allowlisted,2019-11-01, -wordwrap,MIT,allowlisted,2019-11-01, -github.com/c4milo/gotoolkit,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/d2g/dhcp4client,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/go-sql-driver/mysql,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/hashicorp/errwrap,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/hashicorp/go-cleanhttp,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/hashicorp/go-multierror,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/hashicorp/golang-lru,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/hashicorp/hcl,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/hooklift/iso9660,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -defusedxml,Python-2.0,allowlisted,2019-11-01, -go-retryablehttp,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19,2021-07-19, -go-version,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, -paho.mqtt.golang,EPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, -raft,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, -raft-boltdb,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, -tslib,0BSD,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, -webpki-roots,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, -hashicorp/consul/api,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/go-hclog,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/go-immutable-radix,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/go-plugin,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/go-rootcerts,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/go-secure-stdlib,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/go-sockaddr,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/go-uuid,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/go-version,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/raft,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/serf,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/vault,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/yamux,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -veraison/go-cose,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, \ No newline at end of file +Package or Category,License Concluded,Project,Scope,Status,Comments,Date Published,Last updated: 2026-02-04 +eclipse-ee4j/expressly,EPL-2.0 OR GPL-2.0-only WITH Classpath-exception-2.0,Keycloak,"required upstream dependency, dynamically linked, unmodified",approved,"Default implementation of Jakarta Expression Language 6.0, transitive dependency for Hibernate Validator",2026-02-05, +libpathrs,MPL-2.0 OR LGPL-3.0-or-later,All CNCF Projects,"vendored component, build-time dependency, or install-time dependency; statically or dynamically linked",approved,Blanket exception: Projects using libpathrs statically linked MUST elect MPL-2.0 and document this. Provides secure path resolution APIs.,2026-02-05, +go-pathrs,MPL-2.0,All CNCF Projects,"vendored component, build-time dependency, or install-time dependency; statically or dynamically linked",approved,Blanket exception: Go bindings for libpathrs. Provides secure path resolution APIs.,2026-02-05, +cyphar/filepath-securejoin,MPL-2.0 AND BSD-3-Clause,All CNCF Projects,"vendored component, build-time dependency, or install-time dependency; statically or dynamically linked",approved,"Blanket exception: Provides secure path resolution APIs on Linux. Used by Kubernetes, containerd, Podman, buildah, cri-o, nerdctl.",2025-11-21, +Liquibase,FSL (Functional Source License),Keycloak,"incorporated code, dynamically linked",denied,Denied: FSL is not an open source license. GB does not approve exceptions for non-OSS licenses.,2025-11-21, +paramiko,LGPL-2.1,oscal-compass,"build-time dependency, dynamically linked",approved,"Pure-Python SSHv2 protocol implementation, used for fetching files",2025-10-17, +certifi,MPL-2.0,oscal-compass,"install-time dependency, dynamically linked",approved,Dependency for requests library,2025-10-17, +pathspec,MPL-2.0,oscal-compass,"build-time dependency, separate process",approved,"Dependency for black, mkdocs, mypy",2025-10-17, +cyphar/filepath-securejoin,BSD-3-Clause AND MPL-2.0,Kubernetes,"vendored component, build-time dependency, statically linked",approved,Provides secure path construction functions. Superseded by blanket exception in issue #1154.,2025-10-17, +hashicorp/terraform-provider-aws,MPL-2.0,Crossplane,"build-time dependency, modified fork",approved,"Fork maintained for Crossplane providers, changes contributed upstream",2024-10-23, +hashicorp/terraform-provider-azurerm,MPL-2.0,Crossplane,"build-time dependency, modified fork",approved,"Fork maintained for Crossplane providers, changes contributed upstream",2024-10-23, +hashicorp/terraform-provider-azuread,MPL-2.0,Crossplane,"build-time dependency, modified fork",approved,"Fork maintained for Crossplane providers, changes contributed upstream",2024-10-23, +apple/swift-nio-ssl,OpenSSL,Connect,"build-time dependency, unmodified",approved,Required for HTTP/2 + TLS with HTTP trailers on iOS. Also used by gRPC Swift.,2024-10-23, +Crossplane Upjet MPL dependencies,MPL-2.0,Crossplane,"build-time dependency, unmodified, linked at build time",approved,"Various hashicorp terraform dependencies for Upjet: hcl, terraform-json, terraform-plugin-framework, terraform-plugin-go, terraform-plugin-sdk, go-plugin, go-uuid, go-version, logutils, terraform-plugin-log, terraform-registry-address, terraform-svchost, yamux",2024-10-23, +Linux kernel uapi headers (btrfs),GPL-2.0-only WITH Linux-syscall-note,containerd,"kernel headers included via #include, no inline functions compiled in",approved,Used by containerd/btrfs for btrfs-related ioctl syscalls. Headers from linux/btrfs.h and linux/btrfs_tree.h.,2024-10-23, +github.com/hashicorp/go-set/v2,MPL-2.0,OpenFGA,"build-time dependency, linked at build time",approved,Unmodified code,2024-10-22, +Keycloak Java dependencies,"0BSD, CDDL-1.1, EPL-1.0, EPL-2.0, GPL-2.0-only, GPL-2.0-with-classpath-exception, LGPL-2.1, LGPL-2.1-only, MIT-0, MPL-2.0, UPL-1.0",Keycloak,"transitive dependencies from Quarkus framework, unmodified",approved,"Multiple Java dependencies including: tslib, h2, mysql-connector-j, jakarta.* APIs, parsson, graalvm SDK, hibernate-*, mariadb-java-client, nashorn-core, reactive-streams",2024-10-22, +github.com/hashicorp/memberlist,MPL-2.0,kubernetes/kops,"build-time dependency, unmodified",approved,Main component of Gossip DNS feature for peer-to-peer network K8s API address propagation,2024-07-16, +Falco kernel module,GPL-2.0-only OR MIT,Falco,"kernel module, dual-licensed",approved,Falco's kernel module is dual-licensed GPL-2.0-only OR MIT,2024-02-27, +In-kernel eBPF programs,"GPL-2.0-only, GPL-2.0-or-later",All CNCF Projects,in-kernel eBPF programs only,approved,"Blanket exception: GPL-2.0 licensed code is permitted for in-kernel eBPF programs only, as this is required by the Linux kernel BPF subsystem.",2023-08-31, +github.com/docker/go-metrics,CC-BY-SA 4.0,,"runtime dependency, statically linked",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31,2023-08-31, +github.com/hashicorp/go-memdb,MPL-2.0,Cilium,"runtime dependency, dynamically linked",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31,2023-08-31, +github.com/shoenig/go-m1cpu,MPL-2.0,,build dependency,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31,2023-08-31, +hashicorp/packer-plugin-sdk,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31,2023-08-31, +github.com/hashicorp/consul/api,MPL-2.0,Cilium,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/hashicorp/go-hclog,MPL-2.0,Cilium,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/hashicorp/go-immutable-radix,MPL-2.0,Cilium,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/hashicorp/go-plugin,MPL-2.0,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/hashicorp/go-rootcerts,MPL-2.0,Cilium,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/hashicorp/go-secure-stdlib,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/hashicorp/go-sockaddr,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/hashicorp/go-uuid,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/hashicorp/serf,MPL-2.0,Cilium,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/hashicorp/vault,MPL-2.0,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/veraison/go-cose,MPL-2.0,Notary,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/consul/api,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/go-hclog,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/go-immutable-radix,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/go-plugin,MPL-2.0,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/go-rootcerts,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/go-secure-stdlib,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/go-sockaddr,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/go-uuid,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/go-version,MPL-2.0,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/raft,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/serf,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/vault,MPL-2.0,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/yamux,MPL-2.0,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +veraison/go-cose,MPL-2.0,Notary,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/eclipse/paho.mqtt.golang,EPL-2.0,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +github.com/hashicorp/go-version,MPL-2.0,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +github.com/hashicorp/raft,MPL-2.0,Dapr,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +github.com/hashicorp/raft-boltdb,MPL-2.0,Dapr,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +github.com/Microsoft/tslib,0BSD,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +go-version,MPL-2.0,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +paho.mqtt.golang,EPL-2.0,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +raft,MPL-2.0,Dapr,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +raft-boltdb,MPL-2.0,Dapr,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +tslib,0BSD,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +webpki-roots,MPL-2.0,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +github.com/hashicorp/go-retryablehttp,MPL-2.0,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19,2021-07-19, +go-retryablehttp,MPL-2.0,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19,2021-07-19, +Chart.js,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +cloud.google.com/go,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +code.cloudfoundry.org/clock,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +colors,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +defusedxml,Python-2.0,,build-time dependency,allowlisted,allowlisted,2019-11-01, +ejs,(Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/abbot/go-http-auth,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/aclements/go-moremath,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/andygrunwald/go-gerrit,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/aokoli/goutils,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/appc/spec,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/armon/circbuf,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/armon/go-proxyproto,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/armon/go-radix,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/asaskevich/govalidator,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/aws/aws-k8s-tester,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/aws/aws-sdk-go,((MIT OR GPL-3.0) AND BSD-3-Clause AND Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/Azure/azure-sdk-for-go,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/Azure/azure-storage-blob-go,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/Azure/go-ansiterm,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/Azure/go-autorest,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/bazelbuild/bazel-gazelle,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/bazelbuild/buildtools,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/beorn7/perks,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/blang/semver,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/bluebreezecf/opentsdb-goclient,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/boltdb/bolt,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/bwmarrin/snowflake,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/chai2010/gettext-go,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/cloudflare/cfssl,(BSD-2-Clause AND BSD-3-Clause AND ISC),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/cloudfoundry-incubator/candiedyaml,(Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/clusterhq/flocker-go,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/cockroachdb/cmux,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/codedellemc/goscaleio,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/container-storage-interface/spec,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/containerd/console,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/containerd/containerd,(CC-BY-4.0 AND Apache-2.0),,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/containernetworking/cni,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/containernetworking/plugins,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/coredns/coredns,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/coreos/bbolt,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/coreos/etcd,(BSD-3-Clause AND Apache-2.0),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/coreos/go-etcd,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/coreos/go-oidc,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/coreos/go-semver,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/coreos/go-systemd,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/coreos/pkg,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/coreos/rkt,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/cpuguy83/go-md2man,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/cyphar/filepath-securejoin,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/daaku/go.zipexe,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/davecgh/go-spew,ISC,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/daviddengcn/go-colortext,(BSD-3-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/dchest/safefile,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/deckarep/golang-set,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/denverdino/aliyungo,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/dgrijalva/jwt-go,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/digitalocean/godo,(BSD-3-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/djherbis/atime,(BSD-3-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/docker/cli,(Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/docker/distribution,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/docker/docker,(Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/docker/engine-api,(BSD-3-Clause AND Apache-2.0),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/docker/go-connections,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/docker/libcompose,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/docker/libnetwork,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/docker/libtrust,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/docker/machine,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/dustin/go-humanize,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/eapache/channels,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/eapache/go-resiliency,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/eapache/go-xerial-snappy,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/eapache/queue,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/elazarl/go-bindata-assetfs,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/elazarl/goproxy,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/emicklei/go-restful,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/emicklei/go-restful-swagger12,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/emirpasic/gods,(BSD-2-Clause AND ISC),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/euank/go-kmsg-parser,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/evanphx/json-patch,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/exponent-io/jsonpath,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/fatih/camelcase,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/fatih/structs,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/flynn/go-shlex,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/fsnotify/fsnotify,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/fsouza/fake-gcs-server,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/fsouza/go-dockerclient,(BSD-2-Clause AND Apache-2.0),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/fullsailor/pkcs7,(BSD-3-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/GeertJohan/go.rice,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/ghodss/yaml,(BSD-3-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/globalsign/mgo,(BSD-2-Clause AND BSD-3-Clause),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/go-ini/ini,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/go-openapi/analysis,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/go-openapi/errors,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/go-openapi/jsonpointer,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/go-openapi/jsonreference,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/go-openapi/loads,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/go-openapi/runtime,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/go-openapi/spec,(CC-BY-4.0 AND Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/go-openapi/strfmt,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/go-openapi/swag,(Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/go-openapi/validate,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/go-ozzo/ozzo-validation,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/go-yaml/yaml,(Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/gobuffalo/envy,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/godbus/dbus,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/gogo/protobuf,(BSD-2-Clause AND BSD-3-Clause),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/golang/dep,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/golang/glog,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/golang/groupcache,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/golang/lint,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/golang/mock,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/golang/protobuf,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/golang/snappy,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/google/btree,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/google/cadvisor,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/google/certificate-transparency-go,(BSD-3-Clause AND Apache-2.0),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/google/go-containerregistry,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/google/go-querystring,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/google/go-tpm,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/google/gofuzz,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/google/uuid,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/googleapis/gax-go,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/googleapis/gnostic,(BSD-3-Clause AND Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/GoogleCloudPlatform/gke-managed-certs,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/gophercloud/gophercloud,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/gorilla/context,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/gorilla/mux,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/gorilla/securecookie,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/gorilla/sessions,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/gorilla/websocket,(BSD-2-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/gregjones/httpcache,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/grpc-ecosystem/go-grpc-middleware,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/grpc-ecosystem/go-grpc-prometheus,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/grpc-ecosystem/grpc-gateway,(BSD-3-Clause AND Apache-2.0),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/hawkular/hawkular-client-go,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/heketi/heketi REST API,(Apache-2.0 OR LGPL-3.0-or-later),,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/hpcloud/tail,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/huandu/xstrings,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/imdario/mergo,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/inconshreveable/mousetrap,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/influxdata/influxdb,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/jimmidyson/go-download,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/jinzhu/gorm,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/jinzhu/inflection,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/jmespath/go-jmespath,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/jmhodges/clock,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/jmoiron/sqlx,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/joho/godotenv,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/jonboulle/clockwork,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/jpillora/backoff,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/json-iterator/go,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/kardianos/osext,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/karrick/godirwalk,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/kevinburke/ssh_config,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/kisielk/sqlstruct,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/knative/build,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/kr/fs,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/kr/pretty,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/kr/pty,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/kr/text,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/kubernetes-incubator/apiserver-builder,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/kubernetes-incubator/reference-docs,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/kubernetes-sigs/application,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/kubernetes/repo-infra,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/kylelemons/godebug,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/lib/pq,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/libopenstorage/openstorage,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/libvirt/libvirt-go,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/libvirt/libvirt-go-xml,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/lpabon/godbc,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/lxn/win,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/magiconair/properties,(BSD-2-Clause AND BSD-3-Clause),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/mailru/easyjson,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/MakeNowJust/heredoc,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/markbates/inflect,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/marpaia/graphite-golang,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/Masterminds/semver,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/Masterminds/sprig,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/Masterminds/vcs,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/mattn/go-runewidth,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/mattn/go-shellwords,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/mattn/go-zglob,(BSD-3-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/matttproud/golang_protobuf_extensions,(BSD-3-Clause AND Apache-2.0),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/mesos/mesos-go,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/mholt/caddy,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/Microsoft/go-winio,(BSD-3-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/Microsoft/hcsshim,(BSD-3-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/miekg/coredns,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/miekg/dns,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/mindprince/gonvml,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/mistifyio/go-zfs,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/mitchellh/go-homedir,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/mitchellh/go-ps,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/mitchellh/go-wordwrap,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/mitchellh/hashstructure,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/mitchellh/mapstructure,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/moby/hyperkit,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/modern-go/concurrent,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/modern-go/reflect2,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/mohae/deepcopy,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/moul/http2curl,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/mrunalp/fileutils,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/mvdan/xurls,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/mxk/go-flowrate,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/ncabatoff/process-exporter,(Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/nightlyone/lockfile,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/novln/docker-parser,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/NYTimes/gziphandler,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/olekukonko/tablewriter,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/onsi/ginkgo,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/onsi/gomega,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/opencontainers/image-spec,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/opencontainers/runtime-spec,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/opencontainers/selinux,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/openshift/origin,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/opentracing/opentracing-go,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/parnurzeal/gorequest,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/patrickmn/go-cache,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/paultag/sniff,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/pborman/uuid,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/pelletier/go-buffruneio,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/pelletier/go-toml,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/petar/GoLLRB,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/peterbourgon/diskv,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/pierrec/lz4,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/pierrec/xxHash,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/pkg/browser,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/pkg/errors,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/pkg/profile,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/pkg/sftp,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/pmezard/go-difflib,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/pquerna/cachecontrol,(BSD-3-Clause AND Apache-2.0),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/pquerna/ffjson,(BSD-3-Clause AND Apache-2.0 AND ISC),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/prometheus/client_golang,(BSD-3-Clause AND Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/prometheus/client_model,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/prometheus/common,(BSD-3-Clause AND Apache-2.0),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/prometheus/procfs,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/PuerkitoBio/purell,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/PuerkitoBio/urlesc,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/r2d4/external-storage,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/rackspace/gophercloud,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/rancher/go-rancher,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/rcrowley/go-metrics,BSD-2-Clause-FreeBSD,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/renstrom/dedent,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/Rican7/retry,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/riemann/riemann-go-client,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/robfig/cron,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/russross/blackfriday,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/samalba/dockerclient,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/satori/go.uuid,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/scalingdata/gcfg,(BSD-2-Clause AND BSD-3-Clause),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/sdboyer/constext,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/seccomp/libseccomp-golang,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/sergi/go-diff,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/Shopify/sarama,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/shurcooL/githubv4,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/shurcooL/go,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/shurcooL/graphql,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/shurcooL/sanitized_anchor_name,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/sirupsen/logrus,(BSD-2-Clause AND BSD-3-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/skynetservices/skydns,(Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/smartystreets/go-aws-auth,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/soheilhy/cmux,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/spf13/afero,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/spf13/cast,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/spf13/cobra,(Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/spf13/jwalterweatherman,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/spf13/pflag,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/spf13/viper,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/storageos/go-api,(BSD-2-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/streadway/quantile,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/stretchr/objx,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/stretchr/testify,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/syndtr/gocapability,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/tchap/go-patricia,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/thockin/glogr,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/thockin/logr,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/tmc/grpc-websocket-proxy,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/tsenart/vegeta,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/ugorji/go,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/Unknwon/goconfig,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/urfave/cli,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/vishvananda/netlink,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/vishvananda/netns,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/vmware/govmomi,(BSD-3-Clause AND Apache-2.0),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/vmware/photon-controller-go-sdk,(BSD-3-Clause AND Apache-2.0),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/weaveworks/mesh,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/xanzy/go-cloudstack,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/xeipuuv/gojsonpointer,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/xeipuuv/gojsonreference,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/xeipuuv/gojsonschema,(Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/xiang90/probing,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/zakjan/cert-chain-resolver,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/ziutek/syslog,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +go.opencensus.io,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +go.uber.org/atomic,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +go.uber.org/multierr,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +go.uber.org/zap,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +go4.org/errorutil,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +golang.org/x/build,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),,build-time dependency,allowlisted,allowlisted,2019-11-01, +golang.org/x/exp,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),,build-time dependency,allowlisted,allowlisted,2019-11-01, +golang.org/x/lint,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +golang.org/x/oauth2,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +golang.org/x/sync,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),,build-time dependency,allowlisted,allowlisted,2019-11-01, +golang.org/x/sys,(LicenseRef-Google-Patents-Notice-Golang AND BSD-2-Clause AND BSD-3-Clause),,build-time dependency,allowlisted,allowlisted,2019-11-01, +golang.org/x/text,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),,build-time dependency,allowlisted,allowlisted,2019-11-01, +golang.org/x/time,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),,build-time dependency,allowlisted,allowlisted,2019-11-01, +golang.org/x/tools,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause AND Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +golang/archive/tar,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +gonum.org/v1/gonum,((BSD-3-Clause OR CC0-1.0) AND BSD-3-Clause),,build-time dependency,allowlisted,allowlisted,2019-11-01, +google.golang.org/cloud,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +google.golang.org/genproto,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +gopkg.in/check.v1,(BSD-2-Clause AND BSD-3-Clause),,build-time dependency,allowlisted,allowlisted,2019-11-01, +gopkg.in/cheggaaa/pb.v1,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +gopkg.in/fsnotify,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +gopkg.in/gcfg.v1,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +gopkg.in/go-playground/pool.v3,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +gopkg.in/igm/sockjs-go.v2,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +gopkg.in/inf.v0,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +gopkg.in/natefinch/lumberjack.v2,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +gopkg.in/olivere/elastic.v3,(BSD-3-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +gopkg.in/olivere/elastic.v5,(BSD-3-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +gopkg.in/robfig/cron.v2,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +gopkg.in/square/go-jose.v2,(BSD-3-Clause AND Apache-2.0),,build-time dependency,allowlisted,allowlisted,2019-11-01, +gopkg.in/src-d,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +gopkg.in/tomb.v1,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +jquery.scrollto,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +marked,(BSD-3-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +mime,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +minimist,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +node-static,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +optimist,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +ui-router for Angular,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +vbom.ml/util,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +wordwrap,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +VirtualBox Linux Guest Drivers Makefile,GPL-2.0-only,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-05-20,2019-05-20, +Angular,MIT,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +Asciidoctor,MIT,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +Azure acr-docker-credential-helper,MIT,,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +Backbone,MIT,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +bitbucket.org/bertimus9/systemstat,MIT,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +bitbucket.org/ww/goautoneg,BSD-3-Clause,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +bootstrap,(CC-BY-3.0 AND MIT),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +dialog-polyfill.css,BSD-3-Clause,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +font-awesome,(CC-BY-3.0 AND MIT AND OFL-1.1),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +Gingko,MIT,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +github.com/Azure/azure-pipeline-go,MIT,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/bungle/lua-resty-template,BSD-3-Clause,,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +github.com/c4milo/gotoolkit,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/client9/misspell,(Unlicense AND BSD-3-Clause AND MIT),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/d2g/dhcp4,BSD-3-Clause,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/d2g/dhcp4client,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/dgryski/go-onlinestats,(MIT AND LicenseRef-Public-domain-statement),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/docker/go-units,(CC-BY-SA-4.0 AND CC-BY-4.0 AND Apache-2.0),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/docker/spdystream,(CC-BY-SA-4.0 AND CC-BY-4.0 AND BSD-3-Clause AND Apache-2.0),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/go-sql-driver/mysql,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/gonum/graph,BSD-3-Clause,,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +github.com/google/go-github,(BSD-3-Clause AND CC-BY-3.0),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/grpc-ecosystem/grpc-opentracing,(BSD-3-Clause AND LicenseRef-Google-Patents-Notice-GRPC),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/hashicorp/errwrap,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/hashicorp/go-cleanhttp,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/hashicorp/go-multierror,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/hashicorp/golang-lru,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/hashicorp/hcl,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/hooklift/iso9660,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/howeyc/gopass,(ISC AND CDDL-1.0),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/jbenet/go-context,MIT,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/JeffAshton/win_pdh,BSD-3-Clause,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/jmank88/nuts,MIT,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/johanneswuerbach/nfsexports,MIT,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/joshdk/go-junit,MIT,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/jteeuwen/go-bindata,CC0-1.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/konsorten/go-windows-terminal-sequences,MIT,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/marstr/guid,MIT,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/mattn/go-sqlite3,(MIT AND LicenseRef-Public-domain-statement),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/multiarch/qemu-user-static,MIT,,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +github.com/Nvveen/Gotty,BSD-2-Clause-FreeBSD,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/opencontainers/go-digest,(CC-BY-SA-4.0 AND CC-BY-4.0 AND Apache-2.0),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/opencontainers/runc,(LicenseRef-CC-unspecified AND Apache-2.0),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/quobyte/api,BSD-3-Clause,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/rubiojr/go-vhd,MIT,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/sigma/go-inotify,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/spotinst/spotinst-sdk-go,(BSD-3-Clause AND Apache-2.0 AND MIT),,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/src-d/gcfg,BSD-3-Clause,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/tent/http-link-go,BSD-3-Clause,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/xanzy/ssh-agent,(Apache-2.0 AND MIT),,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/zchee/go-vmnet,(BSD-2-Clause AND BSD-3-Clause),,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +go-srcimporter,BSD-3-Clause,,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +go9p,BSD-3-Clause,,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +godep,BSD-3-Clause,,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +golang.org/x/crypto,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause AND MIT AND LicenseRef-Public-domain-statement),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +golang.org/x/net,(LicenseRef-Google-Patents-Notice-Golang AND BSD-2-Clause AND BSD-3-Clause AND CC-BY-3.0 AND (BSD-3-Clause OR LicenseRef-W3C-Test-Suite-License-1)),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +golang/expansion,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +golang/go/types,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +golang/internal/srcimporter,BSD-3-Clause,,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +golang/json,BSD-3-Clause,,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +golang/netutil,BSD-3-Clause,,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +golang/reflect,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +golang/template,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +Google Protocol Buffers,BSD-3-Clause,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +google.golang.org/api,(BSD-3-Clause AND Apache-2.0 AND MIT),,,approved,not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-03-11, +google.golang.org/appengine,(BSD-3-Clause AND Apache-2.0),,,approved,not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-03-11, +google.golang.org/grpc,(BSD-3-Clause AND Apache-2.0 AND LicenseRef-Google-Patents-Notice-GRPC),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +gopkg.in/warnings.v0,BSD-2-Clause,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +Handlebars,MIT,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +Highlight,BSD-3-Clause,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +highlight.js,(BSD-3-Clause AND MIT AND CC0-1.0 AND LicenseRef-Public-domain-statement),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +htpasswd,BSD-3-Clause,,,approved,not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-03-11, +jQuery,MIT,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +jQuery BBQ,(MIT OR GPL-2.0+),,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +jQuery hashchange event,(GPL-2.0+ OR MIT),,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +jQuery Slideto,MIT,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +jQuery Wiggle,MIT,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +moment.js,MIT,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +normalize.css,MIT,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +Octicons,MIT,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +parseUri,MIT,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +Pause,MIT,,,approved,not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-03-11, +Pure CSS,BSD-3-Clause,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +shred,ISC,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +sigs.k8s.io/yaml,(BSD-3-Clause AND MIT),,,approved,fork of github.com/ghodss/yaml; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +speter.net/go/exp,(BSD-2-Clause AND BSD-3-Clause),,,approved,not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-03-11, +sprintf() for JavaScript,BSD-3-Clause,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +Underscore.js,MIT,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, diff --git a/license-exceptions/README.md b/license-exceptions/README.md index 00a8d120..b7685f5e 100644 --- a/license-exceptions/README.md +++ b/license-exceptions/README.md @@ -1,27 +1,112 @@ -## License exceptions +# CNCF License Exceptions -The manifest files in this directory contain a list of license exceptions that have been approved by the CNCF Governing Board. The exceptions are provided in JSON and SPDX tag-value format for convenience. +This directory contains license exceptions approved by the CNCF Governing Board. -These manifests will be updated from time to time as new exceptions are approved. +## Browse Exceptions -Please see the [CNCF charter] and the [Allowlist Policy] for more background information. +**[View the searchable exceptions database](https://exceptions.cncf.io/)** -## Allowlisted components +The web interface allows you to: +- Search by package name +- Filter by license type, approval status, project, or year +- Sort by date, name, or project +- Download data in JSON, CSV, or SPDX formats -For convenience, the manifests also contain a list of certain other dependencies for which individual license exceptions were not required. This is either because (a) they were automatically approved as license exceptions under CNCF's [Allowlist Policy]; or (b) they are under Apache-2.0 and therefore aligned with the IP policy in the [CNCF charter]. +## Data Files -Dependencies that are not currently listed in the manifests, but which satisfy (a) or (b) in the preceding paragraph, are automatically approved and do not need separate license exceptions. +| File | Description | +|------|-------------| +| `exceptions.json` | **Source of truth** - All exception data in structured JSON | +| `CNCF-licensing-exceptions.csv` | Generated CSV for spreadsheet tools | +| `cncf-exceptions-current.spdx` | Generated SPDX tag-value format | +| `schema/exception.schema.json` | JSON Schema for validation | -[Allowlist Policy]: https://github.com/cncf/foundation/blob/main/policies-guidance/allowed-third-party-license-policy.md#cncf-allowlist-license-policy -[CNCF charter]: https://github.com/cncf/foundation/blob/main/charter.md +> **Note:** The CSV and SPDX files are auto-generated from `exceptions.json`. Edit only the JSON file. -## GPL exceptions for in-kernel eBPF programs +## Blanket Exceptions -By email vote concluded on August 31 2023, the Governing Board approved a blanket exception for in-kernel eBPF programs licensed under either of the following licenses, either on its own or dual licensed in combination with any license already on the CNCF Licensing Allowlist Approved Licenses list (e.g., MIT License): +Blanket exceptions apply to **all CNCF projects** and are tracked in the main exceptions database with `project: "All CNCF Projects"`. -* GPL 2.0 -* GPL 2.0 or later +### GPL Exceptions for In-Kernel eBPF Programs -This exception is not documented in the SPDX/JSON files because it applies only to in-kernel eBPF programs. Usage of GPL 2.0 (or later) for other code is not approved. There is more background explaining the rationale behind this exception in [this document](https://docs.google.com/document/d/10CY8V1w8aQ6CrJ_US_Gnz8cx2SoOtOBqpUKX4cWl_4w/edit#heading=h.oxrtx3xdj6dn). +By email vote concluded on August 31, 2023, the Governing Board approved a blanket exception for in-kernel eBPF programs licensed under: + +- GPL-2.0-only +- GPL-2.0-or-later + +This applies only to in-kernel eBPF programs, either standalone or dual-licensed with any [allowlist license](../policies-guidance/allowed-third-party-license-policy.md). + +[Background documentation](https://docs.google.com/document/d/10CY8V1w8aQ6CrJ_US_Gnz8cx2SoOtOBqpUKX4cWl_4w/edit) + +### Secure Path Resolution Libraries (November 2025) + +By [GB decision in issue #1154](https://github.com/cncf/foundation/issues/1154), the following are approved for all CNCF projects: + +- **libpathrs** (MPL-2.0 OR LGPL-3.0-or-later) - Projects using libpathrs statically linked MUST elect MPL-2.0 +- **go-pathrs** (MPL-2.0) - Go bindings for libpathrs +- **cyphar/filepath-securejoin** (BSD-3-Clause AND MPL-2.0) - Secure path construction + +## Request an Exception + +If your CNCF project needs to use a component with a non-allowlisted license, [submit an exception request](https://github.com/cncf/foundation/issues/new?template=license-exception-request.yaml). + +See also: +- [CNCF Allowlist License Policy](../policies-guidance/allowed-third-party-license-policy.md) +- [CNCF Charter (IP Policy)](../charter.md#11-ip-policy) + +## For Maintainers + +### Updating Exception Data + +1. Edit `exceptions.json` directly +2. Run `node scripts/generate-all.js` to update derived formats +3. Submit a PR + +### Schema + +All exception entries follow this structure: + +```json +{ + "id": "exc-2023-08-31-001", + "package": "github.com/example/package", + "packageUrl": "https://github.com/example/package", + "license": "MPL-2.0", + "project": "ProjectName", + "scope": "build-time dependency, unmodified", + "approvedDate": "2023-08-31", + "results": "https://github.com/cncf/foundation/issues/123", + "status": "approved", + "comment": "Optional notes" +} +``` + +| Field | Required | Description | +|-------|----------|-------------| +| `id` | Yes | Unique identifier (format: `exc-YYYY-MM-DD-NNN`) | +| `package` | Yes | Package name or category | +| `license` | Yes | SPDX license identifier(s) | +| `status` | Yes | Approval status (see below) | +| `approvedDate` | Yes | Date of decision (YYYY-MM-DD) | +| `project` | No | Requesting CNCF project, or "All CNCF Projects" for blanket exceptions | +| `scope` | No | How the dependency is used (e.g., "build-time dependency, unmodified") | +| `results` | No | URL to GitHub issue or documentation | +| `comment` | No | Additional context or notes | + +### Status Values + +| Status | Description | +|--------|-------------| +| `approved` | Approved by Governing Board vote | +| `denied` | Denied by Governing Board (e.g., non-OSS license) | +| `allowlisted` | Meets allowlist criteria automatically | +| `apache-2.0` | Apache-2.0 licensed (no exception needed) | + +### Blanket Exceptions + +Blanket exceptions apply to all CNCF projects and have `project: "All CNCF Projects"`. Current blanket exceptions: +- **GPL for in-kernel eBPF programs** - GPL-2.0 licensed code for in-kernel eBPF programs +- **libpathrs / go-pathrs** - MPL-2.0 licensed secure path resolution libraries +- **cyphar/filepath-securejoin** - MPL-2.0 licensed secure path construction diff --git a/license-exceptions/cncf-exceptions-current.spdx b/license-exceptions/cncf-exceptions-current.spdx new file mode 100644 index 00000000..9faa3882 --- /dev/null +++ b/license-exceptions/cncf-exceptions-current.spdx @@ -0,0 +1,5364 @@ +SPDXVersion: SPDX-2.1 +DataLicense: CC0-1.0 +SPDXID: SPDXRef-DOCUMENT +DocumentName: cncf-exceptions-2026-02-04 +DocumentNamespace: https://github.com/cncf/foundation/license-exceptions-2026-02-04 +Creator: Organization: CNCF +Created: 2026-02-04T12:00:00Z + +##### Package: eclipse-ee4j/expressly + +PackageName: eclipse-ee4j/expressly +SPDXID: SPDXRef-Package1 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: EPL-2.0 OR GPL-2.0-only WITH Classpath-exception-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Keycloak. Scope: required upstream dependency, dynamically linked, unmodified. Status: approved. Default implementation of Jakarta Expression Language 6.0, transitive dependency for Hibernate Validator + +##### Package: libpathrs + +PackageName: libpathrs +SPDXID: SPDXRef-Package2 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 OR LGPL-3.0-or-later +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: All CNCF Projects. Scope: vendored component, build-time dependency, or install-time dependency; statically or dynamically linked. Status: approved. Blanket exception: Projects using libpathrs statically linked MUST elect MPL-2.0 and document this. Provides secure path resolution APIs. + +##### Package: go-pathrs + +PackageName: go-pathrs +SPDXID: SPDXRef-Package3 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: All CNCF Projects. Scope: vendored component, build-time dependency, or install-time dependency; statically or dynamically linked. Status: approved. Blanket exception: Go bindings for libpathrs. Provides secure path resolution APIs. + +##### Package: cyphar/filepath-securejoin + +PackageName: cyphar/filepath-securejoin +SPDXID: SPDXRef-Package4 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 AND BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: All CNCF Projects. Scope: vendored component, build-time dependency, or install-time dependency; statically or dynamically linked. Status: approved. Blanket exception: Provides secure path resolution APIs on Linux. Used by Kubernetes, containerd, Podman, buildah, cri-o, nerdctl. + +##### Package: Liquibase + +PackageName: Liquibase +SPDXID: SPDXRef-Package5 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: FSL (Functional Source License) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Keycloak. Scope: incorporated code, dynamically linked. Status: denied. Denied: FSL is not an open source license. GB does not approve exceptions for non-OSS licenses. + +##### Package: paramiko + +PackageName: paramiko +SPDXID: SPDXRef-Package6 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: LGPL-2.1 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: oscal-compass. Scope: build-time dependency, dynamically linked. Status: approved. Pure-Python SSHv2 protocol implementation, used for fetching files + +##### Package: certifi + +PackageName: certifi +SPDXID: SPDXRef-Package7 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: oscal-compass. Scope: install-time dependency, dynamically linked. Status: approved. Dependency for requests library + +##### Package: pathspec + +PackageName: pathspec +SPDXID: SPDXRef-Package8 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: oscal-compass. Scope: build-time dependency, separate process. Status: approved. Dependency for black, mkdocs, mypy + +##### Package: cyphar/filepath-securejoin + +PackageName: cyphar/filepath-securejoin +SPDXID: SPDXRef-Package9 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause AND MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Kubernetes. Scope: vendored component, build-time dependency, statically linked. Status: approved. Provides secure path construction functions. Superseded by blanket exception in issue #1154. + +##### Package: hashicorp/terraform-provider-aws + +PackageName: hashicorp/terraform-provider-aws +SPDXID: SPDXRef-Package10 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Crossplane. Scope: build-time dependency, modified fork. Status: approved. Fork maintained for Crossplane providers, changes contributed upstream + +##### Package: hashicorp/terraform-provider-azurerm + +PackageName: hashicorp/terraform-provider-azurerm +SPDXID: SPDXRef-Package11 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Crossplane. Scope: build-time dependency, modified fork. Status: approved. Fork maintained for Crossplane providers, changes contributed upstream + +##### Package: hashicorp/terraform-provider-azuread + +PackageName: hashicorp/terraform-provider-azuread +SPDXID: SPDXRef-Package12 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Crossplane. Scope: build-time dependency, modified fork. Status: approved. Fork maintained for Crossplane providers, changes contributed upstream + +##### Package: apple/swift-nio-ssl + +PackageName: apple/swift-nio-ssl +SPDXID: SPDXRef-Package13 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: OpenSSL +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Connect. Scope: build-time dependency, unmodified. Status: approved. Required for HTTP/2 + TLS with HTTP trailers on iOS. Also used by gRPC Swift. + +##### Package: Crossplane Upjet MPL dependencies + +PackageName: Crossplane Upjet MPL dependencies +SPDXID: SPDXRef-Package14 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Crossplane. Scope: build-time dependency, unmodified, linked at build time. Status: approved. Various hashicorp terraform dependencies for Upjet: hcl, terraform-json, terraform-plugin-framework, terraform-plugin-go, terraform-plugin-sdk, go-plugin, go-uuid, go-version, logutils, terraform-plugin-log, terraform-registry-address, terraform-svchost, yamux + +##### Package: Linux kernel uapi headers (btrfs) + +PackageName: Linux kernel uapi headers (btrfs) +SPDXID: SPDXRef-Package15 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: GPL-2.0-only WITH Linux-syscall-note +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: containerd. Scope: kernel headers included via #include, no inline functions compiled in. Status: approved. Used by containerd/btrfs for btrfs-related ioctl syscalls. Headers from linux/btrfs.h and linux/btrfs_tree.h. + +##### Package: hashicorp/go-set/v2 + +PackageName: hashicorp/go-set/v2 +SPDXID: SPDXRef-Package16 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: OpenFGA. Scope: build-time dependency, linked at build time. Status: approved. Unmodified code + +##### Package: Keycloak Java dependencies + +PackageName: Keycloak Java dependencies +SPDXID: SPDXRef-Package17 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: 0BSD, CDDL-1.1, EPL-1.0, EPL-2.0, GPL-2.0-only, GPL-2.0-with-classpath-exception, LGPL-2.1, LGPL-2.1-only, MIT-0, MPL-2.0, UPL-1.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Keycloak. Scope: transitive dependencies from Quarkus framework, unmodified. Status: approved. Multiple Java dependencies including: tslib, h2, mysql-connector-j, jakarta.* APIs, parsson, graalvm SDK, hibernate-*, mariadb-java-client, nashorn-core, reactive-streams + +##### Package: hashicorp/memberlist + +PackageName: hashicorp/memberlist +SPDXID: SPDXRef-Package18 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: kubernetes/kops. Scope: build-time dependency, unmodified. Status: approved. Main component of Gossip DNS feature for peer-to-peer network K8s API address propagation + +##### Package: Falco kernel module + +PackageName: Falco kernel module +SPDXID: SPDXRef-Package19 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: GPL-2.0-only OR MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Falco. Scope: kernel module, dual-licensed. Status: approved. Falco's kernel module is dual-licensed GPL-2.0-only OR MIT + +##### Package: In-kernel eBPF programs + +PackageName: In-kernel eBPF programs +SPDXID: SPDXRef-Package20 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: GPL-2.0-only, GPL-2.0-or-later +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: All CNCF Projects. Scope: in-kernel eBPF programs only. Status: approved. Blanket exception: GPL-2.0 licensed code is permitted for in-kernel eBPF programs only, as this is required by the Linux kernel BPF subsystem. + +##### Package: docker/go-metrics + +PackageName: docker/go-metrics +SPDXID: SPDXRef-Package21 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: CC-BY-SA 4.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: runtime dependency, statically linked. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31 + +##### Package: hashicorp/go-memdb + +PackageName: hashicorp/go-memdb +SPDXID: SPDXRef-Package22 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Cilium. Scope: runtime dependency, dynamically linked. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31 + +##### Package: shoenig/go-m1cpu + +PackageName: shoenig/go-m1cpu +SPDXID: SPDXRef-Package23 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build dependency. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31 + +##### Package: hashicorp/packer-plugin-sdk + +PackageName: hashicorp/packer-plugin-sdk +SPDXID: SPDXRef-Package24 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31 + +##### Package: hashicorp/consul/api + +PackageName: hashicorp/consul/api +SPDXID: SPDXRef-Package25 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Cilium. Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-hclog + +PackageName: hashicorp/go-hclog +SPDXID: SPDXRef-Package26 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Cilium. Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-immutable-radix + +PackageName: hashicorp/go-immutable-radix +SPDXID: SPDXRef-Package27 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Cilium. Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-plugin + +PackageName: hashicorp/go-plugin +SPDXID: SPDXRef-Package28 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-rootcerts + +PackageName: hashicorp/go-rootcerts +SPDXID: SPDXRef-Package29 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Cilium. Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-secure-stdlib + +PackageName: hashicorp/go-secure-stdlib +SPDXID: SPDXRef-Package30 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-sockaddr + +PackageName: hashicorp/go-sockaddr +SPDXID: SPDXRef-Package31 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-uuid + +PackageName: hashicorp/go-uuid +SPDXID: SPDXRef-Package32 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/serf + +PackageName: hashicorp/serf +SPDXID: SPDXRef-Package33 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Cilium. Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/vault + +PackageName: hashicorp/vault +SPDXID: SPDXRef-Package34 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: veraison/go-cose + +PackageName: veraison/go-cose +SPDXID: SPDXRef-Package35 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Notary. Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/consul/api + +PackageName: hashicorp/consul/api +SPDXID: SPDXRef-Package36 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-hclog + +PackageName: hashicorp/go-hclog +SPDXID: SPDXRef-Package37 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-immutable-radix + +PackageName: hashicorp/go-immutable-radix +SPDXID: SPDXRef-Package38 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-plugin + +PackageName: hashicorp/go-plugin +SPDXID: SPDXRef-Package39 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-rootcerts + +PackageName: hashicorp/go-rootcerts +SPDXID: SPDXRef-Package40 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-secure-stdlib + +PackageName: hashicorp/go-secure-stdlib +SPDXID: SPDXRef-Package41 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-sockaddr + +PackageName: hashicorp/go-sockaddr +SPDXID: SPDXRef-Package42 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-uuid + +PackageName: hashicorp/go-uuid +SPDXID: SPDXRef-Package43 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-version + +PackageName: hashicorp/go-version +SPDXID: SPDXRef-Package44 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/raft + +PackageName: hashicorp/raft +SPDXID: SPDXRef-Package45 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/serf + +PackageName: hashicorp/serf +SPDXID: SPDXRef-Package46 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/vault + +PackageName: hashicorp/vault +SPDXID: SPDXRef-Package47 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/yamux + +PackageName: hashicorp/yamux +SPDXID: SPDXRef-Package48 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: veraison/go-cose + +PackageName: veraison/go-cose +SPDXID: SPDXRef-Package49 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Notary. Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: eclipse/paho.mqtt.golang + +PackageName: eclipse/paho.mqtt.golang +SPDXID: SPDXRef-Package50 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: EPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 + +##### Package: hashicorp/go-version + +PackageName: hashicorp/go-version +SPDXID: SPDXRef-Package51 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 + +##### Package: hashicorp/raft + +PackageName: hashicorp/raft +SPDXID: SPDXRef-Package52 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Dapr. Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 + +##### Package: hashicorp/raft-boltdb + +PackageName: hashicorp/raft-boltdb +SPDXID: SPDXRef-Package53 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Dapr. Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 + +##### Package: Microsoft/tslib + +PackageName: Microsoft/tslib +SPDXID: SPDXRef-Package54 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: 0BSD +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 + +##### Package: go-version + +PackageName: go-version +SPDXID: SPDXRef-Package55 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 + +##### Package: paho.mqtt.golang + +PackageName: paho.mqtt.golang +SPDXID: SPDXRef-Package56 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: EPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 + +##### Package: raft + +PackageName: raft +SPDXID: SPDXRef-Package57 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Dapr. Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 + +##### Package: raft-boltdb + +PackageName: raft-boltdb +SPDXID: SPDXRef-Package58 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Dapr. Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 + +##### Package: tslib + +PackageName: tslib +SPDXID: SPDXRef-Package59 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: 0BSD +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 + +##### Package: webpki-roots + +PackageName: webpki-roots +SPDXID: SPDXRef-Package60 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 + +##### Package: hashicorp/go-retryablehttp + +PackageName: hashicorp/go-retryablehttp +SPDXID: SPDXRef-Package61 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19 + +##### Package: go-retryablehttp + +PackageName: go-retryablehttp +SPDXID: SPDXRef-Package62 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19 + +##### Package: Chart.js + +PackageName: Chart.js +SPDXID: SPDXRef-Package63 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: cloud.google.com/go + +PackageName: cloud.google.com/go +SPDXID: SPDXRef-Package64 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: code.cloudfoundry.org/clock + +PackageName: code.cloudfoundry.org/clock +SPDXID: SPDXRef-Package65 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: colors + +PackageName: colors +SPDXID: SPDXRef-Package66 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: defusedxml + +PackageName: defusedxml +SPDXID: SPDXRef-Package67 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Python-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: ejs + +PackageName: ejs +SPDXID: SPDXRef-Package68 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: abbot/go-http-auth + +PackageName: abbot/go-http-auth +SPDXID: SPDXRef-Package69 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: aclements/go-moremath + +PackageName: aclements/go-moremath +SPDXID: SPDXRef-Package70 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: andygrunwald/go-gerrit + +PackageName: andygrunwald/go-gerrit +SPDXID: SPDXRef-Package71 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: aokoli/goutils + +PackageName: aokoli/goutils +SPDXID: SPDXRef-Package72 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: appc/spec + +PackageName: appc/spec +SPDXID: SPDXRef-Package73 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: armon/circbuf + +PackageName: armon/circbuf +SPDXID: SPDXRef-Package74 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: armon/go-proxyproto + +PackageName: armon/go-proxyproto +SPDXID: SPDXRef-Package75 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: armon/go-radix + +PackageName: armon/go-radix +SPDXID: SPDXRef-Package76 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: asaskevich/govalidator + +PackageName: asaskevich/govalidator +SPDXID: SPDXRef-Package77 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: aws/aws-k8s-tester + +PackageName: aws/aws-k8s-tester +SPDXID: SPDXRef-Package78 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: aws/aws-sdk-go + +PackageName: aws/aws-sdk-go +SPDXID: SPDXRef-Package79 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: ((MIT OR GPL-3.0) AND BSD-3-Clause AND Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: Azure/azure-sdk-for-go + +PackageName: Azure/azure-sdk-for-go +SPDXID: SPDXRef-Package80 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: Azure/azure-storage-blob-go + +PackageName: Azure/azure-storage-blob-go +SPDXID: SPDXRef-Package81 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: Azure/go-ansiterm + +PackageName: Azure/go-ansiterm +SPDXID: SPDXRef-Package82 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: Azure/go-autorest + +PackageName: Azure/go-autorest +SPDXID: SPDXRef-Package83 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: bazelbuild/bazel-gazelle + +PackageName: bazelbuild/bazel-gazelle +SPDXID: SPDXRef-Package84 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: bazelbuild/buildtools + +PackageName: bazelbuild/buildtools +SPDXID: SPDXRef-Package85 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: beorn7/perks + +PackageName: beorn7/perks +SPDXID: SPDXRef-Package86 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: blang/semver + +PackageName: blang/semver +SPDXID: SPDXRef-Package87 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: bluebreezecf/opentsdb-goclient + +PackageName: bluebreezecf/opentsdb-goclient +SPDXID: SPDXRef-Package88 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: boltdb/bolt + +PackageName: boltdb/bolt +SPDXID: SPDXRef-Package89 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: bwmarrin/snowflake + +PackageName: bwmarrin/snowflake +SPDXID: SPDXRef-Package90 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: chai2010/gettext-go + +PackageName: chai2010/gettext-go +SPDXID: SPDXRef-Package91 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: cloudflare/cfssl + +PackageName: cloudflare/cfssl +SPDXID: SPDXRef-Package92 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-2-Clause AND BSD-3-Clause AND ISC) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: cloudfoundry-incubator/candiedyaml + +PackageName: cloudfoundry-incubator/candiedyaml +SPDXID: SPDXRef-Package93 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: clusterhq/flocker-go + +PackageName: clusterhq/flocker-go +SPDXID: SPDXRef-Package94 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: cockroachdb/cmux + +PackageName: cockroachdb/cmux +SPDXID: SPDXRef-Package95 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: codedellemc/goscaleio + +PackageName: codedellemc/goscaleio +SPDXID: SPDXRef-Package96 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: container-storage-interface/spec + +PackageName: container-storage-interface/spec +SPDXID: SPDXRef-Package97 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: containerd/console + +PackageName: containerd/console +SPDXID: SPDXRef-Package98 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: containerd/containerd + +PackageName: containerd/containerd +SPDXID: SPDXRef-Package99 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (CC-BY-4.0 AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: containernetworking/cni + +PackageName: containernetworking/cni +SPDXID: SPDXRef-Package100 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: containernetworking/plugins + +PackageName: containernetworking/plugins +SPDXID: SPDXRef-Package101 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: coredns/coredns + +PackageName: coredns/coredns +SPDXID: SPDXRef-Package102 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: coreos/bbolt + +PackageName: coreos/bbolt +SPDXID: SPDXRef-Package103 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: coreos/etcd + +PackageName: coreos/etcd +SPDXID: SPDXRef-Package104 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: coreos/go-etcd + +PackageName: coreos/go-etcd +SPDXID: SPDXRef-Package105 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: coreos/go-oidc + +PackageName: coreos/go-oidc +SPDXID: SPDXRef-Package106 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: coreos/go-semver + +PackageName: coreos/go-semver +SPDXID: SPDXRef-Package107 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: coreos/go-systemd + +PackageName: coreos/go-systemd +SPDXID: SPDXRef-Package108 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: coreos/pkg + +PackageName: coreos/pkg +SPDXID: SPDXRef-Package109 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: coreos/rkt + +PackageName: coreos/rkt +SPDXID: SPDXRef-Package110 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: cpuguy83/go-md2man + +PackageName: cpuguy83/go-md2man +SPDXID: SPDXRef-Package111 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: cyphar/filepath-securejoin + +PackageName: cyphar/filepath-securejoin +SPDXID: SPDXRef-Package112 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: daaku/go.zipexe + +PackageName: daaku/go.zipexe +SPDXID: SPDXRef-Package113 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: davecgh/go-spew + +PackageName: davecgh/go-spew +SPDXID: SPDXRef-Package114 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: ISC +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: daviddengcn/go-colortext + +PackageName: daviddengcn/go-colortext +SPDXID: SPDXRef-Package115 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: dchest/safefile + +PackageName: dchest/safefile +SPDXID: SPDXRef-Package116 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: deckarep/golang-set + +PackageName: deckarep/golang-set +SPDXID: SPDXRef-Package117 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: denverdino/aliyungo + +PackageName: denverdino/aliyungo +SPDXID: SPDXRef-Package118 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: dgrijalva/jwt-go + +PackageName: dgrijalva/jwt-go +SPDXID: SPDXRef-Package119 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: digitalocean/godo + +PackageName: digitalocean/godo +SPDXID: SPDXRef-Package120 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: djherbis/atime + +PackageName: djherbis/atime +SPDXID: SPDXRef-Package121 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: docker/cli + +PackageName: docker/cli +SPDXID: SPDXRef-Package122 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: docker/distribution + +PackageName: docker/distribution +SPDXID: SPDXRef-Package123 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: docker/docker + +PackageName: docker/docker +SPDXID: SPDXRef-Package124 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: docker/engine-api + +PackageName: docker/engine-api +SPDXID: SPDXRef-Package125 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: docker/go-connections + +PackageName: docker/go-connections +SPDXID: SPDXRef-Package126 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: docker/libcompose + +PackageName: docker/libcompose +SPDXID: SPDXRef-Package127 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: docker/libnetwork + +PackageName: docker/libnetwork +SPDXID: SPDXRef-Package128 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: docker/libtrust + +PackageName: docker/libtrust +SPDXID: SPDXRef-Package129 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: docker/machine + +PackageName: docker/machine +SPDXID: SPDXRef-Package130 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: dustin/go-humanize + +PackageName: dustin/go-humanize +SPDXID: SPDXRef-Package131 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: eapache/channels + +PackageName: eapache/channels +SPDXID: SPDXRef-Package132 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: eapache/go-resiliency + +PackageName: eapache/go-resiliency +SPDXID: SPDXRef-Package133 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: eapache/go-xerial-snappy + +PackageName: eapache/go-xerial-snappy +SPDXID: SPDXRef-Package134 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: eapache/queue + +PackageName: eapache/queue +SPDXID: SPDXRef-Package135 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: elazarl/go-bindata-assetfs + +PackageName: elazarl/go-bindata-assetfs +SPDXID: SPDXRef-Package136 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: elazarl/goproxy + +PackageName: elazarl/goproxy +SPDXID: SPDXRef-Package137 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: emicklei/go-restful + +PackageName: emicklei/go-restful +SPDXID: SPDXRef-Package138 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: emicklei/go-restful-swagger12 + +PackageName: emicklei/go-restful-swagger12 +SPDXID: SPDXRef-Package139 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: emirpasic/gods + +PackageName: emirpasic/gods +SPDXID: SPDXRef-Package140 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-2-Clause AND ISC) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: euank/go-kmsg-parser + +PackageName: euank/go-kmsg-parser +SPDXID: SPDXRef-Package141 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: evanphx/json-patch + +PackageName: evanphx/json-patch +SPDXID: SPDXRef-Package142 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: exponent-io/jsonpath + +PackageName: exponent-io/jsonpath +SPDXID: SPDXRef-Package143 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: fatih/camelcase + +PackageName: fatih/camelcase +SPDXID: SPDXRef-Package144 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: fatih/structs + +PackageName: fatih/structs +SPDXID: SPDXRef-Package145 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: flynn/go-shlex + +PackageName: flynn/go-shlex +SPDXID: SPDXRef-Package146 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: fsnotify/fsnotify + +PackageName: fsnotify/fsnotify +SPDXID: SPDXRef-Package147 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: fsouza/fake-gcs-server + +PackageName: fsouza/fake-gcs-server +SPDXID: SPDXRef-Package148 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: fsouza/go-dockerclient + +PackageName: fsouza/go-dockerclient +SPDXID: SPDXRef-Package149 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-2-Clause AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: fullsailor/pkcs7 + +PackageName: fullsailor/pkcs7 +SPDXID: SPDXRef-Package150 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: GeertJohan/go.rice + +PackageName: GeertJohan/go.rice +SPDXID: SPDXRef-Package151 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: ghodss/yaml + +PackageName: ghodss/yaml +SPDXID: SPDXRef-Package152 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: globalsign/mgo + +PackageName: globalsign/mgo +SPDXID: SPDXRef-Package153 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-2-Clause AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: go-ini/ini + +PackageName: go-ini/ini +SPDXID: SPDXRef-Package154 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: go-openapi/analysis + +PackageName: go-openapi/analysis +SPDXID: SPDXRef-Package155 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: go-openapi/errors + +PackageName: go-openapi/errors +SPDXID: SPDXRef-Package156 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: go-openapi/jsonpointer + +PackageName: go-openapi/jsonpointer +SPDXID: SPDXRef-Package157 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: go-openapi/jsonreference + +PackageName: go-openapi/jsonreference +SPDXID: SPDXRef-Package158 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: go-openapi/loads + +PackageName: go-openapi/loads +SPDXID: SPDXRef-Package159 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: go-openapi/runtime + +PackageName: go-openapi/runtime +SPDXID: SPDXRef-Package160 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: go-openapi/spec + +PackageName: go-openapi/spec +SPDXID: SPDXRef-Package161 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (CC-BY-4.0 AND Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: go-openapi/strfmt + +PackageName: go-openapi/strfmt +SPDXID: SPDXRef-Package162 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: go-openapi/swag + +PackageName: go-openapi/swag +SPDXID: SPDXRef-Package163 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: go-openapi/validate + +PackageName: go-openapi/validate +SPDXID: SPDXRef-Package164 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: go-ozzo/ozzo-validation + +PackageName: go-ozzo/ozzo-validation +SPDXID: SPDXRef-Package165 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: go-yaml/yaml + +PackageName: go-yaml/yaml +SPDXID: SPDXRef-Package166 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: gobuffalo/envy + +PackageName: gobuffalo/envy +SPDXID: SPDXRef-Package167 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: godbus/dbus + +PackageName: godbus/dbus +SPDXID: SPDXRef-Package168 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: gogo/protobuf + +PackageName: gogo/protobuf +SPDXID: SPDXRef-Package169 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-2-Clause AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: golang/dep + +PackageName: golang/dep +SPDXID: SPDXRef-Package170 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: golang/glog + +PackageName: golang/glog +SPDXID: SPDXRef-Package171 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: golang/groupcache + +PackageName: golang/groupcache +SPDXID: SPDXRef-Package172 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: golang/lint + +PackageName: golang/lint +SPDXID: SPDXRef-Package173 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: golang/mock + +PackageName: golang/mock +SPDXID: SPDXRef-Package174 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: golang/protobuf + +PackageName: golang/protobuf +SPDXID: SPDXRef-Package175 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: golang/snappy + +PackageName: golang/snappy +SPDXID: SPDXRef-Package176 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: google/btree + +PackageName: google/btree +SPDXID: SPDXRef-Package177 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: google/cadvisor + +PackageName: google/cadvisor +SPDXID: SPDXRef-Package178 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: google/certificate-transparency-go + +PackageName: google/certificate-transparency-go +SPDXID: SPDXRef-Package179 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: google/go-containerregistry + +PackageName: google/go-containerregistry +SPDXID: SPDXRef-Package180 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: google/go-querystring + +PackageName: google/go-querystring +SPDXID: SPDXRef-Package181 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: google/go-tpm + +PackageName: google/go-tpm +SPDXID: SPDXRef-Package182 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: google/gofuzz + +PackageName: google/gofuzz +SPDXID: SPDXRef-Package183 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: google/uuid + +PackageName: google/uuid +SPDXID: SPDXRef-Package184 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: googleapis/gax-go + +PackageName: googleapis/gax-go +SPDXID: SPDXRef-Package185 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: googleapis/gnostic + +PackageName: googleapis/gnostic +SPDXID: SPDXRef-Package186 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: GoogleCloudPlatform/gke-managed-certs + +PackageName: GoogleCloudPlatform/gke-managed-certs +SPDXID: SPDXRef-Package187 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: gophercloud/gophercloud + +PackageName: gophercloud/gophercloud +SPDXID: SPDXRef-Package188 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: gorilla/context + +PackageName: gorilla/context +SPDXID: SPDXRef-Package189 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: gorilla/mux + +PackageName: gorilla/mux +SPDXID: SPDXRef-Package190 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: gorilla/securecookie + +PackageName: gorilla/securecookie +SPDXID: SPDXRef-Package191 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: gorilla/sessions + +PackageName: gorilla/sessions +SPDXID: SPDXRef-Package192 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: gorilla/websocket + +PackageName: gorilla/websocket +SPDXID: SPDXRef-Package193 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-2-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: gregjones/httpcache + +PackageName: gregjones/httpcache +SPDXID: SPDXRef-Package194 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: grpc-ecosystem/go-grpc-middleware + +PackageName: grpc-ecosystem/go-grpc-middleware +SPDXID: SPDXRef-Package195 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: grpc-ecosystem/go-grpc-prometheus + +PackageName: grpc-ecosystem/go-grpc-prometheus +SPDXID: SPDXRef-Package196 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: grpc-ecosystem/grpc-gateway + +PackageName: grpc-ecosystem/grpc-gateway +SPDXID: SPDXRef-Package197 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: hawkular/hawkular-client-go + +PackageName: hawkular/hawkular-client-go +SPDXID: SPDXRef-Package198 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: heketi/heketi REST API + +PackageName: heketi/heketi REST API +SPDXID: SPDXRef-Package199 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (Apache-2.0 OR LGPL-3.0-or-later) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: hpcloud/tail + +PackageName: hpcloud/tail +SPDXID: SPDXRef-Package200 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: huandu/xstrings + +PackageName: huandu/xstrings +SPDXID: SPDXRef-Package201 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: imdario/mergo + +PackageName: imdario/mergo +SPDXID: SPDXRef-Package202 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: inconshreveable/mousetrap + +PackageName: inconshreveable/mousetrap +SPDXID: SPDXRef-Package203 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: influxdata/influxdb + +PackageName: influxdata/influxdb +SPDXID: SPDXRef-Package204 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: jimmidyson/go-download + +PackageName: jimmidyson/go-download +SPDXID: SPDXRef-Package205 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: jinzhu/gorm + +PackageName: jinzhu/gorm +SPDXID: SPDXRef-Package206 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: jinzhu/inflection + +PackageName: jinzhu/inflection +SPDXID: SPDXRef-Package207 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: jmespath/go-jmespath + +PackageName: jmespath/go-jmespath +SPDXID: SPDXRef-Package208 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: jmhodges/clock + +PackageName: jmhodges/clock +SPDXID: SPDXRef-Package209 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: jmoiron/sqlx + +PackageName: jmoiron/sqlx +SPDXID: SPDXRef-Package210 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: joho/godotenv + +PackageName: joho/godotenv +SPDXID: SPDXRef-Package211 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: jonboulle/clockwork + +PackageName: jonboulle/clockwork +SPDXID: SPDXRef-Package212 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: jpillora/backoff + +PackageName: jpillora/backoff +SPDXID: SPDXRef-Package213 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: json-iterator/go + +PackageName: json-iterator/go +SPDXID: SPDXRef-Package214 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: kardianos/osext + +PackageName: kardianos/osext +SPDXID: SPDXRef-Package215 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: karrick/godirwalk + +PackageName: karrick/godirwalk +SPDXID: SPDXRef-Package216 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: kevinburke/ssh_config + +PackageName: kevinburke/ssh_config +SPDXID: SPDXRef-Package217 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: kisielk/sqlstruct + +PackageName: kisielk/sqlstruct +SPDXID: SPDXRef-Package218 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: knative/build + +PackageName: knative/build +SPDXID: SPDXRef-Package219 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: kr/fs + +PackageName: kr/fs +SPDXID: SPDXRef-Package220 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: kr/pretty + +PackageName: kr/pretty +SPDXID: SPDXRef-Package221 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: kr/pty + +PackageName: kr/pty +SPDXID: SPDXRef-Package222 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: kr/text + +PackageName: kr/text +SPDXID: SPDXRef-Package223 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: kubernetes-incubator/apiserver-builder + +PackageName: kubernetes-incubator/apiserver-builder +SPDXID: SPDXRef-Package224 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: kubernetes-incubator/reference-docs + +PackageName: kubernetes-incubator/reference-docs +SPDXID: SPDXRef-Package225 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: kubernetes-sigs/application + +PackageName: kubernetes-sigs/application +SPDXID: SPDXRef-Package226 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: kubernetes/repo-infra + +PackageName: kubernetes/repo-infra +SPDXID: SPDXRef-Package227 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: kylelemons/godebug + +PackageName: kylelemons/godebug +SPDXID: SPDXRef-Package228 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: lib/pq + +PackageName: lib/pq +SPDXID: SPDXRef-Package229 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: libopenstorage/openstorage + +PackageName: libopenstorage/openstorage +SPDXID: SPDXRef-Package230 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: libvirt/libvirt-go + +PackageName: libvirt/libvirt-go +SPDXID: SPDXRef-Package231 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: libvirt/libvirt-go-xml + +PackageName: libvirt/libvirt-go-xml +SPDXID: SPDXRef-Package232 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: lpabon/godbc + +PackageName: lpabon/godbc +SPDXID: SPDXRef-Package233 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: lxn/win + +PackageName: lxn/win +SPDXID: SPDXRef-Package234 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: magiconair/properties + +PackageName: magiconair/properties +SPDXID: SPDXRef-Package235 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-2-Clause AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: mailru/easyjson + +PackageName: mailru/easyjson +SPDXID: SPDXRef-Package236 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: MakeNowJust/heredoc + +PackageName: MakeNowJust/heredoc +SPDXID: SPDXRef-Package237 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: markbates/inflect + +PackageName: markbates/inflect +SPDXID: SPDXRef-Package238 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: marpaia/graphite-golang + +PackageName: marpaia/graphite-golang +SPDXID: SPDXRef-Package239 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: Masterminds/semver + +PackageName: Masterminds/semver +SPDXID: SPDXRef-Package240 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: Masterminds/sprig + +PackageName: Masterminds/sprig +SPDXID: SPDXRef-Package241 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: Masterminds/vcs + +PackageName: Masterminds/vcs +SPDXID: SPDXRef-Package242 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: mattn/go-runewidth + +PackageName: mattn/go-runewidth +SPDXID: SPDXRef-Package243 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: mattn/go-shellwords + +PackageName: mattn/go-shellwords +SPDXID: SPDXRef-Package244 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: mattn/go-zglob + +PackageName: mattn/go-zglob +SPDXID: SPDXRef-Package245 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: matttproud/golang_protobuf_extensions + +PackageName: matttproud/golang_protobuf_extensions +SPDXID: SPDXRef-Package246 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: mesos/mesos-go + +PackageName: mesos/mesos-go +SPDXID: SPDXRef-Package247 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: mholt/caddy + +PackageName: mholt/caddy +SPDXID: SPDXRef-Package248 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: Microsoft/go-winio + +PackageName: Microsoft/go-winio +SPDXID: SPDXRef-Package249 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: Microsoft/hcsshim + +PackageName: Microsoft/hcsshim +SPDXID: SPDXRef-Package250 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: miekg/coredns + +PackageName: miekg/coredns +SPDXID: SPDXRef-Package251 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: miekg/dns + +PackageName: miekg/dns +SPDXID: SPDXRef-Package252 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: mindprince/gonvml + +PackageName: mindprince/gonvml +SPDXID: SPDXRef-Package253 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: mistifyio/go-zfs + +PackageName: mistifyio/go-zfs +SPDXID: SPDXRef-Package254 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: mitchellh/go-homedir + +PackageName: mitchellh/go-homedir +SPDXID: SPDXRef-Package255 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: mitchellh/go-ps + +PackageName: mitchellh/go-ps +SPDXID: SPDXRef-Package256 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: mitchellh/go-wordwrap + +PackageName: mitchellh/go-wordwrap +SPDXID: SPDXRef-Package257 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: mitchellh/hashstructure + +PackageName: mitchellh/hashstructure +SPDXID: SPDXRef-Package258 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: mitchellh/mapstructure + +PackageName: mitchellh/mapstructure +SPDXID: SPDXRef-Package259 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: moby/hyperkit + +PackageName: moby/hyperkit +SPDXID: SPDXRef-Package260 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: modern-go/concurrent + +PackageName: modern-go/concurrent +SPDXID: SPDXRef-Package261 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: modern-go/reflect2 + +PackageName: modern-go/reflect2 +SPDXID: SPDXRef-Package262 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: mohae/deepcopy + +PackageName: mohae/deepcopy +SPDXID: SPDXRef-Package263 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: moul/http2curl + +PackageName: moul/http2curl +SPDXID: SPDXRef-Package264 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: mrunalp/fileutils + +PackageName: mrunalp/fileutils +SPDXID: SPDXRef-Package265 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: mvdan/xurls + +PackageName: mvdan/xurls +SPDXID: SPDXRef-Package266 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: mxk/go-flowrate + +PackageName: mxk/go-flowrate +SPDXID: SPDXRef-Package267 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: ncabatoff/process-exporter + +PackageName: ncabatoff/process-exporter +SPDXID: SPDXRef-Package268 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: nightlyone/lockfile + +PackageName: nightlyone/lockfile +SPDXID: SPDXRef-Package269 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: novln/docker-parser + +PackageName: novln/docker-parser +SPDXID: SPDXRef-Package270 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: NYTimes/gziphandler + +PackageName: NYTimes/gziphandler +SPDXID: SPDXRef-Package271 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: olekukonko/tablewriter + +PackageName: olekukonko/tablewriter +SPDXID: SPDXRef-Package272 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: onsi/ginkgo + +PackageName: onsi/ginkgo +SPDXID: SPDXRef-Package273 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: onsi/gomega + +PackageName: onsi/gomega +SPDXID: SPDXRef-Package274 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: opencontainers/image-spec + +PackageName: opencontainers/image-spec +SPDXID: SPDXRef-Package275 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: opencontainers/runtime-spec + +PackageName: opencontainers/runtime-spec +SPDXID: SPDXRef-Package276 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: opencontainers/selinux + +PackageName: opencontainers/selinux +SPDXID: SPDXRef-Package277 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: openshift/origin + +PackageName: openshift/origin +SPDXID: SPDXRef-Package278 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: opentracing/opentracing-go + +PackageName: opentracing/opentracing-go +SPDXID: SPDXRef-Package279 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: parnurzeal/gorequest + +PackageName: parnurzeal/gorequest +SPDXID: SPDXRef-Package280 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: patrickmn/go-cache + +PackageName: patrickmn/go-cache +SPDXID: SPDXRef-Package281 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: paultag/sniff + +PackageName: paultag/sniff +SPDXID: SPDXRef-Package282 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: pborman/uuid + +PackageName: pborman/uuid +SPDXID: SPDXRef-Package283 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: pelletier/go-buffruneio + +PackageName: pelletier/go-buffruneio +SPDXID: SPDXRef-Package284 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: pelletier/go-toml + +PackageName: pelletier/go-toml +SPDXID: SPDXRef-Package285 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: petar/GoLLRB + +PackageName: petar/GoLLRB +SPDXID: SPDXRef-Package286 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: peterbourgon/diskv + +PackageName: peterbourgon/diskv +SPDXID: SPDXRef-Package287 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: pierrec/lz4 + +PackageName: pierrec/lz4 +SPDXID: SPDXRef-Package288 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: pierrec/xxHash + +PackageName: pierrec/xxHash +SPDXID: SPDXRef-Package289 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: pkg/browser + +PackageName: pkg/browser +SPDXID: SPDXRef-Package290 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: pkg/errors + +PackageName: pkg/errors +SPDXID: SPDXRef-Package291 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: pkg/profile + +PackageName: pkg/profile +SPDXID: SPDXRef-Package292 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: pkg/sftp + +PackageName: pkg/sftp +SPDXID: SPDXRef-Package293 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: pmezard/go-difflib + +PackageName: pmezard/go-difflib +SPDXID: SPDXRef-Package294 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: pquerna/cachecontrol + +PackageName: pquerna/cachecontrol +SPDXID: SPDXRef-Package295 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: pquerna/ffjson + +PackageName: pquerna/ffjson +SPDXID: SPDXRef-Package296 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0 AND ISC) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: prometheus/client_golang + +PackageName: prometheus/client_golang +SPDXID: SPDXRef-Package297 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: prometheus/client_model + +PackageName: prometheus/client_model +SPDXID: SPDXRef-Package298 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: prometheus/common + +PackageName: prometheus/common +SPDXID: SPDXRef-Package299 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: prometheus/procfs + +PackageName: prometheus/procfs +SPDXID: SPDXRef-Package300 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: PuerkitoBio/purell + +PackageName: PuerkitoBio/purell +SPDXID: SPDXRef-Package301 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: PuerkitoBio/urlesc + +PackageName: PuerkitoBio/urlesc +SPDXID: SPDXRef-Package302 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: r2d4/external-storage + +PackageName: r2d4/external-storage +SPDXID: SPDXRef-Package303 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: rackspace/gophercloud + +PackageName: rackspace/gophercloud +SPDXID: SPDXRef-Package304 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: rancher/go-rancher + +PackageName: rancher/go-rancher +SPDXID: SPDXRef-Package305 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: rcrowley/go-metrics + +PackageName: rcrowley/go-metrics +SPDXID: SPDXRef-Package306 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause-FreeBSD +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: renstrom/dedent + +PackageName: renstrom/dedent +SPDXID: SPDXRef-Package307 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: Rican7/retry + +PackageName: Rican7/retry +SPDXID: SPDXRef-Package308 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: riemann/riemann-go-client + +PackageName: riemann/riemann-go-client +SPDXID: SPDXRef-Package309 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: robfig/cron + +PackageName: robfig/cron +SPDXID: SPDXRef-Package310 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: russross/blackfriday + +PackageName: russross/blackfriday +SPDXID: SPDXRef-Package311 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: samalba/dockerclient + +PackageName: samalba/dockerclient +SPDXID: SPDXRef-Package312 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: satori/go.uuid + +PackageName: satori/go.uuid +SPDXID: SPDXRef-Package313 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: scalingdata/gcfg + +PackageName: scalingdata/gcfg +SPDXID: SPDXRef-Package314 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-2-Clause AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: sdboyer/constext + +PackageName: sdboyer/constext +SPDXID: SPDXRef-Package315 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: seccomp/libseccomp-golang + +PackageName: seccomp/libseccomp-golang +SPDXID: SPDXRef-Package316 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: sergi/go-diff + +PackageName: sergi/go-diff +SPDXID: SPDXRef-Package317 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: Shopify/sarama + +PackageName: Shopify/sarama +SPDXID: SPDXRef-Package318 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: shurcooL/githubv4 + +PackageName: shurcooL/githubv4 +SPDXID: SPDXRef-Package319 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: shurcooL/go + +PackageName: shurcooL/go +SPDXID: SPDXRef-Package320 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: shurcooL/graphql + +PackageName: shurcooL/graphql +SPDXID: SPDXRef-Package321 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: shurcooL/sanitized_anchor_name + +PackageName: shurcooL/sanitized_anchor_name +SPDXID: SPDXRef-Package322 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: sirupsen/logrus + +PackageName: sirupsen/logrus +SPDXID: SPDXRef-Package323 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-2-Clause AND BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: skynetservices/skydns + +PackageName: skynetservices/skydns +SPDXID: SPDXRef-Package324 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: smartystreets/go-aws-auth + +PackageName: smartystreets/go-aws-auth +SPDXID: SPDXRef-Package325 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: soheilhy/cmux + +PackageName: soheilhy/cmux +SPDXID: SPDXRef-Package326 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: spf13/afero + +PackageName: spf13/afero +SPDXID: SPDXRef-Package327 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: spf13/cast + +PackageName: spf13/cast +SPDXID: SPDXRef-Package328 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: spf13/cobra + +PackageName: spf13/cobra +SPDXID: SPDXRef-Package329 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: spf13/jwalterweatherman + +PackageName: spf13/jwalterweatherman +SPDXID: SPDXRef-Package330 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: spf13/pflag + +PackageName: spf13/pflag +SPDXID: SPDXRef-Package331 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: spf13/viper + +PackageName: spf13/viper +SPDXID: SPDXRef-Package332 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: storageos/go-api + +PackageName: storageos/go-api +SPDXID: SPDXRef-Package333 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-2-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: streadway/quantile + +PackageName: streadway/quantile +SPDXID: SPDXRef-Package334 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: stretchr/objx + +PackageName: stretchr/objx +SPDXID: SPDXRef-Package335 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: stretchr/testify + +PackageName: stretchr/testify +SPDXID: SPDXRef-Package336 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: syndtr/gocapability + +PackageName: syndtr/gocapability +SPDXID: SPDXRef-Package337 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: tchap/go-patricia + +PackageName: tchap/go-patricia +SPDXID: SPDXRef-Package338 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: thockin/glogr + +PackageName: thockin/glogr +SPDXID: SPDXRef-Package339 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: thockin/logr + +PackageName: thockin/logr +SPDXID: SPDXRef-Package340 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: tmc/grpc-websocket-proxy + +PackageName: tmc/grpc-websocket-proxy +SPDXID: SPDXRef-Package341 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: tsenart/vegeta + +PackageName: tsenart/vegeta +SPDXID: SPDXRef-Package342 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: ugorji/go + +PackageName: ugorji/go +SPDXID: SPDXRef-Package343 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: Unknwon/goconfig + +PackageName: Unknwon/goconfig +SPDXID: SPDXRef-Package344 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: urfave/cli + +PackageName: urfave/cli +SPDXID: SPDXRef-Package345 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: vishvananda/netlink + +PackageName: vishvananda/netlink +SPDXID: SPDXRef-Package346 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: vishvananda/netns + +PackageName: vishvananda/netns +SPDXID: SPDXRef-Package347 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: vmware/govmomi + +PackageName: vmware/govmomi +SPDXID: SPDXRef-Package348 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: vmware/photon-controller-go-sdk + +PackageName: vmware/photon-controller-go-sdk +SPDXID: SPDXRef-Package349 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: weaveworks/mesh + +PackageName: weaveworks/mesh +SPDXID: SPDXRef-Package350 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: xanzy/go-cloudstack + +PackageName: xanzy/go-cloudstack +SPDXID: SPDXRef-Package351 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: xeipuuv/gojsonpointer + +PackageName: xeipuuv/gojsonpointer +SPDXID: SPDXRef-Package352 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: xeipuuv/gojsonreference + +PackageName: xeipuuv/gojsonreference +SPDXID: SPDXRef-Package353 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: xeipuuv/gojsonschema + +PackageName: xeipuuv/gojsonschema +SPDXID: SPDXRef-Package354 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: xiang90/probing + +PackageName: xiang90/probing +SPDXID: SPDXRef-Package355 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: zakjan/cert-chain-resolver + +PackageName: zakjan/cert-chain-resolver +SPDXID: SPDXRef-Package356 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: ziutek/syslog + +PackageName: ziutek/syslog +SPDXID: SPDXRef-Package357 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: go.opencensus.io + +PackageName: go.opencensus.io +SPDXID: SPDXRef-Package358 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: go.uber.org/atomic + +PackageName: go.uber.org/atomic +SPDXID: SPDXRef-Package359 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: go.uber.org/multierr + +PackageName: go.uber.org/multierr +SPDXID: SPDXRef-Package360 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: go.uber.org/zap + +PackageName: go.uber.org/zap +SPDXID: SPDXRef-Package361 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: go4.org/errorutil + +PackageName: go4.org/errorutil +SPDXID: SPDXRef-Package362 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: x/build + +PackageName: x/build +SPDXID: SPDXRef-Package363 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: x/exp + +PackageName: x/exp +SPDXID: SPDXRef-Package364 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: x/lint + +PackageName: x/lint +SPDXID: SPDXRef-Package365 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: x/oauth2 + +PackageName: x/oauth2 +SPDXID: SPDXRef-Package366 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: x/sync + +PackageName: x/sync +SPDXID: SPDXRef-Package367 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: x/sys + +PackageName: x/sys +SPDXID: SPDXRef-Package368 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-2-Clause AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: x/text + +PackageName: x/text +SPDXID: SPDXRef-Package369 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: x/time + +PackageName: x/time +SPDXID: SPDXRef-Package370 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: x/tools + +PackageName: x/tools +SPDXID: SPDXRef-Package371 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause AND Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: golang/archive/tar + +PackageName: golang/archive/tar +SPDXID: SPDXRef-Package372 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: gonum.org/v1/gonum + +PackageName: gonum.org/v1/gonum +SPDXID: SPDXRef-Package373 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: ((BSD-3-Clause OR CC0-1.0) AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: google.golang.org/cloud + +PackageName: google.golang.org/cloud +SPDXID: SPDXRef-Package374 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: google.golang.org/genproto + +PackageName: google.golang.org/genproto +SPDXID: SPDXRef-Package375 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: gopkg.in/check.v1 + +PackageName: gopkg.in/check.v1 +SPDXID: SPDXRef-Package376 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-2-Clause AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: gopkg.in/cheggaaa/pb.v1 + +PackageName: gopkg.in/cheggaaa/pb.v1 +SPDXID: SPDXRef-Package377 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: gopkg.in/fsnotify + +PackageName: gopkg.in/fsnotify +SPDXID: SPDXRef-Package378 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: gopkg.in/gcfg.v1 + +PackageName: gopkg.in/gcfg.v1 +SPDXID: SPDXRef-Package379 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: gopkg.in/go-playground/pool.v3 + +PackageName: gopkg.in/go-playground/pool.v3 +SPDXID: SPDXRef-Package380 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: gopkg.in/igm/sockjs-go.v2 + +PackageName: gopkg.in/igm/sockjs-go.v2 +SPDXID: SPDXRef-Package381 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: gopkg.in/inf.v0 + +PackageName: gopkg.in/inf.v0 +SPDXID: SPDXRef-Package382 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: gopkg.in/natefinch/lumberjack.v2 + +PackageName: gopkg.in/natefinch/lumberjack.v2 +SPDXID: SPDXRef-Package383 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: gopkg.in/olivere/elastic.v3 + +PackageName: gopkg.in/olivere/elastic.v3 +SPDXID: SPDXRef-Package384 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: gopkg.in/olivere/elastic.v5 + +PackageName: gopkg.in/olivere/elastic.v5 +SPDXID: SPDXRef-Package385 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: gopkg.in/robfig/cron.v2 + +PackageName: gopkg.in/robfig/cron.v2 +SPDXID: SPDXRef-Package386 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: gopkg.in/square/go-jose.v2 + +PackageName: gopkg.in/square/go-jose.v2 +SPDXID: SPDXRef-Package387 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: gopkg.in/src-d + +PackageName: gopkg.in/src-d +SPDXID: SPDXRef-Package388 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed + +##### Package: gopkg.in/tomb.v1 + +PackageName: gopkg.in/tomb.v1 +SPDXID: SPDXRef-Package389 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: jquery.scrollto + +PackageName: jquery.scrollto +SPDXID: SPDXRef-Package390 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: marked + +PackageName: marked +SPDXID: SPDXRef-Package391 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: mime + +PackageName: mime +SPDXID: SPDXRef-Package392 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: minimist + +PackageName: minimist +SPDXID: SPDXRef-Package393 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: node-static + +PackageName: node-static +SPDXID: SPDXRef-Package394 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: optimist + +PackageName: optimist +SPDXID: SPDXRef-Package395 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: ui-router for Angular + +PackageName: ui-router for Angular +SPDXID: SPDXRef-Package396 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: vbom.ml/util + +PackageName: vbom.ml/util +SPDXID: SPDXRef-Package397 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: wordwrap + +PackageName: wordwrap +SPDXID: SPDXRef-Package398 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted + +##### Package: VirtualBox Linux Guest Drivers Makefile + +PackageName: VirtualBox Linux Guest Drivers Makefile +SPDXID: SPDXRef-Package399 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: GPL-2.0-only +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-05-20 + +##### Package: Angular + +PackageName: Angular +SPDXID: SPDXRef-Package400 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: Asciidoctor + +PackageName: Asciidoctor +SPDXID: SPDXRef-Package401 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: Azure acr-docker-credential-helper + +PackageName: Azure acr-docker-credential-helper +SPDXID: SPDXRef-Package402 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: Backbone + +PackageName: Backbone +SPDXID: SPDXRef-Package403 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: bitbucket.org/bertimus9/systemstat + +PackageName: bitbucket.org/bertimus9/systemstat +SPDXID: SPDXRef-Package404 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: bitbucket.org/ww/goautoneg + +PackageName: bitbucket.org/ww/goautoneg +SPDXID: SPDXRef-Package405 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: bootstrap + +PackageName: bootstrap +SPDXID: SPDXRef-Package406 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (CC-BY-3.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: dialog-polyfill.css + +PackageName: dialog-polyfill.css +SPDXID: SPDXRef-Package407 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: font-awesome + +PackageName: font-awesome +SPDXID: SPDXRef-Package408 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (CC-BY-3.0 AND MIT AND OFL-1.1) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: Gingko + +PackageName: Gingko +SPDXID: SPDXRef-Package409 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: Azure/azure-pipeline-go + +PackageName: Azure/azure-pipeline-go +SPDXID: SPDXRef-Package410 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: bungle/lua-resty-template + +PackageName: bungle/lua-resty-template +SPDXID: SPDXRef-Package411 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: c4milo/gotoolkit + +PackageName: c4milo/gotoolkit +SPDXID: SPDXRef-Package412 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: client9/misspell + +PackageName: client9/misspell +SPDXID: SPDXRef-Package413 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (Unlicense AND BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: d2g/dhcp4 + +PackageName: d2g/dhcp4 +SPDXID: SPDXRef-Package414 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: d2g/dhcp4client + +PackageName: d2g/dhcp4client +SPDXID: SPDXRef-Package415 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: dgryski/go-onlinestats + +PackageName: dgryski/go-onlinestats +SPDXID: SPDXRef-Package416 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (MIT AND LicenseRef-Public-domain-statement) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: docker/go-units + +PackageName: docker/go-units +SPDXID: SPDXRef-Package417 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (CC-BY-SA-4.0 AND CC-BY-4.0 AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: docker/spdystream + +PackageName: docker/spdystream +SPDXID: SPDXRef-Package418 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (CC-BY-SA-4.0 AND CC-BY-4.0 AND BSD-3-Clause AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: go-sql-driver/mysql + +PackageName: go-sql-driver/mysql +SPDXID: SPDXRef-Package419 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: gonum/graph + +PackageName: gonum/graph +SPDXID: SPDXRef-Package420 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: google/go-github + +PackageName: google/go-github +SPDXID: SPDXRef-Package421 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND CC-BY-3.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: grpc-ecosystem/grpc-opentracing + +PackageName: grpc-ecosystem/grpc-opentracing +SPDXID: SPDXRef-Package422 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND LicenseRef-Google-Patents-Notice-GRPC) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: hashicorp/errwrap + +PackageName: hashicorp/errwrap +SPDXID: SPDXRef-Package423 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: hashicorp/go-cleanhttp + +PackageName: hashicorp/go-cleanhttp +SPDXID: SPDXRef-Package424 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: hashicorp/go-multierror + +PackageName: hashicorp/go-multierror +SPDXID: SPDXRef-Package425 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: hashicorp/golang-lru + +PackageName: hashicorp/golang-lru +SPDXID: SPDXRef-Package426 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: hashicorp/hcl + +PackageName: hashicorp/hcl +SPDXID: SPDXRef-Package427 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: hooklift/iso9660 + +PackageName: hooklift/iso9660 +SPDXID: SPDXRef-Package428 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: howeyc/gopass + +PackageName: howeyc/gopass +SPDXID: SPDXRef-Package429 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (ISC AND CDDL-1.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: jbenet/go-context + +PackageName: jbenet/go-context +SPDXID: SPDXRef-Package430 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: JeffAshton/win_pdh + +PackageName: JeffAshton/win_pdh +SPDXID: SPDXRef-Package431 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: jmank88/nuts + +PackageName: jmank88/nuts +SPDXID: SPDXRef-Package432 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: johanneswuerbach/nfsexports + +PackageName: johanneswuerbach/nfsexports +SPDXID: SPDXRef-Package433 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: joshdk/go-junit + +PackageName: joshdk/go-junit +SPDXID: SPDXRef-Package434 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: jteeuwen/go-bindata + +PackageName: jteeuwen/go-bindata +SPDXID: SPDXRef-Package435 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: CC0-1.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: konsorten/go-windows-terminal-sequences + +PackageName: konsorten/go-windows-terminal-sequences +SPDXID: SPDXRef-Package436 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: marstr/guid + +PackageName: marstr/guid +SPDXID: SPDXRef-Package437 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: mattn/go-sqlite3 + +PackageName: mattn/go-sqlite3 +SPDXID: SPDXRef-Package438 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (MIT AND LicenseRef-Public-domain-statement) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: multiarch/qemu-user-static + +PackageName: multiarch/qemu-user-static +SPDXID: SPDXRef-Package439 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: Nvveen/Gotty + +PackageName: Nvveen/Gotty +SPDXID: SPDXRef-Package440 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause-FreeBSD +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: opencontainers/go-digest + +PackageName: opencontainers/go-digest +SPDXID: SPDXRef-Package441 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (CC-BY-SA-4.0 AND CC-BY-4.0 AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: opencontainers/runc + +PackageName: opencontainers/runc +SPDXID: SPDXRef-Package442 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-CC-unspecified AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: quobyte/api + +PackageName: quobyte/api +SPDXID: SPDXRef-Package443 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: rubiojr/go-vhd + +PackageName: rubiojr/go-vhd +SPDXID: SPDXRef-Package444 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: sigma/go-inotify + +PackageName: sigma/go-inotify +SPDXID: SPDXRef-Package445 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: spotinst/spotinst-sdk-go + +PackageName: spotinst/spotinst-sdk-go +SPDXID: SPDXRef-Package446 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: src-d/gcfg + +PackageName: src-d/gcfg +SPDXID: SPDXRef-Package447 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: tent/http-link-go + +PackageName: tent/http-link-go +SPDXID: SPDXRef-Package448 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: xanzy/ssh-agent + +PackageName: xanzy/ssh-agent +SPDXID: SPDXRef-Package449 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: zchee/go-vmnet + +PackageName: zchee/go-vmnet +SPDXID: SPDXRef-Package450 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-2-Clause AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: go-srcimporter + +PackageName: go-srcimporter +SPDXID: SPDXRef-Package451 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: go9p + +PackageName: go9p +SPDXID: SPDXRef-Package452 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: godep + +PackageName: godep +SPDXID: SPDXRef-Package453 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: x/crypto + +PackageName: x/crypto +SPDXID: SPDXRef-Package454 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause AND MIT AND LicenseRef-Public-domain-statement) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: x/net + +PackageName: x/net +SPDXID: SPDXRef-Package455 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-2-Clause AND BSD-3-Clause AND CC-BY-3.0 AND (BSD-3-Clause OR LicenseRef-W3C-Test-Suite-License-1)) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: golang/expansion + +PackageName: golang/expansion +SPDXID: SPDXRef-Package456 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: golang/go/types + +PackageName: golang/go/types +SPDXID: SPDXRef-Package457 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: golang/internal/srcimporter + +PackageName: golang/internal/srcimporter +SPDXID: SPDXRef-Package458 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: golang/json + +PackageName: golang/json +SPDXID: SPDXRef-Package459 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: golang/netutil + +PackageName: golang/netutil +SPDXID: SPDXRef-Package460 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: golang/reflect + +PackageName: golang/reflect +SPDXID: SPDXRef-Package461 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: golang/template + +PackageName: golang/template +SPDXID: SPDXRef-Package462 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: Google Protocol Buffers + +PackageName: Google Protocol Buffers +SPDXID: SPDXRef-Package463 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: google.golang.org/api + +PackageName: google.golang.org/api +SPDXID: SPDXRef-Package464 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11 + +##### Package: google.golang.org/appengine + +PackageName: google.golang.org/appengine +SPDXID: SPDXRef-Package465 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11 + +##### Package: google.golang.org/grpc + +PackageName: google.golang.org/grpc +SPDXID: SPDXRef-Package466 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0 AND LicenseRef-Google-Patents-Notice-GRPC) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: gopkg.in/warnings.v0 + +PackageName: gopkg.in/warnings.v0 +SPDXID: SPDXRef-Package467 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: Handlebars + +PackageName: Handlebars +SPDXID: SPDXRef-Package468 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: Highlight + +PackageName: Highlight +SPDXID: SPDXRef-Package469 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: highlight.js + +PackageName: highlight.js +SPDXID: SPDXRef-Package470 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND MIT AND CC0-1.0 AND LicenseRef-Public-domain-statement) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: htpasswd + +PackageName: htpasswd +SPDXID: SPDXRef-Package471 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11 + +##### Package: jQuery + +PackageName: jQuery +SPDXID: SPDXRef-Package472 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: jQuery BBQ + +PackageName: jQuery BBQ +SPDXID: SPDXRef-Package473 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (MIT OR GPL-2.0+) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: jQuery hashchange event + +PackageName: jQuery hashchange event +SPDXID: SPDXRef-Package474 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (GPL-2.0+ OR MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: jQuery Slideto + +PackageName: jQuery Slideto +SPDXID: SPDXRef-Package475 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: jQuery Wiggle + +PackageName: jQuery Wiggle +SPDXID: SPDXRef-Package476 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: moment.js + +PackageName: moment.js +SPDXID: SPDXRef-Package477 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: normalize.css + +PackageName: normalize.css +SPDXID: SPDXRef-Package478 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: Octicons + +PackageName: Octicons +SPDXID: SPDXRef-Package479 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: parseUri + +PackageName: parseUri +SPDXID: SPDXRef-Package480 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: Pause + +PackageName: Pause +SPDXID: SPDXRef-Package481 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11 + +##### Package: Pure CSS + +PackageName: Pure CSS +SPDXID: SPDXRef-Package482 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: shred + +PackageName: shred +SPDXID: SPDXRef-Package483 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: ISC +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: sigs.k8s.io/yaml + +PackageName: sigs.k8s.io/yaml +SPDXID: SPDXRef-Package484 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. fork of github.com/ghodss/yaml; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: speter.net/go/exp + +PackageName: speter.net/go/exp +SPDXID: SPDXRef-Package485 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-2-Clause AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11 + +##### Package: sprintf() for JavaScript + +PackageName: sprintf() for JavaScript +SPDXID: SPDXRef-Package486 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: Underscore.js + +PackageName: Underscore.js +SPDXID: SPDXRef-Package487 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 diff --git a/license-exceptions/exceptions.json b/license-exceptions/exceptions.json new file mode 100644 index 00000000..d7ea5fb3 --- /dev/null +++ b/license-exceptions/exceptions.json @@ -0,0 +1,4363 @@ +{ + "version": "1.1.0", + "lastUpdated": "2026-02-04", + "blanketExceptions": [], + "exceptions": [ + { + "id": "exc-2026-02-05-001", + "package": "eclipse-ee4j/expressly", + "license": "EPL-2.0 OR GPL-2.0-only WITH Classpath-exception-2.0", + "project": "Keycloak", + "approvedDate": "2026-02-05", + "status": "approved", + "scope": "required upstream dependency, dynamically linked, unmodified", + "results": "https://github.com/cncf/foundation/issues/1177", + "comment": "Default implementation of Jakarta Expression Language 6.0, transitive dependency for Hibernate Validator" + }, + { + "id": "exc-2026-02-05-002", + "package": "libpathrs", + "license": "MPL-2.0 OR LGPL-3.0-or-later", + "project": "All CNCF Projects", + "approvedDate": "2026-02-05", + "status": "approved", + "scope": "vendored component, build-time dependency, or install-time dependency; statically or dynamically linked", + "results": "https://github.com/cncf/foundation/issues/1154", + "comment": "Blanket exception: Projects using libpathrs statically linked MUST elect MPL-2.0 and document this. Provides secure path resolution APIs." + }, + { + "id": "exc-2026-02-05-003", + "package": "go-pathrs", + "license": "MPL-2.0", + "project": "All CNCF Projects", + "approvedDate": "2026-02-05", + "status": "approved", + "scope": "vendored component, build-time dependency, or install-time dependency; statically or dynamically linked", + "results": "https://github.com/cncf/foundation/issues/1154", + "comment": "Blanket exception: Go bindings for libpathrs. Provides secure path resolution APIs." + }, + { + "id": "exc-2025-11-21-001", + "package": "cyphar/filepath-securejoin", + "license": "MPL-2.0 AND BSD-3-Clause", + "project": "All CNCF Projects", + "approvedDate": "2025-11-21", + "status": "approved", + "scope": "vendored component, build-time dependency, or install-time dependency; statically or dynamically linked", + "results": "https://github.com/cncf/foundation/issues/1154", + "comment": "Blanket exception: Provides secure path resolution APIs on Linux. Used by Kubernetes, containerd, Podman, buildah, cri-o, nerdctl." + }, + { + "id": "exc-2025-11-21-002", + "package": "Liquibase", + "license": "FSL (Functional Source License)", + "project": "Keycloak", + "approvedDate": "2025-11-21", + "status": "denied", + "scope": "incorporated code, dynamically linked", + "results": "https://github.com/cncf/foundation/issues/1147", + "comment": "Denied: FSL is not an open source license. GB does not approve exceptions for non-OSS licenses." + }, + { + "id": "exc-2025-10-17-001", + "package": "paramiko", + "license": "LGPL-2.1", + "project": "oscal-compass", + "approvedDate": "2025-10-17", + "status": "approved", + "scope": "build-time dependency, dynamically linked", + "results": "https://github.com/cncf/foundation/issues/1108", + "comment": "Pure-Python SSHv2 protocol implementation, used for fetching files" + }, + { + "id": "exc-2025-10-17-002", + "package": "certifi", + "license": "MPL-2.0", + "project": "oscal-compass", + "approvedDate": "2025-10-17", + "status": "approved", + "scope": "install-time dependency, dynamically linked", + "results": "https://github.com/cncf/foundation/issues/1091", + "comment": "Dependency for requests library" + }, + { + "id": "exc-2025-10-17-003", + "package": "pathspec", + "license": "MPL-2.0", + "project": "oscal-compass", + "approvedDate": "2025-10-17", + "status": "approved", + "scope": "build-time dependency, separate process", + "results": "https://github.com/cncf/foundation/issues/1090", + "comment": "Dependency for black, mkdocs, mypy" + }, + { + "id": "exc-2025-10-17-004", + "package": "cyphar/filepath-securejoin", + "license": "BSD-3-Clause AND MPL-2.0", + "project": "Kubernetes", + "approvedDate": "2025-10-17", + "status": "approved", + "scope": "vendored component, build-time dependency, statically linked", + "results": "https://github.com/cncf/foundation/issues/1074", + "comment": "Provides secure path construction functions. Superseded by blanket exception in issue #1154." + }, + { + "id": "exc-2024-10-23-001", + "package": "hashicorp/terraform-provider-aws", + "license": "MPL-2.0", + "project": "Crossplane", + "approvedDate": "2024-10-23", + "status": "approved", + "scope": "build-time dependency, modified fork", + "results": "https://github.com/cncf/foundation/issues/818", + "comment": "Fork maintained for Crossplane providers, changes contributed upstream" + }, + { + "id": "exc-2024-10-23-002", + "package": "hashicorp/terraform-provider-azurerm", + "license": "MPL-2.0", + "project": "Crossplane", + "approvedDate": "2024-10-23", + "status": "approved", + "scope": "build-time dependency, modified fork", + "results": "https://github.com/cncf/foundation/issues/818", + "comment": "Fork maintained for Crossplane providers, changes contributed upstream" + }, + { + "id": "exc-2024-10-23-003", + "package": "hashicorp/terraform-provider-azuread", + "license": "MPL-2.0", + "project": "Crossplane", + "approvedDate": "2024-10-23", + "status": "approved", + "scope": "build-time dependency, modified fork", + "results": "https://github.com/cncf/foundation/issues/818", + "comment": "Fork maintained for Crossplane providers, changes contributed upstream" + }, + { + "id": "exc-2024-10-23-004", + "package": "apple/swift-nio-ssl", + "license": "OpenSSL", + "project": "Connect", + "approvedDate": "2024-10-23", + "status": "approved", + "scope": "build-time dependency, unmodified", + "results": "https://github.com/cncf/foundation/issues/823", + "comment": "Required for HTTP/2 + TLS with HTTP trailers on iOS. Also used by gRPC Swift." + }, + { + "id": "exc-2024-10-23-005", + "package": "Crossplane Upjet MPL dependencies", + "license": "MPL-2.0", + "project": "Crossplane", + "approvedDate": "2024-10-23", + "status": "approved", + "scope": "build-time dependency, unmodified, linked at build time", + "results": "https://github.com/cncf/foundation/issues/787", + "comment": "Various hashicorp terraform dependencies for Upjet: hcl, terraform-json, terraform-plugin-framework, terraform-plugin-go, terraform-plugin-sdk, go-plugin, go-uuid, go-version, logutils, terraform-plugin-log, terraform-registry-address, terraform-svchost, yamux" + }, + { + "id": "exc-2024-10-23-006", + "package": "Linux kernel uapi headers (btrfs)", + "license": "GPL-2.0-only WITH Linux-syscall-note", + "project": "containerd", + "approvedDate": "2024-10-23", + "status": "approved", + "scope": "kernel headers included via #include, no inline functions compiled in", + "results": "https://github.com/cncf/foundation/issues/174", + "comment": "Used by containerd/btrfs for btrfs-related ioctl syscalls. Headers from linux/btrfs.h and linux/btrfs_tree.h." + }, + { + "id": "exc-2024-10-22-001", + "package": "github.com/hashicorp/go-set/v2", + "license": "MPL-2.0", + "project": "OpenFGA", + "approvedDate": "2024-10-22", + "status": "approved", + "scope": "build-time dependency, linked at build time", + "results": "https://github.com/cncf/foundation/issues/830", + "comment": "Unmodified code" + }, + { + "id": "exc-2024-10-22-002", + "package": "Keycloak Java dependencies", + "license": "0BSD, CDDL-1.1, EPL-1.0, EPL-2.0, GPL-2.0-only, GPL-2.0-with-classpath-exception, LGPL-2.1, LGPL-2.1-only, MIT-0, MPL-2.0, UPL-1.0", + "project": "Keycloak", + "approvedDate": "2024-10-22", + "status": "approved", + "scope": "transitive dependencies from Quarkus framework, unmodified", + "results": "https://github.com/cncf/foundation/issues/817", + "comment": "Multiple Java dependencies including: tslib, h2, mysql-connector-j, jakarta.* APIs, parsson, graalvm SDK, hibernate-*, mariadb-java-client, nashorn-core, reactive-streams" + }, + { + "id": "exc-2024-12-17-001", + "package": "github.com/hashicorp/memberlist", + "license": "MPL-2.0", + "project": "kubernetes/kops", + "approvedDate": "2024-07-16", + "status": "approved", + "scope": "build-time dependency, unmodified", + "results": "https://github.com/cncf/foundation/issues/741", + "comment": "Main component of Gossip DNS feature for peer-to-peer network K8s API address propagation" + }, + { + "id": "exc-2024-02-27-001", + "package": "Falco kernel module", + "license": "GPL-2.0-only OR MIT", + "project": "Falco", + "approvedDate": "2024-02-27", + "status": "approved", + "scope": "kernel module, dual-licensed", + "results": "https://github.com/cncf/foundation/issues/645", + "comment": "Falco's kernel module is dual-licensed GPL-2.0-only OR MIT" + }, + { + "id": "blanket-ebpf-gpl", + "package": "In-kernel eBPF programs", + "license": "GPL-2.0-only, GPL-2.0-or-later", + "project": "All CNCF Projects", + "approvedDate": "2023-08-31", + "status": "approved", + "scope": "in-kernel eBPF programs only", + "results": "https://github.com/cncf/foundation/blob/main/license-exceptions/README.md#gpl-exceptions-for-in-kernel-ebpf-programs", + "comment": "Blanket exception: GPL-2.0 licensed code is permitted for in-kernel eBPF programs only, as this is required by the Linux kernel BPF subsystem." + }, + { + "id": "exc-2023-08-31-001", + "package": "github.com/docker/go-metrics", + "license": "CC-BY-SA 4.0", + "approvedDate": "2023-08-31", + "status": "approved", + "scope": "runtime dependency, statically linked", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31" + }, + { + "id": "exc-2023-08-31-002", + "package": "github.com/hashicorp/go-memdb", + "license": "MPL-2.0", + "approvedDate": "2023-08-31", + "status": "approved", + "scope": "runtime dependency, dynamically linked", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31", + "results": "https://github.com/cncf/foundation/issues/400", + "project": "Cilium" + }, + { + "id": "exc-2023-08-31-003", + "package": "github.com/shoenig/go-m1cpu", + "license": "MPL-2.0", + "approvedDate": "2023-08-31", + "status": "approved", + "scope": "build dependency", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31" + }, + { + "id": "exc-2023-08-31-004", + "package": "hashicorp/packer-plugin-sdk", + "license": "MPL-2.0", + "approvedDate": "2023-08-31", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31" + }, + { + "id": "exc-2023-06-27-001", + "package": "github.com/hashicorp/consul/api", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/400", + "scope": "build-time dependency, unmodified", + "project": "Cilium" + }, + { + "id": "exc-2023-06-27-002", + "package": "github.com/hashicorp/go-hclog", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/400", + "scope": "build-time dependency, unmodified", + "project": "Cilium" + }, + { + "id": "exc-2023-06-27-003", + "package": "github.com/hashicorp/go-immutable-radix", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/400", + "scope": "build-time dependency, unmodified", + "project": "Cilium" + }, + { + "id": "exc-2023-06-27-004", + "package": "github.com/hashicorp/go-plugin", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/300", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2023-06-27-005", + "package": "github.com/hashicorp/go-rootcerts", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/400", + "scope": "build-time dependency, unmodified", + "project": "Cilium" + }, + { + "id": "exc-2023-06-27-006", + "package": "github.com/hashicorp/go-secure-stdlib", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-007", + "package": "github.com/hashicorp/go-sockaddr", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-008", + "package": "github.com/hashicorp/go-uuid", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-009", + "package": "github.com/hashicorp/serf", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/400", + "scope": "build-time dependency, unmodified", + "project": "Cilium" + }, + { + "id": "exc-2023-06-27-010", + "package": "github.com/hashicorp/vault", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/485", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2023-06-27-011", + "package": "github.com/veraison/go-cose", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/526", + "scope": "build-time dependency, unmodified", + "project": "Notary" + }, + { + "id": "exc-2023-06-27-012", + "package": "hashicorp/consul/api", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-013", + "package": "hashicorp/go-hclog", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-014", + "package": "hashicorp/go-immutable-radix", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-015", + "package": "hashicorp/go-plugin", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/300", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2023-06-27-016", + "package": "hashicorp/go-rootcerts", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-017", + "package": "hashicorp/go-secure-stdlib", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-018", + "package": "hashicorp/go-sockaddr", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-019", + "package": "hashicorp/go-uuid", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-020", + "package": "hashicorp/go-version", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2023-06-27-021", + "package": "hashicorp/raft", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-022", + "package": "hashicorp/serf", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-023", + "package": "hashicorp/vault", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/485", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2023-06-27-024", + "package": "hashicorp/yamux", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/400", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2023-06-27-025", + "package": "veraison/go-cose", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/526", + "scope": "build-time dependency, unmodified", + "project": "Notary" + }, + { + "id": "exc-2022-04-12-001", + "package": "github.com/eclipse/paho.mqtt.golang", + "license": "EPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2022-04-12-002", + "package": "github.com/hashicorp/go-version", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2022-04-12-003", + "package": "github.com/hashicorp/raft", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified", + "project": "Dapr" + }, + { + "id": "exc-2022-04-12-004", + "package": "github.com/hashicorp/raft-boltdb", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified", + "project": "Dapr" + }, + { + "id": "exc-2022-04-12-005", + "package": "github.com/Microsoft/tslib", + "license": "0BSD", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2022-04-12-006", + "package": "go-version", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2022-04-12-007", + "package": "paho.mqtt.golang", + "license": "EPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2022-04-12-008", + "package": "raft", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified", + "project": "Dapr" + }, + { + "id": "exc-2022-04-12-009", + "package": "raft-boltdb", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified", + "project": "Dapr" + }, + { + "id": "exc-2022-04-12-010", + "package": "tslib", + "license": "0BSD", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2022-04-12-011", + "package": "webpki-roots", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/172", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2021-07-19-001", + "package": "github.com/hashicorp/go-retryablehttp", + "license": "MPL-2.0", + "approvedDate": "2021-07-19", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19", + "results": "https://github.com/cncf/foundation/issues/138", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2021-07-19-002", + "package": "go-retryablehttp", + "license": "MPL-2.0", + "approvedDate": "2021-07-19", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19", + "results": "https://github.com/cncf/foundation/issues/138", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2019-11-01-001", + "package": "Chart.js", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-002", + "package": "cloud.google.com/go", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-003", + "package": "code.cloudfoundry.org/clock", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-004", + "package": "colors", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-005", + "package": "defusedxml", + "license": "Python-2.0", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-006", + "package": "ejs", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-007", + "package": "github.com/abbot/go-http-auth", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-008", + "package": "github.com/aclements/go-moremath", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-009", + "package": "github.com/andygrunwald/go-gerrit", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-010", + "package": "github.com/aokoli/goutils", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-011", + "package": "github.com/appc/spec", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-012", + "package": "github.com/armon/circbuf", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-013", + "package": "github.com/armon/go-proxyproto", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-014", + "package": "github.com/armon/go-radix", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-015", + "package": "github.com/asaskevich/govalidator", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-016", + "package": "github.com/aws/aws-k8s-tester", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-017", + "package": "github.com/aws/aws-sdk-go", + "license": "((MIT OR GPL-3.0) AND BSD-3-Clause AND Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-018", + "package": "github.com/Azure/azure-sdk-for-go", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-019", + "package": "github.com/Azure/azure-storage-blob-go", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-020", + "package": "github.com/Azure/go-ansiterm", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-021", + "package": "github.com/Azure/go-autorest", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-022", + "package": "github.com/bazelbuild/bazel-gazelle", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-023", + "package": "github.com/bazelbuild/buildtools", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-024", + "package": "github.com/beorn7/perks", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-025", + "package": "github.com/blang/semver", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-026", + "package": "github.com/bluebreezecf/opentsdb-goclient", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-027", + "package": "github.com/boltdb/bolt", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-028", + "package": "github.com/bwmarrin/snowflake", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-029", + "package": "github.com/chai2010/gettext-go", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-030", + "package": "github.com/cloudflare/cfssl", + "license": "(BSD-2-Clause AND BSD-3-Clause AND ISC)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-031", + "package": "github.com/cloudfoundry-incubator/candiedyaml", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-032", + "package": "github.com/clusterhq/flocker-go", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-033", + "package": "github.com/cockroachdb/cmux", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-034", + "package": "github.com/codedellemc/goscaleio", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-035", + "package": "github.com/container-storage-interface/spec", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-036", + "package": "github.com/containerd/console", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-037", + "package": "github.com/containerd/containerd", + "license": "(CC-BY-4.0 AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-038", + "package": "github.com/containernetworking/cni", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-039", + "package": "github.com/containernetworking/plugins", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-040", + "package": "github.com/coredns/coredns", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-041", + "package": "github.com/coreos/bbolt", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-042", + "package": "github.com/coreos/etcd", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-043", + "package": "github.com/coreos/go-etcd", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-044", + "package": "github.com/coreos/go-oidc", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-045", + "package": "github.com/coreos/go-semver", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-046", + "package": "github.com/coreos/go-systemd", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-047", + "package": "github.com/coreos/pkg", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-048", + "package": "github.com/coreos/rkt", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-049", + "package": "github.com/cpuguy83/go-md2man", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-050", + "package": "github.com/cyphar/filepath-securejoin", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-051", + "package": "github.com/daaku/go.zipexe", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-052", + "package": "github.com/davecgh/go-spew", + "license": "ISC", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-053", + "package": "github.com/daviddengcn/go-colortext", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-054", + "package": "github.com/dchest/safefile", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-055", + "package": "github.com/deckarep/golang-set", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-056", + "package": "github.com/denverdino/aliyungo", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-057", + "package": "github.com/dgrijalva/jwt-go", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-058", + "package": "github.com/digitalocean/godo", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-059", + "package": "github.com/djherbis/atime", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-060", + "package": "github.com/docker/cli", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-061", + "package": "github.com/docker/distribution", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-062", + "package": "github.com/docker/docker", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-063", + "package": "github.com/docker/engine-api", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-064", + "package": "github.com/docker/go-connections", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-065", + "package": "github.com/docker/libcompose", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-066", + "package": "github.com/docker/libnetwork", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-067", + "package": "github.com/docker/libtrust", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-068", + "package": "github.com/docker/machine", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-069", + "package": "github.com/dustin/go-humanize", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-070", + "package": "github.com/eapache/channels", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-071", + "package": "github.com/eapache/go-resiliency", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-072", + "package": "github.com/eapache/go-xerial-snappy", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-073", + "package": "github.com/eapache/queue", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-074", + "package": "github.com/elazarl/go-bindata-assetfs", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-075", + "package": "github.com/elazarl/goproxy", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-076", + "package": "github.com/emicklei/go-restful", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-077", + "package": "github.com/emicklei/go-restful-swagger12", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-078", + "package": "github.com/emirpasic/gods", + "license": "(BSD-2-Clause AND ISC)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-079", + "package": "github.com/euank/go-kmsg-parser", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-080", + "package": "github.com/evanphx/json-patch", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-081", + "package": "github.com/exponent-io/jsonpath", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-082", + "package": "github.com/fatih/camelcase", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-083", + "package": "github.com/fatih/structs", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-084", + "package": "github.com/flynn/go-shlex", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-085", + "package": "github.com/fsnotify/fsnotify", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-086", + "package": "github.com/fsouza/fake-gcs-server", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-087", + "package": "github.com/fsouza/go-dockerclient", + "license": "(BSD-2-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-088", + "package": "github.com/fullsailor/pkcs7", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-089", + "package": "github.com/GeertJohan/go.rice", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-090", + "package": "github.com/ghodss/yaml", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-091", + "package": "github.com/globalsign/mgo", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-092", + "package": "github.com/go-ini/ini", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-093", + "package": "github.com/go-openapi/analysis", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-094", + "package": "github.com/go-openapi/errors", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-095", + "package": "github.com/go-openapi/jsonpointer", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-096", + "package": "github.com/go-openapi/jsonreference", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-097", + "package": "github.com/go-openapi/loads", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-098", + "package": "github.com/go-openapi/runtime", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-099", + "package": "github.com/go-openapi/spec", + "license": "(CC-BY-4.0 AND Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-100", + "package": "github.com/go-openapi/strfmt", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-101", + "package": "github.com/go-openapi/swag", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-102", + "package": "github.com/go-openapi/validate", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-103", + "package": "github.com/go-ozzo/ozzo-validation", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-104", + "package": "github.com/go-yaml/yaml", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-105", + "package": "github.com/gobuffalo/envy", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-106", + "package": "github.com/godbus/dbus", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-107", + "package": "github.com/gogo/protobuf", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-108", + "package": "github.com/golang/dep", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-109", + "package": "github.com/golang/glog", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-110", + "package": "github.com/golang/groupcache", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-111", + "package": "github.com/golang/lint", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-112", + "package": "github.com/golang/mock", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-113", + "package": "github.com/golang/protobuf", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-114", + "package": "github.com/golang/snappy", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-115", + "package": "github.com/google/btree", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-116", + "package": "github.com/google/cadvisor", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-117", + "package": "github.com/google/certificate-transparency-go", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-118", + "package": "github.com/google/go-containerregistry", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-119", + "package": "github.com/google/go-querystring", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-120", + "package": "github.com/google/go-tpm", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-121", + "package": "github.com/google/gofuzz", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-122", + "package": "github.com/google/uuid", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-123", + "package": "github.com/googleapis/gax-go", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-124", + "package": "github.com/googleapis/gnostic", + "license": "(BSD-3-Clause AND Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-125", + "package": "github.com/GoogleCloudPlatform/gke-managed-certs", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-126", + "package": "github.com/gophercloud/gophercloud", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-127", + "package": "github.com/gorilla/context", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-128", + "package": "github.com/gorilla/mux", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-129", + "package": "github.com/gorilla/securecookie", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-130", + "package": "github.com/gorilla/sessions", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-131", + "package": "github.com/gorilla/websocket", + "license": "(BSD-2-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-132", + "package": "github.com/gregjones/httpcache", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-133", + "package": "github.com/grpc-ecosystem/go-grpc-middleware", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-134", + "package": "github.com/grpc-ecosystem/go-grpc-prometheus", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-135", + "package": "github.com/grpc-ecosystem/grpc-gateway", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-136", + "package": "github.com/hawkular/hawkular-client-go", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-137", + "package": "github.com/heketi/heketi REST API", + "license": "(Apache-2.0 OR LGPL-3.0-or-later)", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-138", + "package": "github.com/hpcloud/tail", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-139", + "package": "github.com/huandu/xstrings", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-140", + "package": "github.com/imdario/mergo", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-141", + "package": "github.com/inconshreveable/mousetrap", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-142", + "package": "github.com/influxdata/influxdb", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-143", + "package": "github.com/jimmidyson/go-download", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-144", + "package": "github.com/jinzhu/gorm", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-145", + "package": "github.com/jinzhu/inflection", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-146", + "package": "github.com/jmespath/go-jmespath", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-147", + "package": "github.com/jmhodges/clock", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-148", + "package": "github.com/jmoiron/sqlx", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-149", + "package": "github.com/joho/godotenv", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-150", + "package": "github.com/jonboulle/clockwork", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-151", + "package": "github.com/jpillora/backoff", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-152", + "package": "github.com/json-iterator/go", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-153", + "package": "github.com/kardianos/osext", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-154", + "package": "github.com/karrick/godirwalk", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-155", + "package": "github.com/kevinburke/ssh_config", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-156", + "package": "github.com/kisielk/sqlstruct", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-157", + "package": "github.com/knative/build", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-158", + "package": "github.com/kr/fs", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-159", + "package": "github.com/kr/pretty", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-160", + "package": "github.com/kr/pty", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-161", + "package": "github.com/kr/text", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-162", + "package": "github.com/kubernetes-incubator/apiserver-builder", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-163", + "package": "github.com/kubernetes-incubator/reference-docs", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-164", + "package": "github.com/kubernetes-sigs/application", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-165", + "package": "github.com/kubernetes/repo-infra", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-166", + "package": "github.com/kylelemons/godebug", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-167", + "package": "github.com/lib/pq", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-168", + "package": "github.com/libopenstorage/openstorage", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-169", + "package": "github.com/libvirt/libvirt-go", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-170", + "package": "github.com/libvirt/libvirt-go-xml", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-171", + "package": "github.com/lpabon/godbc", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-172", + "package": "github.com/lxn/win", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-173", + "package": "github.com/magiconair/properties", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-174", + "package": "github.com/mailru/easyjson", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-175", + "package": "github.com/MakeNowJust/heredoc", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-176", + "package": "github.com/markbates/inflect", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-177", + "package": "github.com/marpaia/graphite-golang", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-178", + "package": "github.com/Masterminds/semver", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-179", + "package": "github.com/Masterminds/sprig", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-180", + "package": "github.com/Masterminds/vcs", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-181", + "package": "github.com/mattn/go-runewidth", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-182", + "package": "github.com/mattn/go-shellwords", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-183", + "package": "github.com/mattn/go-zglob", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-184", + "package": "github.com/matttproud/golang_protobuf_extensions", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-185", + "package": "github.com/mesos/mesos-go", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-186", + "package": "github.com/mholt/caddy", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-187", + "package": "github.com/Microsoft/go-winio", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-188", + "package": "github.com/Microsoft/hcsshim", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-189", + "package": "github.com/miekg/coredns", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-190", + "package": "github.com/miekg/dns", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-191", + "package": "github.com/mindprince/gonvml", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-192", + "package": "github.com/mistifyio/go-zfs", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-193", + "package": "github.com/mitchellh/go-homedir", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-194", + "package": "github.com/mitchellh/go-ps", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-195", + "package": "github.com/mitchellh/go-wordwrap", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-196", + "package": "github.com/mitchellh/hashstructure", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-197", + "package": "github.com/mitchellh/mapstructure", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-198", + "package": "github.com/moby/hyperkit", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-199", + "package": "github.com/modern-go/concurrent", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-200", + "package": "github.com/modern-go/reflect2", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-201", + "package": "github.com/mohae/deepcopy", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-202", + "package": "github.com/moul/http2curl", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-203", + "package": "github.com/mrunalp/fileutils", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-204", + "package": "github.com/mvdan/xurls", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-205", + "package": "github.com/mxk/go-flowrate", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-206", + "package": "github.com/ncabatoff/process-exporter", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-207", + "package": "github.com/nightlyone/lockfile", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-208", + "package": "github.com/novln/docker-parser", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-209", + "package": "github.com/NYTimes/gziphandler", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-210", + "package": "github.com/olekukonko/tablewriter", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-211", + "package": "github.com/onsi/ginkgo", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-212", + "package": "github.com/onsi/gomega", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-213", + "package": "github.com/opencontainers/image-spec", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-214", + "package": "github.com/opencontainers/runtime-spec", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-215", + "package": "github.com/opencontainers/selinux", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-216", + "package": "github.com/openshift/origin", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-217", + "package": "github.com/opentracing/opentracing-go", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-218", + "package": "github.com/parnurzeal/gorequest", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-219", + "package": "github.com/patrickmn/go-cache", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-220", + "package": "github.com/paultag/sniff", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-221", + "package": "github.com/pborman/uuid", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-222", + "package": "github.com/pelletier/go-buffruneio", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-223", + "package": "github.com/pelletier/go-toml", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-224", + "package": "github.com/petar/GoLLRB", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-225", + "package": "github.com/peterbourgon/diskv", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-226", + "package": "github.com/pierrec/lz4", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-227", + "package": "github.com/pierrec/xxHash", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-228", + "package": "github.com/pkg/browser", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-229", + "package": "github.com/pkg/errors", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-230", + "package": "github.com/pkg/profile", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-231", + "package": "github.com/pkg/sftp", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-232", + "package": "github.com/pmezard/go-difflib", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-233", + "package": "github.com/pquerna/cachecontrol", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-234", + "package": "github.com/pquerna/ffjson", + "license": "(BSD-3-Clause AND Apache-2.0 AND ISC)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-235", + "package": "github.com/prometheus/client_golang", + "license": "(BSD-3-Clause AND Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-236", + "package": "github.com/prometheus/client_model", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-237", + "package": "github.com/prometheus/common", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-238", + "package": "github.com/prometheus/procfs", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-239", + "package": "github.com/PuerkitoBio/purell", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-240", + "package": "github.com/PuerkitoBio/urlesc", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-241", + "package": "github.com/r2d4/external-storage", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-242", + "package": "github.com/rackspace/gophercloud", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-243", + "package": "github.com/rancher/go-rancher", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-244", + "package": "github.com/rcrowley/go-metrics", + "license": "BSD-2-Clause-FreeBSD", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-245", + "package": "github.com/renstrom/dedent", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-246", + "package": "github.com/Rican7/retry", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-247", + "package": "github.com/riemann/riemann-go-client", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-248", + "package": "github.com/robfig/cron", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-249", + "package": "github.com/russross/blackfriday", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-250", + "package": "github.com/samalba/dockerclient", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-251", + "package": "github.com/satori/go.uuid", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-252", + "package": "github.com/scalingdata/gcfg", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-253", + "package": "github.com/sdboyer/constext", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-254", + "package": "github.com/seccomp/libseccomp-golang", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-255", + "package": "github.com/sergi/go-diff", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-256", + "package": "github.com/Shopify/sarama", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-257", + "package": "github.com/shurcooL/githubv4", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-258", + "package": "github.com/shurcooL/go", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-259", + "package": "github.com/shurcooL/graphql", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-260", + "package": "github.com/shurcooL/sanitized_anchor_name", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-261", + "package": "github.com/sirupsen/logrus", + "license": "(BSD-2-Clause AND BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-262", + "package": "github.com/skynetservices/skydns", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-263", + "package": "github.com/smartystreets/go-aws-auth", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-264", + "package": "github.com/soheilhy/cmux", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-265", + "package": "github.com/spf13/afero", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-266", + "package": "github.com/spf13/cast", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-267", + "package": "github.com/spf13/cobra", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-268", + "package": "github.com/spf13/jwalterweatherman", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-269", + "package": "github.com/spf13/pflag", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-270", + "package": "github.com/spf13/viper", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-271", + "package": "github.com/storageos/go-api", + "license": "(BSD-2-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-272", + "package": "github.com/streadway/quantile", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-273", + "package": "github.com/stretchr/objx", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-274", + "package": "github.com/stretchr/testify", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-275", + "package": "github.com/syndtr/gocapability", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-276", + "package": "github.com/tchap/go-patricia", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-277", + "package": "github.com/thockin/glogr", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-278", + "package": "github.com/thockin/logr", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-279", + "package": "github.com/tmc/grpc-websocket-proxy", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-280", + "package": "github.com/tsenart/vegeta", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-281", + "package": "github.com/ugorji/go", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-282", + "package": "github.com/Unknwon/goconfig", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-283", + "package": "github.com/urfave/cli", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-284", + "package": "github.com/vishvananda/netlink", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-285", + "package": "github.com/vishvananda/netns", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-286", + "package": "github.com/vmware/govmomi", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-287", + "package": "github.com/vmware/photon-controller-go-sdk", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-288", + "package": "github.com/weaveworks/mesh", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-289", + "package": "github.com/xanzy/go-cloudstack", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-290", + "package": "github.com/xeipuuv/gojsonpointer", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-291", + "package": "github.com/xeipuuv/gojsonreference", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-292", + "package": "github.com/xeipuuv/gojsonschema", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-293", + "package": "github.com/xiang90/probing", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-294", + "package": "github.com/zakjan/cert-chain-resolver", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-295", + "package": "github.com/ziutek/syslog", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-296", + "package": "go.opencensus.io", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-297", + "package": "go.uber.org/atomic", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-298", + "package": "go.uber.org/multierr", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-299", + "package": "go.uber.org/zap", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-300", + "package": "go4.org/errorutil", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-301", + "package": "golang.org/x/build", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-302", + "package": "golang.org/x/exp", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-303", + "package": "golang.org/x/lint", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-304", + "package": "golang.org/x/oauth2", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-305", + "package": "golang.org/x/sync", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-306", + "package": "golang.org/x/sys", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-307", + "package": "golang.org/x/text", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-308", + "package": "golang.org/x/time", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-309", + "package": "golang.org/x/tools", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause AND Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-310", + "package": "golang/archive/tar", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-311", + "package": "gonum.org/v1/gonum", + "license": "((BSD-3-Clause OR CC0-1.0) AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-312", + "package": "google.golang.org/cloud", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-313", + "package": "google.golang.org/genproto", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-314", + "package": "gopkg.in/check.v1", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-315", + "package": "gopkg.in/cheggaaa/pb.v1", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-316", + "package": "gopkg.in/fsnotify", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-317", + "package": "gopkg.in/gcfg.v1", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-318", + "package": "gopkg.in/go-playground/pool.v3", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-319", + "package": "gopkg.in/igm/sockjs-go.v2", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-320", + "package": "gopkg.in/inf.v0", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-321", + "package": "gopkg.in/natefinch/lumberjack.v2", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-322", + "package": "gopkg.in/olivere/elastic.v3", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-323", + "package": "gopkg.in/olivere/elastic.v5", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-324", + "package": "gopkg.in/robfig/cron.v2", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-325", + "package": "gopkg.in/square/go-jose.v2", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-326", + "package": "gopkg.in/src-d", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-327", + "package": "gopkg.in/tomb.v1", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-328", + "package": "jquery.scrollto", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-329", + "package": "marked", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-330", + "package": "mime", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-331", + "package": "minimist", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-332", + "package": "node-static", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-333", + "package": "optimist", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-334", + "package": "ui-router for Angular", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-335", + "package": "vbom.ml/util", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-336", + "package": "wordwrap", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-05-20-001", + "package": "VirtualBox Linux Guest Drivers Makefile", + "license": "GPL-2.0-only", + "approvedDate": "2019-05-20", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-05-20" + }, + { + "id": "exc-2019-03-11-001", + "package": "Angular", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-002", + "package": "Asciidoctor", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-003", + "package": "Azure acr-docker-credential-helper", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-004", + "package": "Backbone", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-005", + "package": "bitbucket.org/bertimus9/systemstat", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-006", + "package": "bitbucket.org/ww/goautoneg", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-007", + "package": "bootstrap", + "license": "(CC-BY-3.0 AND MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-008", + "package": "dialog-polyfill.css", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-009", + "package": "font-awesome", + "license": "(CC-BY-3.0 AND MIT AND OFL-1.1)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-010", + "package": "Gingko", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-011", + "package": "github.com/Azure/azure-pipeline-go", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-012", + "package": "github.com/bungle/lua-resty-template", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-013", + "package": "github.com/c4milo/gotoolkit", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-014", + "package": "github.com/client9/misspell", + "license": "(Unlicense AND BSD-3-Clause AND MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-015", + "package": "github.com/d2g/dhcp4", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-016", + "package": "github.com/d2g/dhcp4client", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-017", + "package": "github.com/dgryski/go-onlinestats", + "license": "(MIT AND LicenseRef-Public-domain-statement)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-018", + "package": "github.com/docker/go-units", + "license": "(CC-BY-SA-4.0 AND CC-BY-4.0 AND Apache-2.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-019", + "package": "github.com/docker/spdystream", + "license": "(CC-BY-SA-4.0 AND CC-BY-4.0 AND BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-020", + "package": "github.com/go-sql-driver/mysql", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-021", + "package": "github.com/gonum/graph", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-022", + "package": "github.com/google/go-github", + "license": "(BSD-3-Clause AND CC-BY-3.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-023", + "package": "github.com/grpc-ecosystem/grpc-opentracing", + "license": "(BSD-3-Clause AND LicenseRef-Google-Patents-Notice-GRPC)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-024", + "package": "github.com/hashicorp/errwrap", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-025", + "package": "github.com/hashicorp/go-cleanhttp", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-026", + "package": "github.com/hashicorp/go-multierror", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-027", + "package": "github.com/hashicorp/golang-lru", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-028", + "package": "github.com/hashicorp/hcl", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-029", + "package": "github.com/hooklift/iso9660", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-030", + "package": "github.com/howeyc/gopass", + "license": "(ISC AND CDDL-1.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-031", + "package": "github.com/jbenet/go-context", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-032", + "package": "github.com/JeffAshton/win_pdh", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-033", + "package": "github.com/jmank88/nuts", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-034", + "package": "github.com/johanneswuerbach/nfsexports", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-035", + "package": "github.com/joshdk/go-junit", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-036", + "package": "github.com/jteeuwen/go-bindata", + "license": "CC0-1.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-037", + "package": "github.com/konsorten/go-windows-terminal-sequences", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-038", + "package": "github.com/marstr/guid", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-039", + "package": "github.com/mattn/go-sqlite3", + "license": "(MIT AND LicenseRef-Public-domain-statement)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-040", + "package": "github.com/multiarch/qemu-user-static", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-041", + "package": "github.com/Nvveen/Gotty", + "license": "BSD-2-Clause-FreeBSD", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-042", + "package": "github.com/opencontainers/go-digest", + "license": "(CC-BY-SA-4.0 AND CC-BY-4.0 AND Apache-2.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-043", + "package": "github.com/opencontainers/runc", + "license": "(LicenseRef-CC-unspecified AND Apache-2.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-044", + "package": "github.com/quobyte/api", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-045", + "package": "github.com/rubiojr/go-vhd", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-046", + "package": "github.com/sigma/go-inotify", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-047", + "package": "github.com/spotinst/spotinst-sdk-go", + "license": "(BSD-3-Clause AND Apache-2.0 AND MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-048", + "package": "github.com/src-d/gcfg", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-049", + "package": "github.com/tent/http-link-go", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-050", + "package": "github.com/xanzy/ssh-agent", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-051", + "package": "github.com/zchee/go-vmnet", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-052", + "package": "go-srcimporter", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-053", + "package": "go9p", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-054", + "package": "godep", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-055", + "package": "golang.org/x/crypto", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause AND MIT AND LicenseRef-Public-domain-statement)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-056", + "package": "golang.org/x/net", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-2-Clause AND BSD-3-Clause AND CC-BY-3.0 AND (BSD-3-Clause OR LicenseRef-W3C-Test-Suite-License-1))", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-057", + "package": "golang/expansion", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-058", + "package": "golang/go/types", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-059", + "package": "golang/internal/srcimporter", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-060", + "package": "golang/json", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-061", + "package": "golang/netutil", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-062", + "package": "golang/reflect", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-063", + "package": "golang/template", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-064", + "package": "Google Protocol Buffers", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-065", + "package": "google.golang.org/api", + "license": "(BSD-3-Clause AND Apache-2.0 AND MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-066", + "package": "google.golang.org/appengine", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-067", + "package": "google.golang.org/grpc", + "license": "(BSD-3-Clause AND Apache-2.0 AND LicenseRef-Google-Patents-Notice-GRPC)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-068", + "package": "gopkg.in/warnings.v0", + "license": "BSD-2-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-069", + "package": "Handlebars", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-070", + "package": "Highlight", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-071", + "package": "highlight.js", + "license": "(BSD-3-Clause AND MIT AND CC0-1.0 AND LicenseRef-Public-domain-statement)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-072", + "package": "htpasswd", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-073", + "package": "jQuery", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-074", + "package": "jQuery BBQ", + "license": "(MIT OR GPL-2.0+)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-075", + "package": "jQuery hashchange event", + "license": "(GPL-2.0+ OR MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-076", + "package": "jQuery Slideto", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-077", + "package": "jQuery Wiggle", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-078", + "package": "moment.js", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-079", + "package": "normalize.css", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-080", + "package": "Octicons", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-081", + "package": "parseUri", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-082", + "package": "Pause", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-083", + "package": "Pure CSS", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-084", + "package": "shred", + "license": "ISC", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-085", + "package": "sigs.k8s.io/yaml", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "fork of github.com/ghodss/yaml; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-086", + "package": "speter.net/go/exp", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-087", + "package": "sprintf() for JavaScript", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-088", + "package": "Underscore.js", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + } + ] +} \ No newline at end of file diff --git a/license-exceptions/package-lock.json b/license-exceptions/package-lock.json new file mode 100644 index 00000000..9c23ffae --- /dev/null +++ b/license-exceptions/package-lock.json @@ -0,0 +1,1125 @@ +{ + "name": "license-exceptions", + "version": "1.0.0", + "lockfileVersion": 3, + "requires": true, + "packages": { + "": { + "name": "license-exceptions", + "version": "1.0.0", + "license": "ISC", + "devDependencies": { + "@playwright/test": "^1.58.1", + "serve": "^14.2.5" + } + }, + "node_modules/@playwright/test": { + "version": "1.58.1", + "resolved": "https://registry.npmjs.org/@playwright/test/-/test-1.58.1.tgz", + "integrity": "sha512-6LdVIUERWxQMmUSSQi0I53GgCBYgM2RpGngCPY7hSeju+VrKjq3lvs7HpJoPbDiY5QM5EYRtRX5fvrinnMAz3w==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "playwright": "1.58.1" + }, + "bin": { + "playwright": "cli.js" + }, + "engines": { + "node": ">=18" + } + }, + "node_modules/@zeit/schemas": { + "version": "2.36.0", + "resolved": "https://registry.npmjs.org/@zeit/schemas/-/schemas-2.36.0.tgz", + "integrity": "sha512-7kjMwcChYEzMKjeex9ZFXkt1AyNov9R5HZtjBKVsmVpw7pa7ZtlCGvCBC2vnnXctaYN+aRI61HjIqeetZW5ROg==", + "dev": true, + "license": "MIT" + }, + "node_modules/ajv": { + "version": "8.12.0", + "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.12.0.tgz", + "integrity": "sha512-sRu1kpcO9yLtYxBKvqfTeh9KzZEwO3STyX1HT+4CaDzC6HpTGYhIhPIzj9XuKU7KYDwnaeh5hcOwjy1QuJzBPA==", + "dev": true, + "license": "MIT", + "dependencies": { + "fast-deep-equal": "^3.1.1", + "json-schema-traverse": "^1.0.0", + "require-from-string": "^2.0.2", + "uri-js": "^4.2.2" + }, + "funding": { + "type": "github", + "url": "https://github.com/sponsors/epoberezkin" + } + }, + "node_modules/ansi-align": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/ansi-align/-/ansi-align-3.0.1.tgz", + "integrity": "sha512-IOfwwBF5iczOjp/WeY4YxyjqAFMQoZufdQWDd19SEExbVLNXqvpzSJ/M7Za4/sCPmQ0+GRquoA7bGcINcxew6w==", + "dev": true, + "license": "ISC", + "dependencies": { + "string-width": "^4.1.0" + } + }, + "node_modules/ansi-align/node_modules/ansi-regex": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz", + "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/ansi-align/node_modules/emoji-regex": { + "version": "8.0.0", + "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==", + "dev": true, + "license": "MIT" + }, + "node_modules/ansi-align/node_modules/string-width": { + "version": "4.2.3", + "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==", + "dev": true, + "license": "MIT", + "dependencies": { + "emoji-regex": "^8.0.0", + "is-fullwidth-code-point": "^3.0.0", + "strip-ansi": "^6.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/ansi-align/node_modules/strip-ansi": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-regex": "^5.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/ansi-regex": { + "version": "6.2.2", + "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.2.2.tgz", + "integrity": "sha512-Bq3SmSpyFHaWjPk8If9yc6svM8c56dB5BAtW4Qbw5jHTwwXXcTLoRMkpDJp6VL0XzlWaCHTXrkFURMYmD0sLqg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/ansi-regex?sponsor=1" + } + }, + "node_modules/ansi-styles": { + "version": "6.2.3", + "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.3.tgz", + "integrity": "sha512-4Dj6M28JB+oAH8kFkTLUo+a2jwOFkuqb3yucU0CANcRRUbxS0cP0nZYCGjcc3BNXwRIsUVmDGgzawme7zvJHvg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/ansi-styles?sponsor=1" + } + }, + "node_modules/arch": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/arch/-/arch-2.2.0.tgz", + "integrity": "sha512-Of/R0wqp83cgHozfIYLbBMnej79U/SVGOOyuB3VVFv1NRM/PSFMK12x9KVtiYzJqmnU5WR2qp0Z5rHb7sWGnFQ==", + "dev": true, + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/feross" + }, + { + "type": "patreon", + "url": "https://www.patreon.com/feross" + }, + { + "type": "consulting", + "url": "https://feross.org/support" + } + ], + "license": "MIT" + }, + "node_modules/arg": { + "version": "5.0.2", + "resolved": "https://registry.npmjs.org/arg/-/arg-5.0.2.tgz", + "integrity": "sha512-PYjyFOLKQ9y57JvQ6QLo8dAgNqswh8M1RMJYdQduT6xbWSgK36P/Z/v+p888pM69jMMfS8Xd8F6I1kQ/I9HUGg==", + "dev": true, + "license": "MIT" + }, + "node_modules/balanced-match": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz", + "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==", + "dev": true, + "license": "MIT" + }, + "node_modules/boxen": { + "version": "7.0.0", + "resolved": "https://registry.npmjs.org/boxen/-/boxen-7.0.0.tgz", + "integrity": "sha512-j//dBVuyacJbvW+tvZ9HuH03fZ46QcaKvvhZickZqtB271DxJ7SNRSNxrV/dZX0085m7hISRZWbzWlJvx/rHSg==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-align": "^3.0.1", + "camelcase": "^7.0.0", + "chalk": "^5.0.1", + "cli-boxes": "^3.0.0", + "string-width": "^5.1.2", + "type-fest": "^2.13.0", + "widest-line": "^4.0.1", + "wrap-ansi": "^8.0.1" + }, + "engines": { + "node": ">=14.16" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/brace-expansion": { + "version": "1.1.12", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz", + "integrity": "sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==", + "dev": true, + "license": "MIT", + "dependencies": { + "balanced-match": "^1.0.0", + "concat-map": "0.0.1" + } + }, + "node_modules/bytes": { + "version": "3.1.2", + "resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz", + "integrity": "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/camelcase": { + "version": "7.0.1", + "resolved": "https://registry.npmjs.org/camelcase/-/camelcase-7.0.1.tgz", + "integrity": "sha512-xlx1yCK2Oc1APsPXDL2LdlNP6+uu8OCDdhOBSVT279M/S+y75O30C2VuD8T2ogdePBBl7PfPF4504tnLgX3zfw==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=14.16" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/chalk": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/chalk/-/chalk-5.0.1.tgz", + "integrity": "sha512-Fo07WOYGqMfCWHOzSXOt2CxDbC6skS/jO9ynEcmpANMoPrD+W1r1K6Vx7iNm+AQmETU1Xr2t+n8nzkV9t6xh3w==", + "dev": true, + "license": "MIT", + "engines": { + "node": "^12.17.0 || ^14.13 || >=16.0.0" + }, + "funding": { + "url": "https://github.com/chalk/chalk?sponsor=1" + } + }, + "node_modules/chalk-template": { + "version": "0.4.0", + "resolved": "https://registry.npmjs.org/chalk-template/-/chalk-template-0.4.0.tgz", + "integrity": "sha512-/ghrgmhfY8RaSdeo43hNXxpoHAtxdbskUHjPpfqUWGttFgycUhYPGx3YZBCnUCvOa7Doivn1IZec3DEGFoMgLg==", + "dev": true, + "license": "MIT", + "dependencies": { + "chalk": "^4.1.2" + }, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/chalk-template?sponsor=1" + } + }, + "node_modules/chalk-template/node_modules/ansi-styles": { + "version": "4.3.0", + "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz", + "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==", + "dev": true, + "license": "MIT", + "dependencies": { + "color-convert": "^2.0.1" + }, + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/chalk/ansi-styles?sponsor=1" + } + }, + "node_modules/chalk-template/node_modules/chalk": { + "version": "4.1.2", + "resolved": "https://registry.npmjs.org/chalk/-/chalk-4.1.2.tgz", + "integrity": "sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-styles": "^4.1.0", + "supports-color": "^7.1.0" + }, + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/chalk/chalk?sponsor=1" + } + }, + "node_modules/cli-boxes": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/cli-boxes/-/cli-boxes-3.0.0.tgz", + "integrity": "sha512-/lzGpEWL/8PfI0BmBOPRwp0c/wFNX1RdUML3jK/RcSBA9T8mZDdQpqYBKtCFTOfQbwPqWEOpjqW+Fnayc0969g==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/clipboardy": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/clipboardy/-/clipboardy-3.0.0.tgz", + "integrity": "sha512-Su+uU5sr1jkUy1sGRpLKjKrvEOVXgSgiSInwa/qeID6aJ07yh+5NWc3h2QfjHjBnfX4LhtFcuAWKUsJ3r+fjbg==", + "dev": true, + "license": "MIT", + "dependencies": { + "arch": "^2.2.0", + "execa": "^5.1.1", + "is-wsl": "^2.2.0" + }, + "engines": { + "node": "^12.20.0 || ^14.13.1 || >=16.0.0" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/color-convert": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz", + "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "color-name": "~1.1.4" + }, + "engines": { + "node": ">=7.0.0" + } + }, + "node_modules/color-name": { + "version": "1.1.4", + "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz", + "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==", + "dev": true, + "license": "MIT" + }, + "node_modules/compressible": { + "version": "2.0.18", + "resolved": "https://registry.npmjs.org/compressible/-/compressible-2.0.18.tgz", + "integrity": "sha512-AF3r7P5dWxL8MxyITRMlORQNaOA2IkAFaTr4k7BUumjPtRpGDTZpl0Pb1XCO6JeDCBdp126Cgs9sMxqSjgYyRg==", + "dev": true, + "license": "MIT", + "dependencies": { + "mime-db": ">= 1.43.0 < 2" + }, + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/compression": { + "version": "1.8.1", + "resolved": "https://registry.npmjs.org/compression/-/compression-1.8.1.tgz", + "integrity": "sha512-9mAqGPHLakhCLeNyxPkK4xVo746zQ/czLH1Ky+vkitMnWfWZps8r0qXuwhwizagCRttsL4lfG4pIOvaWLpAP0w==", + "dev": true, + "license": "MIT", + "dependencies": { + "bytes": "3.1.2", + "compressible": "~2.0.18", + "debug": "2.6.9", + "negotiator": "~0.6.4", + "on-headers": "~1.1.0", + "safe-buffer": "5.2.1", + "vary": "~1.1.2" + }, + "engines": { + "node": ">= 0.8.0" + } + }, + "node_modules/concat-map": { + "version": "0.0.1", + "resolved": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz", + "integrity": "sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==", + "dev": true, + "license": "MIT" + }, + "node_modules/content-disposition": { + "version": "0.5.2", + "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.2.tgz", + "integrity": "sha512-kRGRZw3bLlFISDBgwTSA1TMBFN6J6GWDeubmDE3AF+3+yXL8hTWv8r5rkLbqYXY4RjPk/EzHnClI3zQf1cFmHA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/cross-spawn": { + "version": "7.0.6", + "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz", + "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==", + "dev": true, + "license": "MIT", + "dependencies": { + "path-key": "^3.1.0", + "shebang-command": "^2.0.0", + "which": "^2.0.1" + }, + "engines": { + "node": ">= 8" + } + }, + "node_modules/debug": { + "version": "2.6.9", + "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz", + "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==", + "dev": true, + "license": "MIT", + "dependencies": { + "ms": "2.0.0" + } + }, + "node_modules/deep-extend": { + "version": "0.6.0", + "resolved": "https://registry.npmjs.org/deep-extend/-/deep-extend-0.6.0.tgz", + "integrity": "sha512-LOHxIOaPYdHlJRtCQfDIVZtfw/ufM8+rVj649RIHzcm/vGwQRXFt6OPqIFWsm2XEMrNIEtWR64sY1LEKD2vAOA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=4.0.0" + } + }, + "node_modules/eastasianwidth": { + "version": "0.2.0", + "resolved": "https://registry.npmjs.org/eastasianwidth/-/eastasianwidth-0.2.0.tgz", + "integrity": "sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA==", + "dev": true, + "license": "MIT" + }, + "node_modules/emoji-regex": { + "version": "9.2.2", + "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-9.2.2.tgz", + "integrity": "sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg==", + "dev": true, + "license": "MIT" + }, + "node_modules/execa": { + "version": "5.1.1", + "resolved": "https://registry.npmjs.org/execa/-/execa-5.1.1.tgz", + "integrity": "sha512-8uSpZZocAZRBAPIEINJj3Lo9HyGitllczc27Eh5YYojjMFMn8yHMDMaUHE2Jqfq05D/wucwI4JGURyXt1vchyg==", + "dev": true, + "license": "MIT", + "dependencies": { + "cross-spawn": "^7.0.3", + "get-stream": "^6.0.0", + "human-signals": "^2.1.0", + "is-stream": "^2.0.0", + "merge-stream": "^2.0.0", + "npm-run-path": "^4.0.1", + "onetime": "^5.1.2", + "signal-exit": "^3.0.3", + "strip-final-newline": "^2.0.0" + }, + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sindresorhus/execa?sponsor=1" + } + }, + "node_modules/fast-deep-equal": { + "version": "3.1.3", + "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz", + "integrity": "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==", + "dev": true, + "license": "MIT" + }, + "node_modules/fsevents": { + "version": "2.3.2", + "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz", + "integrity": "sha512-xiqMQR4xAeHTuB9uWm+fFRcIOgKBMiOBP+eXiyT7jsgVCq1bkVygt00oASowB7EdtpOHaaPgKt812P9ab+DDKA==", + "dev": true, + "hasInstallScript": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": "^8.16.0 || ^10.6.0 || >=11.0.0" + } + }, + "node_modules/get-stream": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/get-stream/-/get-stream-6.0.1.tgz", + "integrity": "sha512-ts6Wi+2j3jQjqi70w5AlN8DFnkSwC+MqmxEzdEALB2qXZYV3X/b1CTfgPLGJNMeAWxdPfU8FO1ms3NUfaHCPYg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/has-flag": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz", + "integrity": "sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/human-signals": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/human-signals/-/human-signals-2.1.0.tgz", + "integrity": "sha512-B4FFZ6q/T2jhhksgkbEW3HBvWIfDW85snkQgawt07S7J5QXTk6BkNV+0yAeZrM5QpMAdYlocGoljn0sJ/WQkFw==", + "dev": true, + "license": "Apache-2.0", + "engines": { + "node": ">=10.17.0" + } + }, + "node_modules/ini": { + "version": "1.3.8", + "resolved": "https://registry.npmjs.org/ini/-/ini-1.3.8.tgz", + "integrity": "sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==", + "dev": true, + "license": "ISC" + }, + "node_modules/is-docker": { + "version": "2.2.1", + "resolved": "https://registry.npmjs.org/is-docker/-/is-docker-2.2.1.tgz", + "integrity": "sha512-F+i2BKsFrH66iaUFc0woD8sLy8getkwTwtOBjvs56Cx4CgJDeKQeqfz8wAYiSb8JOprWhHH5p77PbmYCvvUuXQ==", + "dev": true, + "license": "MIT", + "bin": { + "is-docker": "cli.js" + }, + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/is-fullwidth-code-point": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz", + "integrity": "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/is-port-reachable": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/is-port-reachable/-/is-port-reachable-4.0.0.tgz", + "integrity": "sha512-9UoipoxYmSk6Xy7QFgRv2HDyaysmgSG75TFQs6S+3pDM7ZhKTF/bskZV+0UlABHzKjNVhPjYCLfeZUEg1wXxig==", + "dev": true, + "license": "MIT", + "engines": { + "node": "^12.20.0 || ^14.13.1 || >=16.0.0" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/is-stream": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/is-stream/-/is-stream-2.0.1.tgz", + "integrity": "sha512-hFoiJiTl63nn+kstHGBtewWSKnQLpyb155KHheA1l39uvtO9nWIop1p3udqPcUd/xbF1VLMO4n7OI6p7RbngDg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/is-wsl": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/is-wsl/-/is-wsl-2.2.0.tgz", + "integrity": "sha512-fKzAra0rGJUUBwGBgNkHZuToZcn+TtXHpeCgmkMJMMYx1sQDYaCSyjJBSCa2nH1DGm7s3n1oBnohoVTBaN7Lww==", + "dev": true, + "license": "MIT", + "dependencies": { + "is-docker": "^2.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/isexe": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz", + "integrity": "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==", + "dev": true, + "license": "ISC" + }, + "node_modules/json-schema-traverse": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz", + "integrity": "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==", + "dev": true, + "license": "MIT" + }, + "node_modules/merge-stream": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/merge-stream/-/merge-stream-2.0.0.tgz", + "integrity": "sha512-abv/qOcuPfk3URPfDzmZU1LKmuw8kT+0nIHvKrKgFrwifol/doWcdA4ZqsWQ8ENrFKkd67Mfpo/LovbIUsbt3w==", + "dev": true, + "license": "MIT" + }, + "node_modules/mime-db": { + "version": "1.54.0", + "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.54.0.tgz", + "integrity": "sha512-aU5EJuIN2WDemCcAp2vFBfp/m4EAhWJnUNSSw0ixs7/kXbd6Pg64EmwJkNdFhB8aWt1sH2CTXrLxo/iAGV3oPQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/mime-types": { + "version": "2.1.18", + "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.18.tgz", + "integrity": "sha512-lc/aahn+t4/SWV/qcmumYjymLsWfN3ELhpmVuUFjgsORruuZPVSwAQryq+HHGvO/SI2KVX26bx+En+zhM8g8hQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "mime-db": "~1.33.0" + }, + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/mime-types/node_modules/mime-db": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.33.0.tgz", + "integrity": "sha512-BHJ/EKruNIqJf/QahvxwQZXKygOQ256myeN/Ew+THcAa5q+PjyTTMMeNQC4DZw5AwfvelsUrA6B67NKMqXDbzQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/mimic-fn": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-2.1.0.tgz", + "integrity": "sha512-OqbOk5oEQeAZ8WXWydlu9HJjz9WVdEIvamMCcXmuqUYjTknH/sqsWvhQ3vgwKFRR1HpjvNBKQ37nbJgYzGqGcg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/minimatch": { + "version": "3.1.2", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz", + "integrity": "sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==", + "dev": true, + "license": "ISC", + "dependencies": { + "brace-expansion": "^1.1.7" + }, + "engines": { + "node": "*" + } + }, + "node_modules/minimist": { + "version": "1.2.8", + "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz", + "integrity": "sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==", + "dev": true, + "license": "MIT", + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/ms": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz", + "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==", + "dev": true, + "license": "MIT" + }, + "node_modules/negotiator": { + "version": "0.6.4", + "resolved": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.4.tgz", + "integrity": "sha512-myRT3DiWPHqho5PrJaIRyaMv2kgYf0mUVgBNOYMuCH5Ki1yEiQaf/ZJuQ62nvpc44wL5WDbTX7yGJi1Neevw8w==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/npm-run-path": { + "version": "4.0.1", + "resolved": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-4.0.1.tgz", + "integrity": "sha512-S48WzZW777zhNIrn7gxOlISNAqi9ZC/uQFnRdbeIHhZhCA6UqpkOT8T1G7BvfdgP4Er8gF4sUbaS0i7QvIfCWw==", + "dev": true, + "license": "MIT", + "dependencies": { + "path-key": "^3.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/on-headers": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/on-headers/-/on-headers-1.1.0.tgz", + "integrity": "sha512-737ZY3yNnXy37FHkQxPzt4UZ2UWPWiCZWLvFZ4fu5cueciegX0zGPnrlY6bwRg4FdQOe9YU8MkmJwGhoMybl8A==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/onetime": { + "version": "5.1.2", + "resolved": "https://registry.npmjs.org/onetime/-/onetime-5.1.2.tgz", + "integrity": "sha512-kbpaSSGJTWdAY5KPVeMOKXSrPtr8C8C7wodJbcsd51jRnmD+GZu8Y0VoU6Dm5Z4vWr0Ig/1NKuWRKf7j5aaYSg==", + "dev": true, + "license": "MIT", + "dependencies": { + "mimic-fn": "^2.1.0" + }, + "engines": { + "node": ">=6" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/path-is-inside": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/path-is-inside/-/path-is-inside-1.0.2.tgz", + "integrity": "sha512-DUWJr3+ULp4zXmol/SZkFf3JGsS9/SIv+Y3Rt93/UjPpDpklB5f1er4O3POIbUuUJ3FXgqte2Q7SrU6zAqwk8w==", + "dev": true, + "license": "(WTFPL OR MIT)" + }, + "node_modules/path-key": { + "version": "3.1.1", + "resolved": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz", + "integrity": "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/path-to-regexp": { + "version": "3.3.0", + "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-3.3.0.tgz", + "integrity": "sha512-qyCH421YQPS2WFDxDjftfc1ZR5WKQzVzqsp4n9M2kQhVOo/ByahFoUNJfl58kOcEGfQ//7weFTDhm+ss8Ecxgw==", + "dev": true, + "license": "MIT" + }, + "node_modules/playwright": { + "version": "1.58.1", + "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.58.1.tgz", + "integrity": "sha512-+2uTZHxSCcxjvGc5C891LrS1/NlxglGxzrC4seZiVjcYVQfUa87wBL6rTDqzGjuoWNjnBzRqKmF6zRYGMvQUaQ==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "playwright-core": "1.58.1" + }, + "bin": { + "playwright": "cli.js" + }, + "engines": { + "node": ">=18" + }, + "optionalDependencies": { + "fsevents": "2.3.2" + } + }, + "node_modules/playwright-core": { + "version": "1.58.1", + "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.58.1.tgz", + "integrity": "sha512-bcWzOaTxcW+VOOGBCQgnaKToLJ65d6AqfLVKEWvexyS3AS6rbXl+xdpYRMGSRBClPvyj44njOWoxjNdL/H9UNg==", + "dev": true, + "license": "Apache-2.0", + "bin": { + "playwright-core": "cli.js" + }, + "engines": { + "node": ">=18" + } + }, + "node_modules/punycode": { + "version": "2.3.1", + "resolved": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz", + "integrity": "sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/range-parser": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.0.tgz", + "integrity": "sha512-kA5WQoNVo4t9lNx2kQNFCxKeBl5IbbSNBl1M/tLkw9WCn+hxNBAW5Qh8gdhs63CJnhjJ2zQWFoqPJP2sK1AV5A==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/rc": { + "version": "1.2.8", + "resolved": "https://registry.npmjs.org/rc/-/rc-1.2.8.tgz", + "integrity": "sha512-y3bGgqKj3QBdxLbLkomlohkvsA8gdAiUQlSBJnBhfn+BPxg4bc62d8TcBW15wavDfgexCgccckhcZvywyQYPOw==", + "dev": true, + "license": "(BSD-2-Clause OR MIT OR Apache-2.0)", + "dependencies": { + "deep-extend": "^0.6.0", + "ini": "~1.3.0", + "minimist": "^1.2.0", + "strip-json-comments": "~2.0.1" + }, + "bin": { + "rc": "cli.js" + } + }, + "node_modules/registry-auth-token": { + "version": "3.3.2", + "resolved": "https://registry.npmjs.org/registry-auth-token/-/registry-auth-token-3.3.2.tgz", + "integrity": "sha512-JL39c60XlzCVgNrO+qq68FoNb56w/m7JYvGR2jT5iR1xBrUA3Mfx5Twk5rqTThPmQKMWydGmq8oFtDlxfrmxnQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "rc": "^1.1.6", + "safe-buffer": "^5.0.1" + } + }, + "node_modules/registry-url": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/registry-url/-/registry-url-3.1.0.tgz", + "integrity": "sha512-ZbgR5aZEdf4UKZVBPYIgaglBmSF2Hi94s2PcIHhRGFjKYu+chjJdYfHn4rt3hB6eCKLJ8giVIIfgMa1ehDfZKA==", + "dev": true, + "license": "MIT", + "dependencies": { + "rc": "^1.0.1" + }, + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/require-from-string": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz", + "integrity": "sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/safe-buffer": { + "version": "5.2.1", + "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz", + "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==", + "dev": true, + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/feross" + }, + { + "type": "patreon", + "url": "https://www.patreon.com/feross" + }, + { + "type": "consulting", + "url": "https://feross.org/support" + } + ], + "license": "MIT" + }, + "node_modules/serve": { + "version": "14.2.5", + "resolved": "https://registry.npmjs.org/serve/-/serve-14.2.5.tgz", + "integrity": "sha512-Qn/qMkzCcMFVPb60E/hQy+iRLpiU8PamOfOSYoAHmmF+fFFmpPpqa6Oci2iWYpTdOUM3VF+TINud7CfbQnsZbA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@zeit/schemas": "2.36.0", + "ajv": "8.12.0", + "arg": "5.0.2", + "boxen": "7.0.0", + "chalk": "5.0.1", + "chalk-template": "0.4.0", + "clipboardy": "3.0.0", + "compression": "1.8.1", + "is-port-reachable": "4.0.0", + "serve-handler": "6.1.6", + "update-check": "1.5.4" + }, + "bin": { + "serve": "build/main.js" + }, + "engines": { + "node": ">= 14" + } + }, + "node_modules/serve-handler": { + "version": "6.1.6", + "resolved": "https://registry.npmjs.org/serve-handler/-/serve-handler-6.1.6.tgz", + "integrity": "sha512-x5RL9Y2p5+Sh3D38Fh9i/iQ5ZK+e4xuXRd/pGbM4D13tgo/MGwbttUk8emytcr1YYzBYs+apnUngBDFYfpjPuQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "bytes": "3.0.0", + "content-disposition": "0.5.2", + "mime-types": "2.1.18", + "minimatch": "3.1.2", + "path-is-inside": "1.0.2", + "path-to-regexp": "3.3.0", + "range-parser": "1.2.0" + } + }, + "node_modules/serve-handler/node_modules/bytes": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/bytes/-/bytes-3.0.0.tgz", + "integrity": "sha512-pMhOfFDPiv9t5jjIXkHosWmkSyQbvsgEVNkz0ERHbuLh2T/7j4Mqqpz523Fe8MVY89KC6Sh/QfS2sM+SjgFDcw==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/shebang-command": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz", + "integrity": "sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==", + "dev": true, + "license": "MIT", + "dependencies": { + "shebang-regex": "^3.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/shebang-regex": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz", + "integrity": "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/signal-exit": { + "version": "3.0.7", + "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", + "integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==", + "dev": true, + "license": "ISC" + }, + "node_modules/string-width": { + "version": "5.1.2", + "resolved": "https://registry.npmjs.org/string-width/-/string-width-5.1.2.tgz", + "integrity": "sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==", + "dev": true, + "license": "MIT", + "dependencies": { + "eastasianwidth": "^0.2.0", + "emoji-regex": "^9.2.2", + "strip-ansi": "^7.0.1" + }, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/strip-ansi": { + "version": "7.1.2", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.1.2.tgz", + "integrity": "sha512-gmBGslpoQJtgnMAvOVqGZpEz9dyoKTCzy2nfz/n8aIFhN/jCE/rCmcxabB6jOOHV+0WNnylOxaxBQPSvcWklhA==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-regex": "^6.0.1" + }, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/strip-ansi?sponsor=1" + } + }, + "node_modules/strip-final-newline": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/strip-final-newline/-/strip-final-newline-2.0.0.tgz", + "integrity": "sha512-BrpvfNAE3dcvq7ll3xVumzjKjZQ5tI1sEUIKr3Uoks0XUl45St3FlatVqef9prk4jRDzhW6WZg+3bk93y6pLjA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/strip-json-comments": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-2.0.1.tgz", + "integrity": "sha512-4gB8na07fecVVkOI6Rs4e7T6NOTki5EmL7TUduTs6bu3EdnSycntVJ4re8kgZA+wx9IueI2Y11bfbgwtzuE0KQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/supports-color": { + "version": "7.2.0", + "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz", + "integrity": "sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==", + "dev": true, + "license": "MIT", + "dependencies": { + "has-flag": "^4.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/type-fest": { + "version": "2.19.0", + "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-2.19.0.tgz", + "integrity": "sha512-RAH822pAdBgcNMAfWnCBU3CFZcfZ/i1eZjwFU/dsLKumyuuP3niueg2UAukXYF0E2AAoc82ZSSf9J0WQBinzHA==", + "dev": true, + "license": "(MIT OR CC0-1.0)", + "engines": { + "node": ">=12.20" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/update-check": { + "version": "1.5.4", + "resolved": "https://registry.npmjs.org/update-check/-/update-check-1.5.4.tgz", + "integrity": "sha512-5YHsflzHP4t1G+8WGPlvKbJEbAJGCgw+Em+dGR1KmBUbr1J36SJBqlHLjR7oob7sco5hWHGQVcr9B2poIVDDTQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "registry-auth-token": "3.3.2", + "registry-url": "3.1.0" + } + }, + "node_modules/uri-js": { + "version": "4.4.1", + "resolved": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz", + "integrity": "sha512-7rKUyy33Q1yc98pQ1DAmLtwX109F7TIfWlW1Ydo8Wl1ii1SeHieeh0HHfPeL2fMXK6z0s8ecKs9frCuLJvndBg==", + "dev": true, + "license": "BSD-2-Clause", + "dependencies": { + "punycode": "^2.1.0" + } + }, + "node_modules/vary": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz", + "integrity": "sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/which": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz", + "integrity": "sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==", + "dev": true, + "license": "ISC", + "dependencies": { + "isexe": "^2.0.0" + }, + "bin": { + "node-which": "bin/node-which" + }, + "engines": { + "node": ">= 8" + } + }, + "node_modules/widest-line": { + "version": "4.0.1", + "resolved": "https://registry.npmjs.org/widest-line/-/widest-line-4.0.1.tgz", + "integrity": "sha512-o0cyEG0e8GPzT4iGHphIOh0cJOV8fivsXxddQasHPHfoZf1ZexrfeA21w2NaEN1RHE+fXlfISmOE8R9N3u3Qig==", + "dev": true, + "license": "MIT", + "dependencies": { + "string-width": "^5.0.1" + }, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/wrap-ansi": { + "version": "8.1.0", + "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-8.1.0.tgz", + "integrity": "sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-styles": "^6.1.0", + "string-width": "^5.0.1", + "strip-ansi": "^7.0.1" + }, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/wrap-ansi?sponsor=1" + } + } + } +} diff --git a/license-exceptions/package.json b/license-exceptions/package.json new file mode 100644 index 00000000..e82d3892 --- /dev/null +++ b/license-exceptions/package.json @@ -0,0 +1,23 @@ +{ + "name": "license-exceptions", + "version": "1.0.0", + "description": "CNCF License Exceptions site and tooling", + "private": true, + "scripts": { + "pretest": "cp exceptions.json site/exceptions.json", + "test": "playwright test", + "posttest": "rm -f site/exceptions.json", + "test:headed": "cp exceptions.json site/exceptions.json && playwright test --headed; rm -f site/exceptions.json", + "test:debug": "cp exceptions.json site/exceptions.json && playwright test --debug; rm -f site/exceptions.json", + "serve": "cp exceptions.json site/exceptions.json && serve -l 3000 .", + "generate": "node scripts/generate-all.js" + }, + "keywords": [], + "author": "CNCF", + "license": "Apache-2.0", + "type": "commonjs", + "devDependencies": { + "@playwright/test": "^1.58.1", + "serve": "^14.2.5" + } +} diff --git a/license-exceptions/playwright.config.js b/license-exceptions/playwright.config.js new file mode 100644 index 00000000..c7b6f30b --- /dev/null +++ b/license-exceptions/playwright.config.js @@ -0,0 +1,56 @@ +// @ts-check +const { defineConfig } = require('@playwright/test'); + +/** + * Playwright configuration for CNCF License Exceptions E2E tests + * @see https://playwright.dev/docs/test-configuration + */ +module.exports = defineConfig({ + testDir: './tests', + + // Run tests in parallel + fullyParallel: true, + + // Fail the build on CI if you accidentally left test.only in the source code + forbidOnly: !!process.env.CI, + + // Retry on CI only + retries: process.env.CI ? 2 : 0, + + // Opt out of parallel tests on CI for stability + workers: process.env.CI ? 1 : undefined, + + // Reporter to use + reporter: process.env.CI ? 'github' : 'list', + + // Shared settings for all projects + use: { + // Base URL for the static site + baseURL: 'http://localhost:3000', + + // Collect trace when retrying the failed test + trace: 'on-first-retry', + + // Take screenshot on failure + screenshot: 'only-on-failure', + }, + + // Configure projects for Chromium only (lightweight for CI) + projects: [ + { + name: 'chromium', + use: { + browserName: 'chromium', + }, + }, + ], + + // Run local dev server before starting tests + // Use python http.server which doesn't rewrite URLs + webServer: { + command: 'python3 -m http.server 3000', + url: 'http://localhost:3000', + reuseExistingServer: false, + timeout: 30000, + }, +}); diff --git a/license-exceptions/schema/exception.schema.json b/license-exceptions/schema/exception.schema.json new file mode 100644 index 00000000..2a17c9ec --- /dev/null +++ b/license-exceptions/schema/exception.schema.json @@ -0,0 +1,55 @@ +{ + "$schema": "https://json-schema.org/draft/2020-12/schema", + "$id": "https://github.com/cncf/foundation/license-exceptions/schema/exception.schema.json", + "title": "CNCF License Exception", + "description": "Schema for CNCF license exception records", + "type": "object", + "properties": { + "version": { "type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$" }, + "lastUpdated": { "type": "string", "format": "date" }, + "blanketExceptions": { + "type": "array", + "items": { + "type": "object", + "properties": { + "id": { "type": "string" }, + "name": { "type": "string" }, + "description": { "type": "string" }, + "licenses": { "type": "array", "items": { "type": "string" } }, + "scope": { "type": "string" }, + "approvedDate": { "type": "string", "format": "date" }, + "documentUrl": { "type": "string", "format": "uri" } + }, + "required": ["id", "name", "description", "licenses", "approvedDate"] + } + }, + "exceptions": { + "type": "array", + "items": { + "type": "object", + "properties": { + "id": { "type": "string", "description": "Unique ID like exc-2023-08-31-001" }, + "package": { "type": "string" }, + "packageUrl": { "type": "string", "format": "uri" }, + "license": { "type": "string", "description": "SPDX license identifier(s)" }, + "requestingProject": { "type": "string" }, + "approvedDate": { "type": "string", "format": "date" }, + "issueUrl": { "type": "string", "format": "uri" }, + "status": { "type": "string", "enum": ["approved", "denied", "allowlisted", "apache-2.0"] }, + "project": { + "oneOf": [ + { "type": "string" }, + { "type": "array", "items": { "type": "string" } } + ], + "description": "Requesting project(s) or 'All CNCF Projects' for blanket exceptions" + }, + "scope": { "type": "string", "description": "Usage context and codebase area, e.g., 'build dependency, dynamically linked'" }, + "results": { "type": "string", "format": "uri", "description": "Link to results documentation (Google Doc or GitHub issue)" }, + "comment": { "type": "string" } + }, + "required": ["id", "package", "license", "status"] + } + } + }, + "required": ["version", "lastUpdated", "exceptions"] +} diff --git a/license-exceptions/scripts/generate-all.js b/license-exceptions/scripts/generate-all.js new file mode 100644 index 00000000..7c7dfdca --- /dev/null +++ b/license-exceptions/scripts/generate-all.js @@ -0,0 +1,10 @@ +#!/usr/bin/env node + +/** + * Generate all output formats from exceptions.json + */ + +require('./generate-csv.js'); +require('./generate-spdx.js'); + +console.log('\nAll formats generated successfully!'); diff --git a/license-exceptions/scripts/generate-csv.js b/license-exceptions/scripts/generate-csv.js new file mode 100644 index 00000000..565d67a5 --- /dev/null +++ b/license-exceptions/scripts/generate-csv.js @@ -0,0 +1,91 @@ +#!/usr/bin/env node + +/** + * Generate CSV format from exceptions.json + * Output: CNCF-licensing-exceptions.csv + */ + +const fs = require('fs'); +const path = require('path'); + +const EXCEPTIONS_FILE = path.join(__dirname, '..', 'exceptions.json'); +const OUTPUT_FILE = path.join(__dirname, '..', 'CNCF-licensing-exceptions.csv'); + +/** + * Escape a field for CSV format + * - Wrap in quotes if contains comma, quote, or newline + * - Double any existing quotes + */ +function escapeCSVField(field) { + if (field === null || field === undefined) { + return ''; + } + const str = String(field); + // Check if field needs quoting + if (str.includes(',') || str.includes('"') || str.includes('\n') || str.includes('\r')) { + // Escape quotes by doubling them + return '"' + str.replace(/"/g, '""') + '"'; + } + return str; +} + +/** + * Format a date for CSV (keeping YYYY-MM-DD format) + */ +function formatDate(dateStr) { + return dateStr || ''; +} + +/** + * Format project field (can be string or array) + */ +function formatProject(project) { + if (!project) return ''; + if (Array.isArray(project)) return project.join('; '); + return project; +} + +function main() { + // Read exceptions.json + const data = JSON.parse(fs.readFileSync(EXCEPTIONS_FILE, 'utf8')); + const { lastUpdated, exceptions } = data; + + // Build CSV content + const lines = []; + + // Header row - note "Last updated" column includes the date in the header + const header = [ + 'Package or Category', + 'License Concluded', + 'Project', + 'Scope', + 'Status', + 'Comments', + 'Date Published', + `Last updated: ${lastUpdated}` + ]; + lines.push(header.map(escapeCSVField).join(',')); + + // Data rows + for (const exc of exceptions) { + const row = [ + exc.package, + exc.license, + formatProject(exc.project), + exc.scope || '', + exc.status || '', + exc.comment || '', + formatDate(exc.approvedDate), + '' // Last updated column is empty for data rows + ]; + lines.push(row.map(escapeCSVField).join(',')); + } + + // Write output + fs.writeFileSync(OUTPUT_FILE, lines.join('\n') + '\n'); + console.log(`Generated ${OUTPUT_FILE}`); + console.log(` - ${exceptions.length} exceptions`); + console.log(` - Last updated: ${lastUpdated}`); +} + +main(); diff --git a/license-exceptions/scripts/generate-spdx.js b/license-exceptions/scripts/generate-spdx.js new file mode 100644 index 00000000..f428b6e1 --- /dev/null +++ b/license-exceptions/scripts/generate-spdx.js @@ -0,0 +1,82 @@ +#!/usr/bin/env node + +/** + * Generate SPDX tag-value format from exceptions.json + * Output: cncf-exceptions-current.spdx + */ + +const fs = require('fs'); +const path = require('path'); + +const EXCEPTIONS_FILE = path.join(__dirname, '..', 'exceptions.json'); +const OUTPUT_FILE = path.join(__dirname, '..', 'cncf-exceptions-current.spdx'); + +/** + * Strip common prefixes from package names for SPDX format + */ +function stripPackagePrefix(packageName) { + return packageName + .replace(/^github\.com\//, '') + .replace(/^golang\.org\//, ''); +} + +/** + * Generate ISO timestamp for Created field + * Uses lastUpdated date for deterministic output + */ +function getISOTimestamp(lastUpdated) { + // Use noon UTC on lastUpdated date for deterministic timestamp + return `${lastUpdated}T12:00:00Z`; +} + +function main() { + // Read exceptions.json + const data = JSON.parse(fs.readFileSync(EXCEPTIONS_FILE, 'utf8')); + const { lastUpdated, exceptions } = data; + + const lines = []; + + // Document header + lines.push('SPDXVersion: SPDX-2.1'); + lines.push('DataLicense: CC0-1.0'); + lines.push('SPDXID: SPDXRef-DOCUMENT'); + lines.push(`DocumentName: cncf-exceptions-${lastUpdated}`); + lines.push(`DocumentNamespace: https://github.com/cncf/foundation/license-exceptions-${lastUpdated}`); + lines.push('Creator: Organization: CNCF'); + lines.push(`Created: ${getISOTimestamp(lastUpdated)}`); + lines.push(''); + + // Package entries + let packageNum = 1; + for (const exc of exceptions) { + const strippedName = stripPackagePrefix(exc.package); + const project = Array.isArray(exc.project) ? exc.project.join(', ') : (exc.project || ''); + const projectInfo = project ? `Project: ${project}. ` : ''; + const scopeInfo = exc.scope ? `Scope: ${exc.scope}. ` : ''; + const statusInfo = exc.status ? `Status: ${exc.status}. ` : ''; + const baseComment = exc.comment || `${exc.status || 'approved'} ${exc.approvedDate}`; + const comment = `${projectInfo}${scopeInfo}${statusInfo}${baseComment}`; + + lines.push(`##### Package: ${strippedName}`); + lines.push(''); + lines.push(`PackageName: ${strippedName}`); + lines.push(`SPDXID: SPDXRef-Package${packageNum}`); + lines.push('PackageDownloadLocation: NOASSERTION'); + lines.push('FilesAnalyzed: false'); + lines.push(`PackageLicenseConcluded: ${exc.license}`); + lines.push('PackageLicenseDeclared: NOASSERTION'); + lines.push('PackageCopyrightText: NOASSERTION'); + lines.push(`PackageComment: ${comment}`); + lines.push(''); + + packageNum++; + } + + // Write output + fs.writeFileSync(OUTPUT_FILE, lines.join('\n')); + console.log(`Generated ${OUTPUT_FILE}`); + console.log(` - ${exceptions.length} packages`); + console.log(` - Document name: cncf-exceptions-${lastUpdated}`); +} + +main(); diff --git a/license-exceptions/scripts/migrate-data.js b/license-exceptions/scripts/migrate-data.js new file mode 100644 index 00000000..9d217139 --- /dev/null +++ b/license-exceptions/scripts/migrate-data.js @@ -0,0 +1,319 @@ +#!/usr/bin/env node + +/** + * Migration script for CNCF License Exceptions + * + * This script consolidates data from: + * - CNCF-licensing-exceptions.csv (primary source) + * - cncf-exceptions-*.json files (supplementary sources) + * + * Into the new unified exceptions.json format + */ + +const fs = require('fs'); +const path = require('path'); + +const DATA_DIR = path.join(__dirname, '..'); +const OUTPUT_FILE = path.join(DATA_DIR, 'exceptions.json'); + +/** + * Parse CSV line handling quoted fields with commas + */ +function parseCSVLine(line) { + const result = []; + let current = ''; + let inQuotes = false; + + for (let i = 0; i < line.length; i++) { + const char = line[i]; + + if (char === '"') { + inQuotes = !inQuotes; + } else if (char === ',' && !inQuotes) { + result.push(current.trim()); + current = ''; + } else { + current += char; + } + } + result.push(current.trim()); + + return result; +} + +/** + * Parse the CSV file + */ +function parseCSV(filePath) { + const content = fs.readFileSync(filePath, 'utf-8'); + const lines = content.split('\n').filter(line => line.trim()); + + // Skip header row + const entries = []; + for (let i = 1; i < lines.length; i++) { + const fields = parseCSVLine(lines[i]); + if (fields.length >= 4 && fields[0]) { + entries.push({ + package: fields[0], + license: fields[1], + comment: fields[2], + datePublished: fields[3] + }); + } + } + + return entries; +} + +/** + * Parse JSON exception files (handles different formats) + */ +function parseJSONFile(filePath) { + const content = fs.readFileSync(filePath, 'utf-8'); + const data = JSON.parse(content); + + // Handle SPDX format (like the 2021-07-19 file) + if (data.packages) { + return data.packages.map(pkg => ({ + package: pkg.name, + license: pkg.licenseConcluded, + comment: pkg.comment || '' + })); + } + + // Handle array format + if (Array.isArray(data)) { + return data.map(entry => ({ + package: entry.package, + license: entry.license ? entry.license.trim() : '', + comment: entry.comment || '' + })); + } + + return []; +} + +/** + * Extract approval date from comment + * Pattern: "approved by GB exception YYYY-MM-DD" + */ +function extractApprovalDate(comment, fallbackDate) { + if (!comment) return fallbackDate; + + // Match YYYY-MM-DD pattern (also handles typos like 20212-04-12) + const match = comment.match(/approved by GB exception (\d{4,5}-\d{2}-\d{2})/); + if (match) { + let date = match[1]; + // Fix common typo: 20212 -> 2022 + if (date.startsWith('20212')) { + date = date.replace('20212', '2022'); + } + return date; + } + + return fallbackDate; +} + +/** + * Determine status from comment + */ +function determineStatus(comment) { + if (!comment) return 'approved'; + + const lowerComment = comment.toLowerCase(); + + if (lowerComment.includes('allowlisted') && !lowerComment.includes('not auto-allowlist')) { + return 'allowlisted'; + } + + if (lowerComment.includes('apache-2.0, no approval needed') || + lowerComment.includes('apache-2.0,no approval needed')) { + return 'apache-2.0'; + } + + return 'approved'; +} + +/** + * Generate unique ID for an exception + */ +function generateId(date, index) { + return `exc-${date}-${String(index).padStart(3, '0')}`; +} + +/** + * Main migration function + */ +function migrate() { + console.log('Starting migration...\n'); + + const stats = { + csvEntries: 0, + jsonEntries: 0, + totalUnique: 0, + byStatus: { + approved: 0, + allowlisted: 0, + 'apache-2.0': 0 + }, + duplicates: 0 + }; + + // Map to store unique entries by package name (CSV is primary) + const packageMap = new Map(); + + // 1. Parse CSV file (primary source) + const csvPath = path.join(DATA_DIR, 'CNCF-licensing-exceptions.csv'); + console.log(`Parsing CSV: ${csvPath}`); + const csvEntries = parseCSV(csvPath); + stats.csvEntries = csvEntries.length; + console.log(` Found ${csvEntries.length} entries in CSV\n`); + + for (const entry of csvEntries) { + const key = entry.package.toLowerCase(); + if (!packageMap.has(key)) { + packageMap.set(key, { + package: entry.package, + license: entry.license, + comment: entry.comment, + approvedDate: extractApprovalDate(entry.comment, entry.datePublished), + status: determineStatus(entry.comment), + source: 'csv' + }); + } + } + + // 2. Parse JSON files (supplementary) + const jsonFiles = fs.readdirSync(DATA_DIR) + .filter(f => f.startsWith('cncf-exceptions-') && f.endsWith('.json')) + .sort(); + + console.log(`Processing ${jsonFiles.length} JSON files:`); + + for (const jsonFile of jsonFiles) { + const filePath = path.join(DATA_DIR, jsonFile); + console.log(` Parsing: ${jsonFile}`); + + // Extract date from filename + const fileDate = jsonFile.match(/(\d{4}-\d{2}-\d{2})/)?.[1] || '2019-11-01'; + + try { + const entries = parseJSONFile(filePath); + stats.jsonEntries += entries.length; + console.log(` Found ${entries.length} entries`); + + let newFromFile = 0; + for (const entry of entries) { + const key = entry.package.toLowerCase(); + if (!packageMap.has(key)) { + packageMap.set(key, { + package: entry.package, + license: entry.license, + comment: entry.comment, + approvedDate: extractApprovalDate(entry.comment, fileDate), + status: determineStatus(entry.comment), + source: jsonFile + }); + newFromFile++; + } + } + console.log(` New unique entries: ${newFromFile}`); + } catch (err) { + console.error(` Error parsing ${jsonFile}: ${err.message}`); + } + } + + // Calculate duplicates + stats.duplicates = stats.csvEntries + stats.jsonEntries - packageMap.size; + stats.totalUnique = packageMap.size; + + console.log(`\nDeduplication: ${stats.csvEntries + stats.jsonEntries} total -> ${stats.totalUnique} unique (${stats.duplicates} duplicates removed)\n`); + + // 3. Convert to exceptions array + const exceptions = []; + const entriesByDate = new Map(); + + for (const entry of packageMap.values()) { + const date = entry.approvedDate || '2019-11-01'; + if (!entriesByDate.has(date)) { + entriesByDate.set(date, []); + } + entriesByDate.get(date).push(entry); + stats.byStatus[entry.status]++; + } + + // Sort dates descending (newest first) + const sortedDates = Array.from(entriesByDate.keys()).sort().reverse(); + + // Generate IDs and build final array + for (const date of sortedDates) { + const dateEntries = entriesByDate.get(date); + // Sort alphabetically by package name within each date + dateEntries.sort((a, b) => a.package.localeCompare(b.package)); + + for (let i = 0; i < dateEntries.length; i++) { + const entry = dateEntries[i]; + exceptions.push({ + id: generateId(date, i + 1), + package: entry.package, + license: entry.license, + approvedDate: date, + status: entry.status, + comment: entry.comment || undefined + }); + } + } + + // 4. Create blanket exceptions + const blanketExceptions = [ + { + id: 'blanket-ebpf-gpl', + name: 'GPL for in-kernel eBPF programs', + description: 'GPL-2.0 licensed code is permitted for in-kernel eBPF programs only, as this is required by the Linux kernel BPF subsystem.', + licenses: ['GPL-2.0-only', 'GPL-2.0-or-later'], + scope: 'in-kernel eBPF programs only', + approvedDate: '2023-08-31', + documentUrl: 'https://github.com/cncf/foundation/blob/main/license-exceptions/README.md' + } + ]; + + // 5. Build output structure + const output = { + version: '1.0.0', + lastUpdated: new Date().toISOString().split('T')[0], + blanketExceptions, + exceptions + }; + + // 6. Write output + fs.writeFileSync(OUTPUT_FILE, JSON.stringify(output, null, 2) + '\n'); + console.log(`Output written to: ${OUTPUT_FILE}`); + + // 7. Print summary + console.log('\n=== Migration Summary ==='); + console.log(`CSV entries processed: ${stats.csvEntries}`); + console.log(`JSON entries processed: ${stats.jsonEntries}`); + console.log(`Duplicates removed: ${stats.duplicates}`); + console.log(`Total unique exceptions: ${stats.totalUnique}`); + console.log(`Blanket exceptions: ${blanketExceptions.length}`); + console.log('\nBy status:'); + console.log(` approved: ${stats.byStatus.approved}`); + console.log(` allowlisted: ${stats.byStatus.allowlisted}`); + console.log(` apache-2.0: ${stats.byStatus['apache-2.0']}`); + + // Count unique dates + const uniqueDates = new Set(exceptions.map(e => e.approvedDate)); + console.log(`\nUnique approval dates: ${uniqueDates.size}`); + console.log('Date range:', [...uniqueDates].sort().join(', ')); + + return stats; +} + +// Run migration +try { + migrate(); + process.exit(0); +} catch (err) { + console.error('Migration failed:', err); + process.exit(1); +} diff --git a/license-exceptions/site/app.js b/license-exceptions/site/app.js new file mode 100644 index 00000000..257d6b37 --- /dev/null +++ b/license-exceptions/site/app.js @@ -0,0 +1,451 @@ +/** + * CNCF License Exceptions - Client-side Application + */ + +(function () { + 'use strict'; + + // State + let data = null; + let filteredExceptions = []; + let currentSort = { column: 'date', direction: 'desc' }; + + // DOM Elements + const elements = { + search: document.getElementById('search'), + licenseFilter: document.getElementById('license-filter'), + statusFilter: document.getElementById('status-filter'), + projectFilter: document.getElementById('project-filter'), + yearFilter: document.getElementById('year-filter'), + sortBy: document.getElementById('sort-by'), + clearFilters: document.getElementById('clear-filters'), + resultsCount: document.getElementById('results-count'), + tableBody: document.getElementById('exceptions-tbody'), + noResults: document.getElementById('no-results'), + downloadCsv: document.getElementById('download-csv'), + dataVersion: document.getElementById('data-version'), + lastUpdated: document.getElementById('last-updated'), + }; + + // Debounce utility + function debounce(fn, delay) { + let timeoutId; + return function (...args) { + clearTimeout(timeoutId); + timeoutId = setTimeout(() => fn.apply(this, args), delay); + }; + } + + // Fetch and initialize data + async function init() { + try { + // Try same-directory first (deployed), fall back to parent (local dev) + let response = await fetch('exceptions.json'); + if (!response.ok) { + response = await fetch('../exceptions.json'); + } + if (!response.ok) { + throw new Error(`HTTP error! status: ${response.status}`); + } + data = await response.json(); + + // Update metadata + elements.dataVersion.textContent = data.version || '-'; + elements.lastUpdated.textContent = data.lastUpdated || '-'; + + // Populate filters + populateFilters(); + + // Initial render + applyFiltersAndRender(); + + // Set up event listeners + setupEventListeners(); + } catch (error) { + console.error('Failed to load data:', error); + elements.tableBody.innerHTML = ` + + + Failed to load data. Please try refreshing the page. + + + `; + elements.resultsCount.textContent = 'Error loading data'; + } + } + + // Helper to normalize project field to array + function normalizeProject(project) { + if (!project) return []; + if (Array.isArray(project)) return project; + return [project]; + } + + // Helper to format project for display + function formatProject(project) { + const projects = normalizeProject(project); + if (projects.length === 0) return '-'; + return projects.join(', '); + } + + // Populate filter dropdowns from data + function populateFilters() { + // Get unique licenses + const licenses = [...new Set(data.exceptions.map(e => e.license))].sort(); + licenses.forEach(license => { + const option = document.createElement('option'); + option.value = license; + option.textContent = license; + elements.licenseFilter.appendChild(option); + }); + + // Get unique projects (flatten arrays) + const projectSet = new Set(); + data.exceptions.forEach(e => { + normalizeProject(e.project).forEach(p => projectSet.add(p)); + }); + const projects = [...projectSet].sort(); + projects.forEach(project => { + const option = document.createElement('option'); + option.value = project; + option.textContent = project; + elements.projectFilter.appendChild(option); + }); + + // Get unique years from approvedDate + const years = [...new Set( + data.exceptions + .map(e => e.approvedDate ? e.approvedDate.split('-')[0] : null) + .filter(Boolean) + )].sort().reverse(); + + years.forEach(year => { + const option = document.createElement('option'); + option.value = year; + option.textContent = year; + elements.yearFilter.appendChild(option); + }); + } + + // Apply filters and render table + function applyFiltersAndRender() { + const searchTerm = elements.search.value.toLowerCase().trim(); + const licenseFilter = elements.licenseFilter.value; + const statusFilter = elements.statusFilter.value; + const projectFilter = elements.projectFilter.value; + const yearFilter = elements.yearFilter.value; + + // Filter + filteredExceptions = data.exceptions.filter(exc => { + // Search filter - search across all fields + if (searchTerm) { + const projectText = normalizeProject(exc.project).join(' '); + const searchableText = [ + exc.package, + exc.license, + exc.status, + exc.scope || '', + projectText, + exc.approvedDate || '', + exc.comment || '' + ].join(' ').toLowerCase(); + + if (!searchableText.includes(searchTerm)) { + return false; + } + } + + // License filter + if (licenseFilter && exc.license !== licenseFilter) { + return false; + } + + // Status filter + if (statusFilter && exc.status !== statusFilter) { + return false; + } + + // Project filter + if (projectFilter) { + const projects = normalizeProject(exc.project); + if (!projects.includes(projectFilter)) { + return false; + } + } + + // Year filter + if (yearFilter) { + const excYear = exc.approvedDate ? exc.approvedDate.split('-')[0] : ''; + if (excYear !== yearFilter) { + return false; + } + } + + return true; + }); + + // Sort based on current sort state + sortExceptions(); + + // Render + renderTable(); + updateResultsCount(); + updateSortIndicators(); + } + + // Sort exceptions based on current sort state + function sortExceptions() { + const { column, direction } = currentSort; + const modifier = direction === 'asc' ? 1 : -1; + + filteredExceptions.sort((a, b) => { + let valA, valB; + + switch (column) { + case 'package': + valA = a.package.toLowerCase(); + valB = b.package.toLowerCase(); + break; + case 'license': + valA = a.license.toLowerCase(); + valB = b.license.toLowerCase(); + break; + case 'project': + valA = formatProject(a.project).toLowerCase(); + valB = formatProject(b.project).toLowerCase(); + break; + case 'status': + valA = a.status.toLowerCase(); + valB = b.status.toLowerCase(); + break; + case 'date': + valA = a.approvedDate || ''; + valB = b.approvedDate || ''; + break; + default: + return 0; + } + + if (valA < valB) return -1 * modifier; + if (valA > valB) return 1 * modifier; + return 0; + }); + } + + // Handle column header click for sorting + function handleColumnSort(column) { + if (currentSort.column === column) { + // Toggle direction if same column + currentSort.direction = currentSort.direction === 'asc' ? 'desc' : 'asc'; + } else { + // New column, default to ascending (except date which defaults to descending) + currentSort.column = column; + currentSort.direction = column === 'date' ? 'desc' : 'asc'; + } + + // Update the dropdown to match + const sortValue = `${column}-${currentSort.direction}`; + if (elements.sortBy.querySelector(`option[value="${sortValue}"]`)) { + elements.sortBy.value = sortValue; + } + + applyFiltersAndRender(); + } + + // Update sort indicators in table headers + function updateSortIndicators() { + const headers = document.querySelectorAll('#exceptions-table th.sortable'); + headers.forEach(header => { + const column = header.dataset.sort; + const indicator = header.querySelector('.sort-indicator'); + + if (column === currentSort.column) { + indicator.textContent = currentSort.direction === 'asc' ? ' \u25B2' : ' \u25BC'; + header.classList.add('sorted'); + } else { + indicator.textContent = ''; + header.classList.remove('sorted'); + } + }); + } + + // Render the exceptions table + function renderTable() { + if (filteredExceptions.length === 0) { + elements.tableBody.innerHTML = ''; + elements.noResults.style.display = 'block'; + return; + } + + elements.noResults.style.display = 'none'; + + const html = filteredExceptions.map(exc => { + const packageHtml = formatPackage(exc.package); + const statusClass = getStatusClass(exc.status); + const resultsHtml = formatResults(exc.results); + const projectHtml = escapeHtml(formatProject(exc.project)); + + return ` + + ${packageHtml} + ${escapeHtml(exc.license)} + ${projectHtml} + ${escapeHtml(exc.scope || '-')} + ${escapeHtml(exc.status)} + ${escapeHtml(exc.approvedDate || '-')} + ${resultsHtml} + + `; + }).join(''); + + elements.tableBody.innerHTML = html; + } + + // Format package name, auto-linking GitHub URLs + function formatPackage(packageName) { + if (packageName.startsWith('github.com/')) { + const url = `https://${packageName}`; + return `${escapeHtml(packageName)}`; + } + return `${escapeHtml(packageName)}`; + } + + // Format results link (Google Doc or GitHub) + function formatResults(resultsUrl) { + if (!resultsUrl) { + return '-'; + } + + let linkText = 'View'; + if (resultsUrl.includes('docs.google.com')) { + linkText = 'Google Doc'; + } else if (resultsUrl.includes('github.com')) { + linkText = 'GitHub'; + } + + return `${linkText}`; + } + + // Get CSS class for status badge + function getStatusClass(status) { + switch (status) { + case 'approved': + return 'status-approved'; + case 'denied': + return 'status-denied'; + case 'allowlisted': + return 'status-allowlisted'; + case 'apache-2.0': + return 'status-apache-2-0'; + default: + return ''; + } + } + + // Update results count + function updateResultsCount() { + const total = data.exceptions.length; + const filtered = filteredExceptions.length; + + if (filtered === total) { + elements.resultsCount.textContent = `${total} exceptions`; + } else { + elements.resultsCount.textContent = `${filtered} of ${total} exceptions`; + } + } + + // Clear all filters + function clearFilters() { + elements.search.value = ''; + elements.licenseFilter.value = ''; + elements.statusFilter.value = ''; + elements.projectFilter.value = ''; + elements.yearFilter.value = ''; + elements.sortBy.value = 'date-desc'; + currentSort = { column: 'date', direction: 'desc' }; + applyFiltersAndRender(); + } + + // Download CSV + function downloadCsv() { + const headers = ['Package or Category', 'License', 'Project', 'Scope', 'Status', 'Approved Date', 'Results', 'Comment']; + const rows = filteredExceptions.map(exc => [ + exc.package, + exc.license, + formatProject(exc.project), + exc.scope || '', + exc.status, + exc.approvedDate || '', + exc.results || '', + exc.comment || '' + ]); + + const csvContent = [ + headers.join(','), + ...rows.map(row => row.map(cell => `"${String(cell).replace(/"/g, '""')}"`).join(',')) + ].join('\n'); + + const blob = new Blob([csvContent], { type: 'text/csv;charset=utf-8;' }); + const url = URL.createObjectURL(blob); + const link = document.createElement('a'); + link.href = url; + link.download = 'cncf-license-exceptions.csv'; + document.body.appendChild(link); + link.click(); + document.body.removeChild(link); + URL.revokeObjectURL(url); + } + + // Escape HTML to prevent XSS + function escapeHtml(text) { + if (text === null || text === undefined) return ''; + const div = document.createElement('div'); + div.textContent = String(text); + return div.innerHTML; + } + + // Set up event listeners + function setupEventListeners() { + // Debounced search + elements.search.addEventListener('input', debounce(applyFiltersAndRender, 300)); + + // Filter dropdowns + elements.licenseFilter.addEventListener('change', applyFiltersAndRender); + elements.statusFilter.addEventListener('change', applyFiltersAndRender); + elements.projectFilter.addEventListener('change', applyFiltersAndRender); + elements.yearFilter.addEventListener('change', applyFiltersAndRender); + + // Sort dropdown + elements.sortBy.addEventListener('change', function() { + const value = this.value; + const parts = value.split('-'); + if (parts.length >= 2) { + currentSort.column = parts[0]; + currentSort.direction = parts[parts.length - 1]; + applyFiltersAndRender(); + } + }); + + // Clickable column headers + const sortableHeaders = document.querySelectorAll('#exceptions-table th.sortable'); + sortableHeaders.forEach(header => { + header.addEventListener('click', () => { + const column = header.dataset.sort; + handleColumnSort(column); + }); + }); + + // Clear filters + elements.clearFilters.addEventListener('click', clearFilters); + + // Download CSV + elements.downloadCsv.addEventListener('click', downloadCsv); + } + + // Initialize on DOM ready + if (document.readyState === 'loading') { + document.addEventListener('DOMContentLoaded', init); + } else { + init(); + } +})(); diff --git a/license-exceptions/site/blanket-app.js b/license-exceptions/site/blanket-app.js new file mode 100644 index 00000000..72235170 --- /dev/null +++ b/license-exceptions/site/blanket-app.js @@ -0,0 +1,99 @@ +/** + * CNCF License Exceptions - Blanket Exceptions Page + */ + +(function () { + 'use strict'; + + // DOM Elements + const elements = { + blanketCards: document.getElementById('blanket-cards'), + noResults: document.getElementById('no-results'), + dataVersion: document.getElementById('data-version'), + lastUpdated: document.getElementById('last-updated'), + }; + + // Escape HTML to prevent XSS + function escapeHtml(text) { + if (text === null || text === undefined) return ''; + const div = document.createElement('div'); + div.textContent = String(text); + return div.innerHTML; + } + + // Fetch and initialize data + async function init() { + try { + // Try same-directory first (deployed), fall back to parent (local dev) + let response = await fetch('exceptions.json'); + if (!response.ok) { + response = await fetch('../exceptions.json'); + } + if (!response.ok) { + throw new Error(`HTTP error! status: ${response.status}`); + } + const data = await response.json(); + + // Update metadata + elements.dataVersion.textContent = data.version || '-'; + elements.lastUpdated.textContent = data.lastUpdated || '-'; + + // Render blanket exceptions + renderBlanketExceptions(data.blanketExceptions || []); + } catch (error) { + console.error('Failed to load data:', error); + elements.blanketCards.innerHTML = ` +
+ Failed to load data. Please try refreshing the page. +
+ `; + } + } + + // Render blanket exceptions as cards + function renderBlanketExceptions(blanketExceptions) { + if (!blanketExceptions || blanketExceptions.length === 0) { + elements.noResults.style.display = 'block'; + return; + } + + const html = blanketExceptions.map(blanket => ` +
+

${escapeHtml(blanket.name)}

+

${escapeHtml(blanket.description)}

+
+
+ Scope: + ${escapeHtml(blanket.scope || 'Not specified')} +
+
+ Approved: + ${escapeHtml(blanket.approvedDate)} +
+
+
+ Licenses: +
+ ${blanket.licenses.map(l => `${escapeHtml(l)}`).join('')} +
+
+ ${blanket.documentUrl ? ` +
+ + View Documentation + +
+ ` : ''} +
+ `).join(''); + + elements.blanketCards.innerHTML = html; + } + + // Initialize on DOM ready + if (document.readyState === 'loading') { + document.addEventListener('DOMContentLoaded', init); + } else { + init(); + } +})(); diff --git a/license-exceptions/site/blanket-exceptions.html b/license-exceptions/site/blanket-exceptions.html new file mode 100644 index 00000000..25cea98d --- /dev/null +++ b/license-exceptions/site/blanket-exceptions.html @@ -0,0 +1,64 @@ + + + + + + Blanket Exceptions - CNCF License Exceptions + + + +
+
+

CNCF License Exceptions

+

Approved license exceptions for CNCF projects

+
+
+ + + +
+ +
+
+

Blanket Exceptions

+

+ Blanket exceptions are pre-approved license exceptions that apply broadly to specific use cases. + These don't require individual package approval when the criteria are met. +

+
+
+ +
+ +
+
+ + + + + + diff --git a/license-exceptions/site/exceptions.json b/license-exceptions/site/exceptions.json new file mode 100644 index 00000000..d7ea5fb3 --- /dev/null +++ b/license-exceptions/site/exceptions.json @@ -0,0 +1,4363 @@ +{ + "version": "1.1.0", + "lastUpdated": "2026-02-04", + "blanketExceptions": [], + "exceptions": [ + { + "id": "exc-2026-02-05-001", + "package": "eclipse-ee4j/expressly", + "license": "EPL-2.0 OR GPL-2.0-only WITH Classpath-exception-2.0", + "project": "Keycloak", + "approvedDate": "2026-02-05", + "status": "approved", + "scope": "required upstream dependency, dynamically linked, unmodified", + "results": "https://github.com/cncf/foundation/issues/1177", + "comment": "Default implementation of Jakarta Expression Language 6.0, transitive dependency for Hibernate Validator" + }, + { + "id": "exc-2026-02-05-002", + "package": "libpathrs", + "license": "MPL-2.0 OR LGPL-3.0-or-later", + "project": "All CNCF Projects", + "approvedDate": "2026-02-05", + "status": "approved", + "scope": "vendored component, build-time dependency, or install-time dependency; statically or dynamically linked", + "results": "https://github.com/cncf/foundation/issues/1154", + "comment": "Blanket exception: Projects using libpathrs statically linked MUST elect MPL-2.0 and document this. Provides secure path resolution APIs." + }, + { + "id": "exc-2026-02-05-003", + "package": "go-pathrs", + "license": "MPL-2.0", + "project": "All CNCF Projects", + "approvedDate": "2026-02-05", + "status": "approved", + "scope": "vendored component, build-time dependency, or install-time dependency; statically or dynamically linked", + "results": "https://github.com/cncf/foundation/issues/1154", + "comment": "Blanket exception: Go bindings for libpathrs. Provides secure path resolution APIs." + }, + { + "id": "exc-2025-11-21-001", + "package": "cyphar/filepath-securejoin", + "license": "MPL-2.0 AND BSD-3-Clause", + "project": "All CNCF Projects", + "approvedDate": "2025-11-21", + "status": "approved", + "scope": "vendored component, build-time dependency, or install-time dependency; statically or dynamically linked", + "results": "https://github.com/cncf/foundation/issues/1154", + "comment": "Blanket exception: Provides secure path resolution APIs on Linux. Used by Kubernetes, containerd, Podman, buildah, cri-o, nerdctl." + }, + { + "id": "exc-2025-11-21-002", + "package": "Liquibase", + "license": "FSL (Functional Source License)", + "project": "Keycloak", + "approvedDate": "2025-11-21", + "status": "denied", + "scope": "incorporated code, dynamically linked", + "results": "https://github.com/cncf/foundation/issues/1147", + "comment": "Denied: FSL is not an open source license. GB does not approve exceptions for non-OSS licenses." + }, + { + "id": "exc-2025-10-17-001", + "package": "paramiko", + "license": "LGPL-2.1", + "project": "oscal-compass", + "approvedDate": "2025-10-17", + "status": "approved", + "scope": "build-time dependency, dynamically linked", + "results": "https://github.com/cncf/foundation/issues/1108", + "comment": "Pure-Python SSHv2 protocol implementation, used for fetching files" + }, + { + "id": "exc-2025-10-17-002", + "package": "certifi", + "license": "MPL-2.0", + "project": "oscal-compass", + "approvedDate": "2025-10-17", + "status": "approved", + "scope": "install-time dependency, dynamically linked", + "results": "https://github.com/cncf/foundation/issues/1091", + "comment": "Dependency for requests library" + }, + { + "id": "exc-2025-10-17-003", + "package": "pathspec", + "license": "MPL-2.0", + "project": "oscal-compass", + "approvedDate": "2025-10-17", + "status": "approved", + "scope": "build-time dependency, separate process", + "results": "https://github.com/cncf/foundation/issues/1090", + "comment": "Dependency for black, mkdocs, mypy" + }, + { + "id": "exc-2025-10-17-004", + "package": "cyphar/filepath-securejoin", + "license": "BSD-3-Clause AND MPL-2.0", + "project": "Kubernetes", + "approvedDate": "2025-10-17", + "status": "approved", + "scope": "vendored component, build-time dependency, statically linked", + "results": "https://github.com/cncf/foundation/issues/1074", + "comment": "Provides secure path construction functions. Superseded by blanket exception in issue #1154." + }, + { + "id": "exc-2024-10-23-001", + "package": "hashicorp/terraform-provider-aws", + "license": "MPL-2.0", + "project": "Crossplane", + "approvedDate": "2024-10-23", + "status": "approved", + "scope": "build-time dependency, modified fork", + "results": "https://github.com/cncf/foundation/issues/818", + "comment": "Fork maintained for Crossplane providers, changes contributed upstream" + }, + { + "id": "exc-2024-10-23-002", + "package": "hashicorp/terraform-provider-azurerm", + "license": "MPL-2.0", + "project": "Crossplane", + "approvedDate": "2024-10-23", + "status": "approved", + "scope": "build-time dependency, modified fork", + "results": "https://github.com/cncf/foundation/issues/818", + "comment": "Fork maintained for Crossplane providers, changes contributed upstream" + }, + { + "id": "exc-2024-10-23-003", + "package": "hashicorp/terraform-provider-azuread", + "license": "MPL-2.0", + "project": "Crossplane", + "approvedDate": "2024-10-23", + "status": "approved", + "scope": "build-time dependency, modified fork", + "results": "https://github.com/cncf/foundation/issues/818", + "comment": "Fork maintained for Crossplane providers, changes contributed upstream" + }, + { + "id": "exc-2024-10-23-004", + "package": "apple/swift-nio-ssl", + "license": "OpenSSL", + "project": "Connect", + "approvedDate": "2024-10-23", + "status": "approved", + "scope": "build-time dependency, unmodified", + "results": "https://github.com/cncf/foundation/issues/823", + "comment": "Required for HTTP/2 + TLS with HTTP trailers on iOS. Also used by gRPC Swift." + }, + { + "id": "exc-2024-10-23-005", + "package": "Crossplane Upjet MPL dependencies", + "license": "MPL-2.0", + "project": "Crossplane", + "approvedDate": "2024-10-23", + "status": "approved", + "scope": "build-time dependency, unmodified, linked at build time", + "results": "https://github.com/cncf/foundation/issues/787", + "comment": "Various hashicorp terraform dependencies for Upjet: hcl, terraform-json, terraform-plugin-framework, terraform-plugin-go, terraform-plugin-sdk, go-plugin, go-uuid, go-version, logutils, terraform-plugin-log, terraform-registry-address, terraform-svchost, yamux" + }, + { + "id": "exc-2024-10-23-006", + "package": "Linux kernel uapi headers (btrfs)", + "license": "GPL-2.0-only WITH Linux-syscall-note", + "project": "containerd", + "approvedDate": "2024-10-23", + "status": "approved", + "scope": "kernel headers included via #include, no inline functions compiled in", + "results": "https://github.com/cncf/foundation/issues/174", + "comment": "Used by containerd/btrfs for btrfs-related ioctl syscalls. Headers from linux/btrfs.h and linux/btrfs_tree.h." + }, + { + "id": "exc-2024-10-22-001", + "package": "github.com/hashicorp/go-set/v2", + "license": "MPL-2.0", + "project": "OpenFGA", + "approvedDate": "2024-10-22", + "status": "approved", + "scope": "build-time dependency, linked at build time", + "results": "https://github.com/cncf/foundation/issues/830", + "comment": "Unmodified code" + }, + { + "id": "exc-2024-10-22-002", + "package": "Keycloak Java dependencies", + "license": "0BSD, CDDL-1.1, EPL-1.0, EPL-2.0, GPL-2.0-only, GPL-2.0-with-classpath-exception, LGPL-2.1, LGPL-2.1-only, MIT-0, MPL-2.0, UPL-1.0", + "project": "Keycloak", + "approvedDate": "2024-10-22", + "status": "approved", + "scope": "transitive dependencies from Quarkus framework, unmodified", + "results": "https://github.com/cncf/foundation/issues/817", + "comment": "Multiple Java dependencies including: tslib, h2, mysql-connector-j, jakarta.* APIs, parsson, graalvm SDK, hibernate-*, mariadb-java-client, nashorn-core, reactive-streams" + }, + { + "id": "exc-2024-12-17-001", + "package": "github.com/hashicorp/memberlist", + "license": "MPL-2.0", + "project": "kubernetes/kops", + "approvedDate": "2024-07-16", + "status": "approved", + "scope": "build-time dependency, unmodified", + "results": "https://github.com/cncf/foundation/issues/741", + "comment": "Main component of Gossip DNS feature for peer-to-peer network K8s API address propagation" + }, + { + "id": "exc-2024-02-27-001", + "package": "Falco kernel module", + "license": "GPL-2.0-only OR MIT", + "project": "Falco", + "approvedDate": "2024-02-27", + "status": "approved", + "scope": "kernel module, dual-licensed", + "results": "https://github.com/cncf/foundation/issues/645", + "comment": "Falco's kernel module is dual-licensed GPL-2.0-only OR MIT" + }, + { + "id": "blanket-ebpf-gpl", + "package": "In-kernel eBPF programs", + "license": "GPL-2.0-only, GPL-2.0-or-later", + "project": "All CNCF Projects", + "approvedDate": "2023-08-31", + "status": "approved", + "scope": "in-kernel eBPF programs only", + "results": "https://github.com/cncf/foundation/blob/main/license-exceptions/README.md#gpl-exceptions-for-in-kernel-ebpf-programs", + "comment": "Blanket exception: GPL-2.0 licensed code is permitted for in-kernel eBPF programs only, as this is required by the Linux kernel BPF subsystem." + }, + { + "id": "exc-2023-08-31-001", + "package": "github.com/docker/go-metrics", + "license": "CC-BY-SA 4.0", + "approvedDate": "2023-08-31", + "status": "approved", + "scope": "runtime dependency, statically linked", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31" + }, + { + "id": "exc-2023-08-31-002", + "package": "github.com/hashicorp/go-memdb", + "license": "MPL-2.0", + "approvedDate": "2023-08-31", + "status": "approved", + "scope": "runtime dependency, dynamically linked", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31", + "results": "https://github.com/cncf/foundation/issues/400", + "project": "Cilium" + }, + { + "id": "exc-2023-08-31-003", + "package": "github.com/shoenig/go-m1cpu", + "license": "MPL-2.0", + "approvedDate": "2023-08-31", + "status": "approved", + "scope": "build dependency", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31" + }, + { + "id": "exc-2023-08-31-004", + "package": "hashicorp/packer-plugin-sdk", + "license": "MPL-2.0", + "approvedDate": "2023-08-31", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31" + }, + { + "id": "exc-2023-06-27-001", + "package": "github.com/hashicorp/consul/api", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/400", + "scope": "build-time dependency, unmodified", + "project": "Cilium" + }, + { + "id": "exc-2023-06-27-002", + "package": "github.com/hashicorp/go-hclog", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/400", + "scope": "build-time dependency, unmodified", + "project": "Cilium" + }, + { + "id": "exc-2023-06-27-003", + "package": "github.com/hashicorp/go-immutable-radix", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/400", + "scope": "build-time dependency, unmodified", + "project": "Cilium" + }, + { + "id": "exc-2023-06-27-004", + "package": "github.com/hashicorp/go-plugin", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/300", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2023-06-27-005", + "package": "github.com/hashicorp/go-rootcerts", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/400", + "scope": "build-time dependency, unmodified", + "project": "Cilium" + }, + { + "id": "exc-2023-06-27-006", + "package": "github.com/hashicorp/go-secure-stdlib", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-007", + "package": "github.com/hashicorp/go-sockaddr", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-008", + "package": "github.com/hashicorp/go-uuid", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-009", + "package": "github.com/hashicorp/serf", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/400", + "scope": "build-time dependency, unmodified", + "project": "Cilium" + }, + { + "id": "exc-2023-06-27-010", + "package": "github.com/hashicorp/vault", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/485", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2023-06-27-011", + "package": "github.com/veraison/go-cose", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/526", + "scope": "build-time dependency, unmodified", + "project": "Notary" + }, + { + "id": "exc-2023-06-27-012", + "package": "hashicorp/consul/api", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-013", + "package": "hashicorp/go-hclog", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-014", + "package": "hashicorp/go-immutable-radix", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-015", + "package": "hashicorp/go-plugin", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/300", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2023-06-27-016", + "package": "hashicorp/go-rootcerts", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-017", + "package": "hashicorp/go-secure-stdlib", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-018", + "package": "hashicorp/go-sockaddr", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-019", + "package": "hashicorp/go-uuid", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-020", + "package": "hashicorp/go-version", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2023-06-27-021", + "package": "hashicorp/raft", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-022", + "package": "hashicorp/serf", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-023", + "package": "hashicorp/vault", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/485", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2023-06-27-024", + "package": "hashicorp/yamux", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/400", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2023-06-27-025", + "package": "veraison/go-cose", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/526", + "scope": "build-time dependency, unmodified", + "project": "Notary" + }, + { + "id": "exc-2022-04-12-001", + "package": "github.com/eclipse/paho.mqtt.golang", + "license": "EPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2022-04-12-002", + "package": "github.com/hashicorp/go-version", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2022-04-12-003", + "package": "github.com/hashicorp/raft", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified", + "project": "Dapr" + }, + { + "id": "exc-2022-04-12-004", + "package": "github.com/hashicorp/raft-boltdb", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified", + "project": "Dapr" + }, + { + "id": "exc-2022-04-12-005", + "package": "github.com/Microsoft/tslib", + "license": "0BSD", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2022-04-12-006", + "package": "go-version", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2022-04-12-007", + "package": "paho.mqtt.golang", + "license": "EPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2022-04-12-008", + "package": "raft", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified", + "project": "Dapr" + }, + { + "id": "exc-2022-04-12-009", + "package": "raft-boltdb", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified", + "project": "Dapr" + }, + { + "id": "exc-2022-04-12-010", + "package": "tslib", + "license": "0BSD", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2022-04-12-011", + "package": "webpki-roots", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/172", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2021-07-19-001", + "package": "github.com/hashicorp/go-retryablehttp", + "license": "MPL-2.0", + "approvedDate": "2021-07-19", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19", + "results": "https://github.com/cncf/foundation/issues/138", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2021-07-19-002", + "package": "go-retryablehttp", + "license": "MPL-2.0", + "approvedDate": "2021-07-19", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19", + "results": "https://github.com/cncf/foundation/issues/138", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2019-11-01-001", + "package": "Chart.js", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-002", + "package": "cloud.google.com/go", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-003", + "package": "code.cloudfoundry.org/clock", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-004", + "package": "colors", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-005", + "package": "defusedxml", + "license": "Python-2.0", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-006", + "package": "ejs", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-007", + "package": "github.com/abbot/go-http-auth", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-008", + "package": "github.com/aclements/go-moremath", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-009", + "package": "github.com/andygrunwald/go-gerrit", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-010", + "package": "github.com/aokoli/goutils", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-011", + "package": "github.com/appc/spec", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-012", + "package": "github.com/armon/circbuf", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-013", + "package": "github.com/armon/go-proxyproto", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-014", + "package": "github.com/armon/go-radix", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-015", + "package": "github.com/asaskevich/govalidator", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-016", + "package": "github.com/aws/aws-k8s-tester", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-017", + "package": "github.com/aws/aws-sdk-go", + "license": "((MIT OR GPL-3.0) AND BSD-3-Clause AND Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-018", + "package": "github.com/Azure/azure-sdk-for-go", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-019", + "package": "github.com/Azure/azure-storage-blob-go", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-020", + "package": "github.com/Azure/go-ansiterm", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-021", + "package": "github.com/Azure/go-autorest", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-022", + "package": "github.com/bazelbuild/bazel-gazelle", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-023", + "package": "github.com/bazelbuild/buildtools", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-024", + "package": "github.com/beorn7/perks", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-025", + "package": "github.com/blang/semver", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-026", + "package": "github.com/bluebreezecf/opentsdb-goclient", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-027", + "package": "github.com/boltdb/bolt", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-028", + "package": "github.com/bwmarrin/snowflake", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-029", + "package": "github.com/chai2010/gettext-go", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-030", + "package": "github.com/cloudflare/cfssl", + "license": "(BSD-2-Clause AND BSD-3-Clause AND ISC)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-031", + "package": "github.com/cloudfoundry-incubator/candiedyaml", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-032", + "package": "github.com/clusterhq/flocker-go", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-033", + "package": "github.com/cockroachdb/cmux", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-034", + "package": "github.com/codedellemc/goscaleio", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-035", + "package": "github.com/container-storage-interface/spec", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-036", + "package": "github.com/containerd/console", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-037", + "package": "github.com/containerd/containerd", + "license": "(CC-BY-4.0 AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-038", + "package": "github.com/containernetworking/cni", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-039", + "package": "github.com/containernetworking/plugins", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-040", + "package": "github.com/coredns/coredns", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-041", + "package": "github.com/coreos/bbolt", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-042", + "package": "github.com/coreos/etcd", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-043", + "package": "github.com/coreos/go-etcd", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-044", + "package": "github.com/coreos/go-oidc", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-045", + "package": "github.com/coreos/go-semver", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-046", + "package": "github.com/coreos/go-systemd", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-047", + "package": "github.com/coreos/pkg", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-048", + "package": "github.com/coreos/rkt", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-049", + "package": "github.com/cpuguy83/go-md2man", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-050", + "package": "github.com/cyphar/filepath-securejoin", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-051", + "package": "github.com/daaku/go.zipexe", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-052", + "package": "github.com/davecgh/go-spew", + "license": "ISC", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-053", + "package": "github.com/daviddengcn/go-colortext", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-054", + "package": "github.com/dchest/safefile", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-055", + "package": "github.com/deckarep/golang-set", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-056", + "package": "github.com/denverdino/aliyungo", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-057", + "package": "github.com/dgrijalva/jwt-go", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-058", + "package": "github.com/digitalocean/godo", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-059", + "package": "github.com/djherbis/atime", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-060", + "package": "github.com/docker/cli", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-061", + "package": "github.com/docker/distribution", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-062", + "package": "github.com/docker/docker", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-063", + "package": "github.com/docker/engine-api", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-064", + "package": "github.com/docker/go-connections", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-065", + "package": "github.com/docker/libcompose", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-066", + "package": "github.com/docker/libnetwork", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-067", + "package": "github.com/docker/libtrust", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-068", + "package": "github.com/docker/machine", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-069", + "package": "github.com/dustin/go-humanize", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-070", + "package": "github.com/eapache/channels", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-071", + "package": "github.com/eapache/go-resiliency", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-072", + "package": "github.com/eapache/go-xerial-snappy", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-073", + "package": "github.com/eapache/queue", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-074", + "package": "github.com/elazarl/go-bindata-assetfs", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-075", + "package": "github.com/elazarl/goproxy", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-076", + "package": "github.com/emicklei/go-restful", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-077", + "package": "github.com/emicklei/go-restful-swagger12", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-078", + "package": "github.com/emirpasic/gods", + "license": "(BSD-2-Clause AND ISC)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-079", + "package": "github.com/euank/go-kmsg-parser", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-080", + "package": "github.com/evanphx/json-patch", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-081", + "package": "github.com/exponent-io/jsonpath", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-082", + "package": "github.com/fatih/camelcase", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-083", + "package": "github.com/fatih/structs", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-084", + "package": "github.com/flynn/go-shlex", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-085", + "package": "github.com/fsnotify/fsnotify", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-086", + "package": "github.com/fsouza/fake-gcs-server", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-087", + "package": "github.com/fsouza/go-dockerclient", + "license": "(BSD-2-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-088", + "package": "github.com/fullsailor/pkcs7", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-089", + "package": "github.com/GeertJohan/go.rice", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-090", + "package": "github.com/ghodss/yaml", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-091", + "package": "github.com/globalsign/mgo", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-092", + "package": "github.com/go-ini/ini", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-093", + "package": "github.com/go-openapi/analysis", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-094", + "package": "github.com/go-openapi/errors", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-095", + "package": "github.com/go-openapi/jsonpointer", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-096", + "package": "github.com/go-openapi/jsonreference", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-097", + "package": "github.com/go-openapi/loads", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-098", + "package": "github.com/go-openapi/runtime", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-099", + "package": "github.com/go-openapi/spec", + "license": "(CC-BY-4.0 AND Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-100", + "package": "github.com/go-openapi/strfmt", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-101", + "package": "github.com/go-openapi/swag", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-102", + "package": "github.com/go-openapi/validate", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-103", + "package": "github.com/go-ozzo/ozzo-validation", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-104", + "package": "github.com/go-yaml/yaml", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-105", + "package": "github.com/gobuffalo/envy", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-106", + "package": "github.com/godbus/dbus", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-107", + "package": "github.com/gogo/protobuf", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-108", + "package": "github.com/golang/dep", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-109", + "package": "github.com/golang/glog", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-110", + "package": "github.com/golang/groupcache", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-111", + "package": "github.com/golang/lint", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-112", + "package": "github.com/golang/mock", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-113", + "package": "github.com/golang/protobuf", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-114", + "package": "github.com/golang/snappy", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-115", + "package": "github.com/google/btree", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-116", + "package": "github.com/google/cadvisor", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-117", + "package": "github.com/google/certificate-transparency-go", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-118", + "package": "github.com/google/go-containerregistry", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-119", + "package": "github.com/google/go-querystring", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-120", + "package": "github.com/google/go-tpm", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-121", + "package": "github.com/google/gofuzz", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-122", + "package": "github.com/google/uuid", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-123", + "package": "github.com/googleapis/gax-go", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-124", + "package": "github.com/googleapis/gnostic", + "license": "(BSD-3-Clause AND Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-125", + "package": "github.com/GoogleCloudPlatform/gke-managed-certs", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-126", + "package": "github.com/gophercloud/gophercloud", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-127", + "package": "github.com/gorilla/context", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-128", + "package": "github.com/gorilla/mux", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-129", + "package": "github.com/gorilla/securecookie", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-130", + "package": "github.com/gorilla/sessions", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-131", + "package": "github.com/gorilla/websocket", + "license": "(BSD-2-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-132", + "package": "github.com/gregjones/httpcache", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-133", + "package": "github.com/grpc-ecosystem/go-grpc-middleware", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-134", + "package": "github.com/grpc-ecosystem/go-grpc-prometheus", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-135", + "package": "github.com/grpc-ecosystem/grpc-gateway", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-136", + "package": "github.com/hawkular/hawkular-client-go", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-137", + "package": "github.com/heketi/heketi REST API", + "license": "(Apache-2.0 OR LGPL-3.0-or-later)", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-138", + "package": "github.com/hpcloud/tail", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-139", + "package": "github.com/huandu/xstrings", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-140", + "package": "github.com/imdario/mergo", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-141", + "package": "github.com/inconshreveable/mousetrap", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-142", + "package": "github.com/influxdata/influxdb", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-143", + "package": "github.com/jimmidyson/go-download", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-144", + "package": "github.com/jinzhu/gorm", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-145", + "package": "github.com/jinzhu/inflection", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-146", + "package": "github.com/jmespath/go-jmespath", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-147", + "package": "github.com/jmhodges/clock", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-148", + "package": "github.com/jmoiron/sqlx", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-149", + "package": "github.com/joho/godotenv", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-150", + "package": "github.com/jonboulle/clockwork", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-151", + "package": "github.com/jpillora/backoff", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-152", + "package": "github.com/json-iterator/go", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-153", + "package": "github.com/kardianos/osext", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-154", + "package": "github.com/karrick/godirwalk", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-155", + "package": "github.com/kevinburke/ssh_config", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-156", + "package": "github.com/kisielk/sqlstruct", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-157", + "package": "github.com/knative/build", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-158", + "package": "github.com/kr/fs", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-159", + "package": "github.com/kr/pretty", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-160", + "package": "github.com/kr/pty", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-161", + "package": "github.com/kr/text", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-162", + "package": "github.com/kubernetes-incubator/apiserver-builder", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-163", + "package": "github.com/kubernetes-incubator/reference-docs", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-164", + "package": "github.com/kubernetes-sigs/application", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-165", + "package": "github.com/kubernetes/repo-infra", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-166", + "package": "github.com/kylelemons/godebug", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-167", + "package": "github.com/lib/pq", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-168", + "package": "github.com/libopenstorage/openstorage", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-169", + "package": "github.com/libvirt/libvirt-go", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-170", + "package": "github.com/libvirt/libvirt-go-xml", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-171", + "package": "github.com/lpabon/godbc", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-172", + "package": "github.com/lxn/win", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-173", + "package": "github.com/magiconair/properties", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-174", + "package": "github.com/mailru/easyjson", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-175", + "package": "github.com/MakeNowJust/heredoc", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-176", + "package": "github.com/markbates/inflect", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-177", + "package": "github.com/marpaia/graphite-golang", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-178", + "package": "github.com/Masterminds/semver", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-179", + "package": "github.com/Masterminds/sprig", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-180", + "package": "github.com/Masterminds/vcs", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-181", + "package": "github.com/mattn/go-runewidth", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-182", + "package": "github.com/mattn/go-shellwords", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-183", + "package": "github.com/mattn/go-zglob", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-184", + "package": "github.com/matttproud/golang_protobuf_extensions", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-185", + "package": "github.com/mesos/mesos-go", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-186", + "package": "github.com/mholt/caddy", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-187", + "package": "github.com/Microsoft/go-winio", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-188", + "package": "github.com/Microsoft/hcsshim", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-189", + "package": "github.com/miekg/coredns", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-190", + "package": "github.com/miekg/dns", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-191", + "package": "github.com/mindprince/gonvml", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-192", + "package": "github.com/mistifyio/go-zfs", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-193", + "package": "github.com/mitchellh/go-homedir", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-194", + "package": "github.com/mitchellh/go-ps", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-195", + "package": "github.com/mitchellh/go-wordwrap", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-196", + "package": "github.com/mitchellh/hashstructure", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-197", + "package": "github.com/mitchellh/mapstructure", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-198", + "package": "github.com/moby/hyperkit", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-199", + "package": "github.com/modern-go/concurrent", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-200", + "package": "github.com/modern-go/reflect2", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-201", + "package": "github.com/mohae/deepcopy", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-202", + "package": "github.com/moul/http2curl", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-203", + "package": "github.com/mrunalp/fileutils", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-204", + "package": "github.com/mvdan/xurls", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-205", + "package": "github.com/mxk/go-flowrate", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-206", + "package": "github.com/ncabatoff/process-exporter", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-207", + "package": "github.com/nightlyone/lockfile", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-208", + "package": "github.com/novln/docker-parser", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-209", + "package": "github.com/NYTimes/gziphandler", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-210", + "package": "github.com/olekukonko/tablewriter", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-211", + "package": "github.com/onsi/ginkgo", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-212", + "package": "github.com/onsi/gomega", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-213", + "package": "github.com/opencontainers/image-spec", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-214", + "package": "github.com/opencontainers/runtime-spec", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-215", + "package": "github.com/opencontainers/selinux", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-216", + "package": "github.com/openshift/origin", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-217", + "package": "github.com/opentracing/opentracing-go", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-218", + "package": "github.com/parnurzeal/gorequest", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-219", + "package": "github.com/patrickmn/go-cache", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-220", + "package": "github.com/paultag/sniff", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-221", + "package": "github.com/pborman/uuid", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-222", + "package": "github.com/pelletier/go-buffruneio", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-223", + "package": "github.com/pelletier/go-toml", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-224", + "package": "github.com/petar/GoLLRB", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-225", + "package": "github.com/peterbourgon/diskv", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-226", + "package": "github.com/pierrec/lz4", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-227", + "package": "github.com/pierrec/xxHash", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-228", + "package": "github.com/pkg/browser", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-229", + "package": "github.com/pkg/errors", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-230", + "package": "github.com/pkg/profile", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-231", + "package": "github.com/pkg/sftp", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-232", + "package": "github.com/pmezard/go-difflib", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-233", + "package": "github.com/pquerna/cachecontrol", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-234", + "package": "github.com/pquerna/ffjson", + "license": "(BSD-3-Clause AND Apache-2.0 AND ISC)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-235", + "package": "github.com/prometheus/client_golang", + "license": "(BSD-3-Clause AND Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-236", + "package": "github.com/prometheus/client_model", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-237", + "package": "github.com/prometheus/common", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-238", + "package": "github.com/prometheus/procfs", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-239", + "package": "github.com/PuerkitoBio/purell", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-240", + "package": "github.com/PuerkitoBio/urlesc", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-241", + "package": "github.com/r2d4/external-storage", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-242", + "package": "github.com/rackspace/gophercloud", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-243", + "package": "github.com/rancher/go-rancher", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-244", + "package": "github.com/rcrowley/go-metrics", + "license": "BSD-2-Clause-FreeBSD", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-245", + "package": "github.com/renstrom/dedent", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-246", + "package": "github.com/Rican7/retry", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-247", + "package": "github.com/riemann/riemann-go-client", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-248", + "package": "github.com/robfig/cron", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-249", + "package": "github.com/russross/blackfriday", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-250", + "package": "github.com/samalba/dockerclient", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-251", + "package": "github.com/satori/go.uuid", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-252", + "package": "github.com/scalingdata/gcfg", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-253", + "package": "github.com/sdboyer/constext", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-254", + "package": "github.com/seccomp/libseccomp-golang", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-255", + "package": "github.com/sergi/go-diff", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-256", + "package": "github.com/Shopify/sarama", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-257", + "package": "github.com/shurcooL/githubv4", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-258", + "package": "github.com/shurcooL/go", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-259", + "package": "github.com/shurcooL/graphql", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-260", + "package": "github.com/shurcooL/sanitized_anchor_name", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-261", + "package": "github.com/sirupsen/logrus", + "license": "(BSD-2-Clause AND BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-262", + "package": "github.com/skynetservices/skydns", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-263", + "package": "github.com/smartystreets/go-aws-auth", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-264", + "package": "github.com/soheilhy/cmux", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-265", + "package": "github.com/spf13/afero", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-266", + "package": "github.com/spf13/cast", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-267", + "package": "github.com/spf13/cobra", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-268", + "package": "github.com/spf13/jwalterweatherman", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-269", + "package": "github.com/spf13/pflag", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-270", + "package": "github.com/spf13/viper", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-271", + "package": "github.com/storageos/go-api", + "license": "(BSD-2-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-272", + "package": "github.com/streadway/quantile", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-273", + "package": "github.com/stretchr/objx", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-274", + "package": "github.com/stretchr/testify", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-275", + "package": "github.com/syndtr/gocapability", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-276", + "package": "github.com/tchap/go-patricia", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-277", + "package": "github.com/thockin/glogr", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-278", + "package": "github.com/thockin/logr", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-279", + "package": "github.com/tmc/grpc-websocket-proxy", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-280", + "package": "github.com/tsenart/vegeta", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-281", + "package": "github.com/ugorji/go", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-282", + "package": "github.com/Unknwon/goconfig", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-283", + "package": "github.com/urfave/cli", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-284", + "package": "github.com/vishvananda/netlink", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-285", + "package": "github.com/vishvananda/netns", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-286", + "package": "github.com/vmware/govmomi", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-287", + "package": "github.com/vmware/photon-controller-go-sdk", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-288", + "package": "github.com/weaveworks/mesh", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-289", + "package": "github.com/xanzy/go-cloudstack", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-290", + "package": "github.com/xeipuuv/gojsonpointer", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-291", + "package": "github.com/xeipuuv/gojsonreference", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-292", + "package": "github.com/xeipuuv/gojsonschema", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-293", + "package": "github.com/xiang90/probing", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-294", + "package": "github.com/zakjan/cert-chain-resolver", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-295", + "package": "github.com/ziutek/syslog", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-296", + "package": "go.opencensus.io", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-297", + "package": "go.uber.org/atomic", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-298", + "package": "go.uber.org/multierr", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-299", + "package": "go.uber.org/zap", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-300", + "package": "go4.org/errorutil", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-301", + "package": "golang.org/x/build", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-302", + "package": "golang.org/x/exp", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-303", + "package": "golang.org/x/lint", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-304", + "package": "golang.org/x/oauth2", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-305", + "package": "golang.org/x/sync", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-306", + "package": "golang.org/x/sys", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-307", + "package": "golang.org/x/text", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-308", + "package": "golang.org/x/time", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-309", + "package": "golang.org/x/tools", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause AND Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-310", + "package": "golang/archive/tar", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-311", + "package": "gonum.org/v1/gonum", + "license": "((BSD-3-Clause OR CC0-1.0) AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-312", + "package": "google.golang.org/cloud", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-313", + "package": "google.golang.org/genproto", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-314", + "package": "gopkg.in/check.v1", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-315", + "package": "gopkg.in/cheggaaa/pb.v1", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-316", + "package": "gopkg.in/fsnotify", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-317", + "package": "gopkg.in/gcfg.v1", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-318", + "package": "gopkg.in/go-playground/pool.v3", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-319", + "package": "gopkg.in/igm/sockjs-go.v2", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-320", + "package": "gopkg.in/inf.v0", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-321", + "package": "gopkg.in/natefinch/lumberjack.v2", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-322", + "package": "gopkg.in/olivere/elastic.v3", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-323", + "package": "gopkg.in/olivere/elastic.v5", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-324", + "package": "gopkg.in/robfig/cron.v2", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-325", + "package": "gopkg.in/square/go-jose.v2", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-326", + "package": "gopkg.in/src-d", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-327", + "package": "gopkg.in/tomb.v1", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-328", + "package": "jquery.scrollto", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-329", + "package": "marked", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-330", + "package": "mime", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-331", + "package": "minimist", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-332", + "package": "node-static", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-333", + "package": "optimist", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-334", + "package": "ui-router for Angular", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-335", + "package": "vbom.ml/util", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-336", + "package": "wordwrap", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-05-20-001", + "package": "VirtualBox Linux Guest Drivers Makefile", + "license": "GPL-2.0-only", + "approvedDate": "2019-05-20", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-05-20" + }, + { + "id": "exc-2019-03-11-001", + "package": "Angular", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-002", + "package": "Asciidoctor", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-003", + "package": "Azure acr-docker-credential-helper", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-004", + "package": "Backbone", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-005", + "package": "bitbucket.org/bertimus9/systemstat", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-006", + "package": "bitbucket.org/ww/goautoneg", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-007", + "package": "bootstrap", + "license": "(CC-BY-3.0 AND MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-008", + "package": "dialog-polyfill.css", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-009", + "package": "font-awesome", + "license": "(CC-BY-3.0 AND MIT AND OFL-1.1)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-010", + "package": "Gingko", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-011", + "package": "github.com/Azure/azure-pipeline-go", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-012", + "package": "github.com/bungle/lua-resty-template", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-013", + "package": "github.com/c4milo/gotoolkit", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-014", + "package": "github.com/client9/misspell", + "license": "(Unlicense AND BSD-3-Clause AND MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-015", + "package": "github.com/d2g/dhcp4", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-016", + "package": "github.com/d2g/dhcp4client", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-017", + "package": "github.com/dgryski/go-onlinestats", + "license": "(MIT AND LicenseRef-Public-domain-statement)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-018", + "package": "github.com/docker/go-units", + "license": "(CC-BY-SA-4.0 AND CC-BY-4.0 AND Apache-2.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-019", + "package": "github.com/docker/spdystream", + "license": "(CC-BY-SA-4.0 AND CC-BY-4.0 AND BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-020", + "package": "github.com/go-sql-driver/mysql", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-021", + "package": "github.com/gonum/graph", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-022", + "package": "github.com/google/go-github", + "license": "(BSD-3-Clause AND CC-BY-3.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-023", + "package": "github.com/grpc-ecosystem/grpc-opentracing", + "license": "(BSD-3-Clause AND LicenseRef-Google-Patents-Notice-GRPC)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-024", + "package": "github.com/hashicorp/errwrap", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-025", + "package": "github.com/hashicorp/go-cleanhttp", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-026", + "package": "github.com/hashicorp/go-multierror", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-027", + "package": "github.com/hashicorp/golang-lru", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-028", + "package": "github.com/hashicorp/hcl", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-029", + "package": "github.com/hooklift/iso9660", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-030", + "package": "github.com/howeyc/gopass", + "license": "(ISC AND CDDL-1.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-031", + "package": "github.com/jbenet/go-context", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-032", + "package": "github.com/JeffAshton/win_pdh", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-033", + "package": "github.com/jmank88/nuts", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-034", + "package": "github.com/johanneswuerbach/nfsexports", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-035", + "package": "github.com/joshdk/go-junit", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-036", + "package": "github.com/jteeuwen/go-bindata", + "license": "CC0-1.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-037", + "package": "github.com/konsorten/go-windows-terminal-sequences", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-038", + "package": "github.com/marstr/guid", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-039", + "package": "github.com/mattn/go-sqlite3", + "license": "(MIT AND LicenseRef-Public-domain-statement)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-040", + "package": "github.com/multiarch/qemu-user-static", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-041", + "package": "github.com/Nvveen/Gotty", + "license": "BSD-2-Clause-FreeBSD", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-042", + "package": "github.com/opencontainers/go-digest", + "license": "(CC-BY-SA-4.0 AND CC-BY-4.0 AND Apache-2.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-043", + "package": "github.com/opencontainers/runc", + "license": "(LicenseRef-CC-unspecified AND Apache-2.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-044", + "package": "github.com/quobyte/api", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-045", + "package": "github.com/rubiojr/go-vhd", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-046", + "package": "github.com/sigma/go-inotify", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-047", + "package": "github.com/spotinst/spotinst-sdk-go", + "license": "(BSD-3-Clause AND Apache-2.0 AND MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-048", + "package": "github.com/src-d/gcfg", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-049", + "package": "github.com/tent/http-link-go", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-050", + "package": "github.com/xanzy/ssh-agent", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-051", + "package": "github.com/zchee/go-vmnet", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-052", + "package": "go-srcimporter", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-053", + "package": "go9p", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-054", + "package": "godep", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-055", + "package": "golang.org/x/crypto", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause AND MIT AND LicenseRef-Public-domain-statement)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-056", + "package": "golang.org/x/net", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-2-Clause AND BSD-3-Clause AND CC-BY-3.0 AND (BSD-3-Clause OR LicenseRef-W3C-Test-Suite-License-1))", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-057", + "package": "golang/expansion", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-058", + "package": "golang/go/types", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-059", + "package": "golang/internal/srcimporter", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-060", + "package": "golang/json", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-061", + "package": "golang/netutil", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-062", + "package": "golang/reflect", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-063", + "package": "golang/template", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-064", + "package": "Google Protocol Buffers", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-065", + "package": "google.golang.org/api", + "license": "(BSD-3-Clause AND Apache-2.0 AND MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-066", + "package": "google.golang.org/appengine", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-067", + "package": "google.golang.org/grpc", + "license": "(BSD-3-Clause AND Apache-2.0 AND LicenseRef-Google-Patents-Notice-GRPC)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-068", + "package": "gopkg.in/warnings.v0", + "license": "BSD-2-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-069", + "package": "Handlebars", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-070", + "package": "Highlight", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-071", + "package": "highlight.js", + "license": "(BSD-3-Clause AND MIT AND CC0-1.0 AND LicenseRef-Public-domain-statement)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-072", + "package": "htpasswd", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-073", + "package": "jQuery", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-074", + "package": "jQuery BBQ", + "license": "(MIT OR GPL-2.0+)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-075", + "package": "jQuery hashchange event", + "license": "(GPL-2.0+ OR MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-076", + "package": "jQuery Slideto", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-077", + "package": "jQuery Wiggle", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-078", + "package": "moment.js", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-079", + "package": "normalize.css", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-080", + "package": "Octicons", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-081", + "package": "parseUri", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-082", + "package": "Pause", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-083", + "package": "Pure CSS", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-084", + "package": "shred", + "license": "ISC", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-085", + "package": "sigs.k8s.io/yaml", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "fork of github.com/ghodss/yaml; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-086", + "package": "speter.net/go/exp", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-087", + "package": "sprintf() for JavaScript", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-088", + "package": "Underscore.js", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + } + ] +} \ No newline at end of file diff --git a/license-exceptions/site/index.html b/license-exceptions/site/index.html new file mode 100644 index 00000000..8579cfda --- /dev/null +++ b/license-exceptions/site/index.html @@ -0,0 +1,123 @@ + + + + + + CNCF License Exceptions + + + +
+
+

CNCF License Exceptions

+

Approved license exceptions for CNCF projects

+
+
+ +
+ +
+
+
+ + +
+
+ + +
+
+ + +
+
+ + +
+
+ + +
+
+
+ +
+
+ + +
+ Loading... +
+ + +
+
+ + +
+
+ + + + + + + + + + + + + + + +
Package or Category License Project ScopeStatus Approved Date Results
+
+ +
+
+ + + + + + diff --git a/license-exceptions/site/styles.css b/license-exceptions/site/styles.css new file mode 100644 index 00000000..ec717937 --- /dev/null +++ b/license-exceptions/site/styles.css @@ -0,0 +1,682 @@ +/* CSS Variables */ +:root { + --cncf-blue: #446ca9; + --cncf-blue-dark: #365589; + --cncf-blue-light: #5a82bf; + --color-success: #28a745; + --color-info: #17a2b8; + --color-secondary: #6c757d; + --color-warning: #ffc107; + --color-bg: #f8f9fa; + --color-bg-white: #ffffff; + --color-text: #212529; + --color-text-muted: #6c757d; + --color-border: #dee2e6; + --shadow-sm: 0 1px 2px rgba(0, 0, 0, 0.05); + --shadow-md: 0 4px 6px rgba(0, 0, 0, 0.1); + --radius-sm: 4px; + --radius-md: 8px; + --radius-lg: 12px; +} + +/* Reset & Base */ +*, *::before, *::after { + box-sizing: border-box; +} + +body { + margin: 0; + font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif; + font-size: 16px; + line-height: 1.6; + color: var(--color-text); + background-color: var(--color-bg); +} + +.container { + max-width: 1400px; + margin: 0 auto; + padding: 0 1.5rem; +} + +/* Header */ +.header { + background: linear-gradient(135deg, var(--cncf-blue) 0%, var(--cncf-blue-dark) 100%); + color: white; + padding: 2.5rem 0; + text-align: center; +} + +.header h1 { + margin: 0; + font-size: 2.5rem; + font-weight: 700; +} + +.header .subtitle { + margin: 0.5rem 0 0; + opacity: 0.9; + font-size: 1.1rem; +} + +/* Navigation */ +.nav { + background: var(--color-bg-white); + border-bottom: 1px solid var(--color-border); + box-shadow: var(--shadow-sm); +} + +.nav-links { + list-style: none; + margin: 0; + padding: 0; + display: flex; + gap: 0; +} + +.nav-links li { + margin: 0; +} + +.nav-links a { + display: block; + padding: 1rem 1.5rem; + color: var(--color-text); + text-decoration: none; + font-weight: 500; + border-bottom: 3px solid transparent; + transition: color 0.2s, border-color 0.2s, background-color 0.2s; +} + +.nav-links a:hover { + color: var(--cncf-blue); + background-color: rgba(68, 108, 169, 0.05); +} + +.nav-links a.active { + color: var(--cncf-blue); + border-bottom-color: var(--cncf-blue); +} + +/* Filters */ +.filters { + background: var(--color-bg-white); + padding: 1.5rem; + margin: 1.5rem 0; + border-radius: var(--radius-md); + box-shadow: var(--shadow-sm); +} + +.filters-row { + display: grid; + grid-template-columns: repeat(auto-fit, minmax(200px, 1fr)); + gap: 1rem; +} + +.filter-group { + display: flex; + flex-direction: column; +} + +.filter-group label { + font-weight: 600; + font-size: 0.875rem; + color: var(--color-text-muted); + margin-bottom: 0.375rem; +} + +.filter-group input, +.filter-group select { + padding: 0.625rem 0.75rem; + border: 1px solid var(--color-border); + border-radius: var(--radius-sm); + font-size: 1rem; + transition: border-color 0.2s, box-shadow 0.2s; +} + +.filter-group input:focus, +.filter-group select:focus { + outline: none; + border-color: var(--cncf-blue); + box-shadow: 0 0 0 3px rgba(68, 108, 169, 0.15); +} + +.filters-actions { + margin-top: 1rem; + display: flex; + justify-content: flex-end; +} + +/* Buttons */ +.btn { + padding: 0.625rem 1.25rem; + border: none; + border-radius: var(--radius-sm); + font-size: 0.9375rem; + font-weight: 500; + cursor: pointer; + transition: background-color 0.2s, transform 0.1s; +} + +.btn:hover { + transform: translateY(-1px); +} + +.btn:active { + transform: translateY(0); +} + +.btn-primary { + background-color: var(--cncf-blue); + color: white; +} + +.btn-primary:hover { + background-color: var(--cncf-blue-dark); +} + +.btn-secondary { + background-color: var(--color-bg); + color: var(--color-text); + border: 1px solid var(--color-border); +} + +.btn-secondary:hover { + background-color: var(--color-border); +} + +.link-btn { + background: none; + border: none; + color: inherit; + font: inherit; + cursor: pointer; + text-decoration: underline; + padding: 0; +} + +.link-btn:hover { + color: var(--cncf-blue-light); +} + +/* Sort Controls */ +.sort-controls { + display: flex; + justify-content: space-between; + align-items: center; + margin-bottom: 1rem; + flex-wrap: wrap; + gap: 1rem; +} + +.results-count { + font-weight: 600; + color: var(--color-text-muted); +} + +.sort-group { + display: flex; + align-items: center; + gap: 0.5rem; +} + +.sort-group label { + font-size: 0.875rem; + color: var(--color-text-muted); +} + +.sort-group select { + padding: 0.5rem 0.75rem; + border: 1px solid var(--color-border); + border-radius: var(--radius-sm); + font-size: 0.875rem; +} + +/* Blanket Exceptions */ +.blanket-exceptions { + margin: 2rem 0; +} + +.blanket-exceptions h2 { + font-size: 1.5rem; + margin: 0 0 1rem; + color: var(--cncf-blue); +} + +.blanket-cards { + display: grid; + grid-template-columns: repeat(auto-fit, minmax(350px, 1fr)); + gap: 1rem; +} + +.blanket-card { + background: linear-gradient(135deg, var(--cncf-blue) 0%, var(--cncf-blue-light) 100%); + color: white; + padding: 1.5rem; + border-radius: var(--radius-md); + box-shadow: var(--shadow-md); +} + +.blanket-card h3 { + margin: 0 0 0.75rem; + font-size: 1.25rem; +} + +.blanket-card p { + margin: 0 0 1rem; + opacity: 0.95; + font-size: 0.9375rem; + line-height: 1.5; +} + +.blanket-card .meta { + display: flex; + flex-wrap: wrap; + gap: 0.75rem; + font-size: 0.8125rem; + opacity: 0.9; +} + +.blanket-card .meta-item { + display: flex; + align-items: center; + gap: 0.25rem; +} + +.blanket-card .licenses { + display: flex; + flex-wrap: wrap; + gap: 0.5rem; + margin-top: 0.75rem; +} + +.blanket-card .license-tag { + background: rgba(255, 255, 255, 0.2); + padding: 0.25rem 0.5rem; + border-radius: var(--radius-sm); + font-family: 'SFMono-Regular', Consolas, 'Liberation Mono', Menlo, monospace; + font-size: 0.8125rem; +} + +.blanket-card a { + color: white; + text-decoration: underline; +} + +.blanket-card a:hover { + opacity: 0.8; +} + +/* Blanket Exceptions Page */ +.blanket-exceptions-page { + margin: 2rem 0; +} + +.blanket-exceptions-page .page-header { + margin-bottom: 2rem; +} + +.blanket-exceptions-page .page-header h2 { + font-size: 1.75rem; + margin: 0 0 0.5rem; + color: var(--cncf-blue); +} + +.blanket-exceptions-page .page-description { + color: var(--color-text-muted); + font-size: 1rem; + margin: 0; + max-width: 800px; +} + +.blanket-card-large { + padding: 2rem; +} + +.blanket-card-large h3 { + font-size: 1.5rem; + margin: 0 0 1rem; +} + +.blanket-card-large .description { + font-size: 1rem; + line-height: 1.6; + margin: 0 0 1.5rem; +} + +.blanket-card-large .meta { + display: flex; + flex-direction: column; + gap: 0.5rem; + margin-bottom: 1.5rem; +} + +.blanket-card-large .meta-item { + font-size: 0.9375rem; +} + +.blanket-card-large .licenses { + margin-bottom: 1.5rem; +} + +.blanket-card-large .licenses strong { + display: block; + margin-bottom: 0.5rem; + font-size: 0.875rem; + opacity: 0.9; +} + +.blanket-card-large .license-tags { + display: flex; + flex-wrap: wrap; + gap: 0.5rem; +} + +.blanket-card-large .documentation { + padding-top: 1rem; + border-top: 1px solid rgba(255, 255, 255, 0.2); +} + +.blanket-card-large .doc-link { + display: inline-flex; + align-items: center; + gap: 0.5rem; + color: white; + text-decoration: none; + font-weight: 500; + padding: 0.5rem 1rem; + background: rgba(255, 255, 255, 0.15); + border-radius: var(--radius-sm); + transition: background-color 0.2s; +} + +.blanket-card-large .doc-link:hover { + background: rgba(255, 255, 255, 0.25); + opacity: 1; +} + +.error-message { + text-align: center; + padding: 2rem; + color: #dc3545; + background: #fff; + border-radius: var(--radius-md); +} + +/* Results Table */ +.results { + background: var(--color-bg-white); + border-radius: var(--radius-md); + box-shadow: var(--shadow-sm); + overflow: hidden; +} + +.table-wrapper { + overflow-x: auto; +} + +#exceptions-table { + width: 100%; + border-collapse: collapse; + font-size: 0.9375rem; +} + +#exceptions-table thead { + background: var(--cncf-blue); + color: white; + position: sticky; + top: 0; + z-index: 10; +} + +#exceptions-table th { + padding: 1rem; + text-align: left; + font-weight: 600; + white-space: nowrap; +} + +#exceptions-table th.sortable { + cursor: pointer; + user-select: none; + transition: background-color 0.2s; +} + +#exceptions-table th.sortable:hover { + background-color: var(--cncf-blue-dark); +} + +#exceptions-table th.sortable.sorted { + background-color: var(--cncf-blue-dark); +} + +#exceptions-table th .sort-indicator { + font-size: 0.75rem; + opacity: 0.9; +} + +#exceptions-table td { + padding: 0.875rem 1rem; + border-bottom: 1px solid var(--color-border); + vertical-align: middle; +} + +#exceptions-table tbody tr:hover { + background-color: rgba(68, 108, 169, 0.04); +} + +#exceptions-table tbody tr:last-child td { + border-bottom: none; +} + +/* Package Links */ +.package-link { + color: var(--cncf-blue); + text-decoration: none; + word-break: break-word; +} + +.package-link:hover { + text-decoration: underline; +} + +.package-name { + word-break: break-word; +} + +/* Results Link */ +.results-link { + display: inline-flex; + align-items: center; + gap: 0.25rem; + color: var(--cncf-blue); + text-decoration: none; + font-size: 0.875rem; + font-weight: 500; + padding: 0.25rem 0.5rem; + border-radius: var(--radius-sm); + background-color: rgba(68, 108, 169, 0.08); + transition: background-color 0.2s, color 0.2s; +} + +.results-link:hover { + background-color: rgba(68, 108, 169, 0.15); + text-decoration: none; +} + +/* License Badge */ +.license-badge { + display: inline-block; + background: var(--color-bg); + color: var(--color-text); + padding: 0.25rem 0.5rem; + border-radius: var(--radius-sm); + font-family: 'SFMono-Regular', Consolas, 'Liberation Mono', Menlo, monospace; + font-size: 0.8125rem; + max-width: 300px; + word-break: break-word; +} + +/* Status Badges */ +.status-badge { + display: inline-block; + padding: 0.25rem 0.625rem; + border-radius: var(--radius-sm); + font-size: 0.8125rem; + font-weight: 600; + text-transform: capitalize; +} + +.status-approved { + background-color: #d4edda; + color: #155724; +} + +.status-allowlisted { + background-color: #cce5ff; + color: #004085; +} + +.status-apache-2-0 { + background-color: #e2e3e5; + color: #383d41; +} + +.status-denied { + background-color: #f8d7da; + color: #721c24; +} + +/* No Results */ +.no-results { + padding: 3rem; + text-align: center; + color: var(--color-text-muted); +} + +.no-results p { + margin: 0; + font-size: 1.125rem; +} + +/* Footer */ +.footer { + background: var(--color-text); + color: white; + padding: 2rem 0; + margin-top: 3rem; +} + +.footer .container { + text-align: center; +} + +.footer-links { + display: flex; + justify-content: center; + gap: 2rem; + flex-wrap: wrap; + margin-bottom: 1rem; +} + +.footer-links a, +.footer-links button { + color: white; + text-decoration: none; + font-size: 0.9375rem; + transition: opacity 0.2s; +} + +.footer-links a:hover, +.footer-links button:hover { + opacity: 0.8; + text-decoration: underline; +} + +.footer-meta { + margin: 0; + font-size: 0.875rem; + opacity: 0.7; +} + +/* Responsive */ +@media (max-width: 768px) { + .header h1 { + font-size: 1.75rem; + } + + .header .subtitle { + font-size: 1rem; + } + + .filters-row { + grid-template-columns: 1fr; + } + + .sort-controls { + flex-direction: column; + align-items: flex-start; + } + + .blanket-cards { + grid-template-columns: 1fr; + } + + #exceptions-table { + font-size: 0.875rem; + } + + #exceptions-table th, + #exceptions-table td { + padding: 0.75rem 0.5rem; + } + + .footer-links { + flex-direction: column; + gap: 1rem; + } +} + +/* Loading State */ +.loading { + text-align: center; + padding: 3rem; + color: var(--color-text-muted); +} + +.loading::after { + content: ''; + display: inline-block; + width: 1rem; + height: 1rem; + border: 2px solid var(--color-border); + border-top-color: var(--cncf-blue); + border-radius: 50%; + animation: spin 1s linear infinite; + margin-left: 0.5rem; + vertical-align: middle; +} + +@keyframes spin { + to { + transform: rotate(360deg); + } +} + +/* Scrollbar styling for table */ +.table-wrapper::-webkit-scrollbar { + height: 8px; +} + +.table-wrapper::-webkit-scrollbar-track { + background: var(--color-bg); +} + +.table-wrapper::-webkit-scrollbar-thumb { + background: var(--color-border); + border-radius: 4px; +} + +.table-wrapper::-webkit-scrollbar-thumb:hover { + background: var(--color-text-muted); +} diff --git a/license-exceptions/tests/blanket-exceptions.spec.js b/license-exceptions/tests/blanket-exceptions.spec.js new file mode 100644 index 00000000..904c8e90 --- /dev/null +++ b/license-exceptions/tests/blanket-exceptions.spec.js @@ -0,0 +1,86 @@ +// @ts-check +const { test, expect } = require('@playwright/test'); + +/** + * E2E tests for CNCF License Exceptions - Blanket Exceptions page + */ + +test.describe('Blanket Exceptions Page', () => { + test.beforeEach(async ({ page }) => { + await page.goto('/site/blanket-exceptions.html'); + }); + + test('page loads successfully with title', async ({ page }) => { + await expect(page).toHaveTitle('Blanket Exceptions - CNCF License Exceptions'); + await expect(page.locator('h1')).toHaveText('CNCF License Exceptions'); + await expect(page.locator('h2')).toHaveText('Blanket Exceptions'); + }); + + test('page has description text', async ({ page }) => { + await expect(page.locator('.page-description')).toContainText('pre-approved license exceptions'); + }); + + test('navigation links are present and correct', async ({ page }) => { + const navLinks = page.locator('.nav-links a'); + await expect(navLinks).toHaveCount(2); + + await expect(navLinks.nth(0)).toHaveText('Package Exceptions'); + await expect(navLinks.nth(1)).toHaveText('Blanket Exceptions'); + await expect(navLinks.nth(1)).toHaveClass(/active/); + }); + + test('can navigate to package exceptions page', async ({ page }) => { + await page.click('a:has-text("Package Exceptions")'); + // Check for index.html or just /site/ path + await expect(page).toHaveURL(/index\.html|\/site\/?$/); + }); + + test('blanket exception cards load', async ({ page }) => { + // Wait a moment for JS to populate + await page.waitForTimeout(1000); + + // Either cards are shown or no-results message + const cards = page.locator('#blanket-cards .blanket-card'); + const noResults = page.locator('#no-results'); + + const cardsCount = await cards.count(); + const noResultsVisible = await noResults.isVisible(); + + // One or the other should be true + expect(cardsCount > 0 || noResultsVisible).toBe(true); + }); + + test('footer displays metadata', async ({ page }) => { + // Wait for data to load + await page.waitForTimeout(1000); + + await expect(page.locator('#data-version')).not.toHaveText('-'); + await expect(page.locator('#last-updated')).not.toHaveText('-'); + }); + + test('GitHub link is present in footer', async ({ page }) => { + // Use footer-specific selector + const githubLink = page.locator('.footer a[href*="github.com/cncf/foundation"]'); + await expect(githubLink).toBeVisible(); + }); + + test('JSON download link is present', async ({ page }) => { + const jsonLink = page.locator('a[download="cncf-license-exceptions.json"]'); + await expect(jsonLink).toBeVisible(); + }); +}); + +test.describe('Navigation Between Pages', () => { + test('can navigate from blanket page to main page', async ({ page }) => { + // Start at blanket exceptions page (has nav) + await page.goto('/site/blanket-exceptions.html'); + await expect(page.locator('.nav-links a.active')).toHaveText('Blanket Exceptions'); + + // Navigate to package exceptions (main page) + await page.click('a:has-text("Package Exceptions")'); + await expect(page).toHaveURL(/index\.html|\/site\/?$/); + + // Main page doesn't have nav since blanket exceptions are now in the main table + await expect(page.locator('h1')).toHaveText('CNCF License Exceptions'); + }); +}); diff --git a/license-exceptions/tests/package-exceptions.spec.js b/license-exceptions/tests/package-exceptions.spec.js new file mode 100644 index 00000000..0a4066ca --- /dev/null +++ b/license-exceptions/tests/package-exceptions.spec.js @@ -0,0 +1,245 @@ +// @ts-check +const { test, expect } = require('@playwright/test'); + +/** + * E2E tests for CNCF License Exceptions - Package Exceptions page + */ + +// Helper to wait for data to load +async function waitForDataLoad(page) { + // Wait for the results count to show actual data (not "Loading...") + // Use a regex that matches either "X exceptions" or "X of Y exceptions" + await expect(page.locator('#results-count')).toHaveText(/\d+ (of \d+ )?exceptions/, { timeout: 15000 }); +} + +test.describe('Package Exceptions Page', () => { + test.beforeEach(async ({ page }) => { + await page.goto('/site/index.html'); + }); + + test('page loads successfully with title', async ({ page }) => { + await expect(page).toHaveTitle('CNCF License Exceptions'); + await expect(page.locator('h1')).toHaveText('CNCF License Exceptions'); + }); + + test('data loads and displays in table', async ({ page }) => { + await waitForDataLoad(page); + + // Check that we have rows in the table + const rows = page.locator('#exceptions-tbody tr'); + await expect(rows).not.toHaveCount(0); + + // Verify results count shows a number + const resultsText = await page.locator('#results-count').textContent(); + expect(resultsText).toMatch(/\d+ exceptions/); + }); + + test('page has subtitle text', async ({ page }) => { + // The page should have subtitle text about license exceptions + await expect(page.locator('.subtitle')).toBeVisible(); + await expect(page.locator('.subtitle')).toContainText('Approved license exceptions'); + }); + + test('blanket exceptions are shown in main table', async ({ page }) => { + await waitForDataLoad(page); + // Search for blanket exceptions (project = "All CNCF Projects") + await page.selectOption('#project-filter', 'All CNCF Projects'); + await page.waitForTimeout(100); + + // Should find at least one blanket exception + const rows = page.locator('#exceptions-tbody tr'); + const count = await rows.count(); + expect(count).toBeGreaterThan(0); + }); +}); + +test.describe('Search Functionality', () => { + test.beforeEach(async ({ page }) => { + await page.goto('/site/index.html'); + await waitForDataLoad(page); + }); + + test('search filters results', async ({ page }) => { + // Type a search term + await page.fill('#search', 'MIT'); + + // Wait for debounce and filtering + await page.waitForTimeout(400); + + // Check that results are filtered + const filteredText = await page.locator('#results-count').textContent(); + expect(filteredText).toMatch(/\d+ of \d+ exceptions|\d+ exceptions/); + }); + + test('search with no results shows message', async ({ page }) => { + await page.fill('#search', 'xyznonexistent123456789'); + await page.waitForTimeout(400); + + await expect(page.locator('#no-results')).toBeVisible(); + await expect(page.locator('#results-count')).toHaveText(/0 of \d+ exceptions/); + }); + + test('clear filters button resets search', async ({ page }) => { + await page.fill('#search', 'MIT'); + await page.waitForTimeout(400); + + await page.click('#clear-filters'); + + await expect(page.locator('#search')).toHaveValue(''); + const resultsText = await page.locator('#results-count').textContent(); + expect(resultsText).not.toMatch(/of/); // Should show total, not "X of Y" + }); +}); + +test.describe('Filter Dropdowns', () => { + test.beforeEach(async ({ page }) => { + await page.goto('/site/index.html'); + await waitForDataLoad(page); + }); + + test('license filter has options populated', async ({ page }) => { + const options = page.locator('#license-filter option'); + // Should have more than just "All Licenses" + const count = await options.count(); + expect(count).toBeGreaterThan(1); + }); + + test('status filter works', async ({ page }) => { + await page.selectOption('#status-filter', 'approved'); + + // All visible rows should have "approved" status + const statusBadges = page.locator('#exceptions-tbody .status-badge'); + const count = await statusBadges.count(); + + if (count > 0) { + for (let i = 0; i < Math.min(count, 5); i++) { + await expect(statusBadges.nth(i)).toHaveText('approved'); + } + } + }); + + test('year filter has options populated', async ({ page }) => { + const options = page.locator('#year-filter option'); + const count = await options.count(); + expect(count).toBeGreaterThan(1); + }); + + test('multiple filters can be combined', async ({ page }) => { + await page.selectOption('#status-filter', 'approved'); + await page.waitForTimeout(100); + + await page.fill('#search', 'MIT'); + await page.waitForTimeout(400); + + const afterBothText = await page.locator('#results-count').textContent(); + + // Results should be filtered (might be same or different depending on data) + expect(afterBothText).toMatch(/\d+/); + }); +}); + +test.describe('Column Sorting', () => { + test.beforeEach(async ({ page }) => { + await page.goto('/site/index.html'); + await waitForDataLoad(page); + }); + + test('clicking package column header sorts by package', async ({ page }) => { + const packageHeader = page.locator('th[data-sort="package"]'); + + // Click to sort ascending + await packageHeader.click(); + + // Check sort indicator appears + const indicator = packageHeader.locator('.sort-indicator'); + await expect(indicator).toHaveText(/[▲▼]/); + + // Header should have sorted class + await expect(packageHeader).toHaveClass(/sorted/); + }); + + test('clicking same column toggles sort direction', async ({ page }) => { + const packageHeader = page.locator('th[data-sort="package"]'); + + // Click once for ascending + await packageHeader.click(); + const firstIndicator = await packageHeader.locator('.sort-indicator').textContent(); + + // Click again for descending + await packageHeader.click(); + const secondIndicator = await packageHeader.locator('.sort-indicator').textContent(); + + // Direction should change + expect(firstIndicator).not.toEqual(secondIndicator); + }); + + test('sort dropdown stays in sync with column clicks', async ({ page }) => { + const packageHeader = page.locator('th[data-sort="package"]'); + + await packageHeader.click(); + + // Dropdown should reflect the sort + const sortValue = await page.locator('#sort-by').inputValue(); + expect(sortValue).toMatch(/package/); + }); + + test('date column is sorted descending by default', async ({ page }) => { + const dateHeader = page.locator('th[data-sort="date"]'); + const indicator = dateHeader.locator('.sort-indicator'); + + // Should show descending indicator (▼) + await expect(indicator).toHaveText(/▼/); + }); +}); + +test.describe('Download Functionality', () => { + test.beforeEach(async ({ page }) => { + await page.goto('/site/index.html'); + await waitForDataLoad(page); + }); + + test('CSV download button exists', async ({ page }) => { + await expect(page.locator('#download-csv')).toBeVisible(); + await expect(page.locator('#download-csv')).toHaveText('Download CSV'); + }); + + test('JSON download link exists', async ({ page }) => { + const jsonLink = page.locator('a[download="cncf-license-exceptions.json"]'); + await expect(jsonLink).toBeVisible(); + }); + + test('CSV download triggers file download', async ({ page }) => { + // Listen for download event + const downloadPromise = page.waitForEvent('download'); + + await page.click('#download-csv'); + + const download = await downloadPromise; + expect(download.suggestedFilename()).toBe('cncf-license-exceptions.csv'); + }); +}); + +test.describe('Footer Metadata', () => { + test.beforeEach(async ({ page }) => { + await page.goto('/site/index.html'); + await waitForDataLoad(page); + }); + + test('displays data version', async ({ page }) => { + const version = await page.locator('#data-version').textContent(); + expect(version).not.toBe('-'); + expect(version?.length).toBeGreaterThan(0); + }); + + test('displays last updated date', async ({ page }) => { + const lastUpdated = await page.locator('#last-updated').textContent(); + expect(lastUpdated).not.toBe('-'); + expect(lastUpdated).toMatch(/\d{4}-\d{2}-\d{2}/); // YYYY-MM-DD format + }); + + test('GitHub link is present', async ({ page }) => { + // Use footer-specific selector to avoid matching multiple GitHub links + const githubLink = page.locator('.footer a[href*="github.com/cncf/foundation"]'); + await expect(githubLink).toBeVisible(); + }); +}); diff --git a/netlify.toml b/netlify.toml new file mode 100644 index 00000000..feae2d4b --- /dev/null +++ b/netlify.toml @@ -0,0 +1,14 @@ +[build] + base = "license-exceptions/" + command = "node scripts/generate-all.js && mkdir -p _site && cp -r site/* _site/ && cp exceptions.json CNCF-licensing-exceptions.csv cncf-exceptions-current.spdx _site/" + publish = "license-exceptions/_site" + +[build.environment] + NODE_VERSION = "20" + +[[headers]] + for = "/*" + [headers.values] + X-Frame-Options = "DENY" + X-Content-Type-Options = "nosniff" + Referrer-Policy = "strict-origin-when-cross-origin"