From ab06ae8030904caf261b8062e9749fd557791217 Mon Sep 17 00:00:00 2001 From: Jeffrey Sica Date: Sun, 1 Feb 2026 21:39:12 -0600 Subject: [PATCH 01/19] feat(license): add JSON schema for centralized exception data - Create JSON Schema (draft 2020-12) defining the structure for all exception data - Add initial empty exceptions.json as the new source of truth - Schema supports blanket exceptions (e.g., eBPF/GPL) and individual package exceptions - Includes metadata like requesting project, approval date, issue URL Signed-off-by: Jeffrey Sica --- license-exceptions/exceptions.json | 6 +++ .../schema/exception.schema.json | 46 +++++++++++++++++++ 2 files changed, 52 insertions(+) create mode 100644 license-exceptions/exceptions.json create mode 100644 license-exceptions/schema/exception.schema.json diff --git a/license-exceptions/exceptions.json b/license-exceptions/exceptions.json new file mode 100644 index 00000000..3ab98aee --- /dev/null +++ b/license-exceptions/exceptions.json @@ -0,0 +1,6 @@ +{ + "version": "1.0.0", + "lastUpdated": "2024-01-01", + "blanketExceptions": [], + "exceptions": [] +} diff --git a/license-exceptions/schema/exception.schema.json b/license-exceptions/schema/exception.schema.json new file mode 100644 index 00000000..b16dbace --- /dev/null +++ b/license-exceptions/schema/exception.schema.json @@ -0,0 +1,46 @@ +{ + "$schema": "https://json-schema.org/draft/2020-12/schema", + "$id": "https://github.com/cncf/foundation/license-exceptions/schema/exception.schema.json", + "title": "CNCF License Exception", + "description": "Schema for CNCF license exception records", + "type": "object", + "properties": { + "version": { "type": "string", "const": "1.0.0" }, + "lastUpdated": { "type": "string", "format": "date" }, + "blanketExceptions": { + "type": "array", + "items": { + "type": "object", + "properties": { + "id": { "type": "string" }, + "name": { "type": "string" }, + "description": { "type": "string" }, + "licenses": { "type": "array", "items": { "type": "string" } }, + "scope": { "type": "string" }, + "approvedDate": { "type": "string", "format": "date" }, + "documentUrl": { "type": "string", "format": "uri" } + }, + "required": ["id", "name", "description", "licenses", "approvedDate"] + } + }, + "exceptions": { + "type": "array", + "items": { + "type": "object", + "properties": { + "id": { "type": "string", "description": "Unique ID like exc-2023-08-31-001" }, + "package": { "type": "string" }, + "packageUrl": { "type": "string", "format": "uri" }, + "license": { "type": "string", "description": "SPDX license identifier(s)" }, + "requestingProject": { "type": "string" }, + "approvedDate": { "type": "string", "format": "date" }, + "issueUrl": { "type": "string", "format": "uri" }, + "status": { "type": "string", "enum": ["approved", "allowlisted", "apache-2.0"] }, + "comment": { "type": "string" } + }, + "required": ["id", "package", "license", "status"] + } + } + }, + "required": ["version", "lastUpdated", "exceptions"] +} From 7c675a3351cb74df533e57671dd5555bbf381960 Mon Sep 17 00:00:00 2001 From: Jeffrey Sica Date: Sun, 1 Feb 2026 21:41:38 -0600 Subject: [PATCH 02/19] feat(license): migrate historical exception data to unified JSON - Add migration script that consolidates CSV and JSON data sources - Migrate 467 unique exception entries from legacy files - Add blanket eBPF/GPL exception to blanketExceptions array - Extract approval dates from comments and determine status - Deduplicate entries by package name - Sort by date (newest first), then by package name Signed-off-by: Jeffrey Sica --- license-exceptions/exceptions.json | 3756 +++++++++++++++++++- license-exceptions/scripts/migrate-data.js | 319 ++ 2 files changed, 4072 insertions(+), 3 deletions(-) create mode 100644 license-exceptions/scripts/migrate-data.js diff --git a/license-exceptions/exceptions.json b/license-exceptions/exceptions.json index 3ab98aee..b71a2026 100644 --- a/license-exceptions/exceptions.json +++ b/license-exceptions/exceptions.json @@ -1,6 +1,3756 @@ { "version": "1.0.0", - "lastUpdated": "2024-01-01", - "blanketExceptions": [], - "exceptions": [] + "lastUpdated": "2026-02-02", + "blanketExceptions": [ + { + "id": "blanket-ebpf-gpl", + "name": "GPL for in-kernel eBPF programs", + "description": "GPL-2.0 licensed code is permitted for in-kernel eBPF programs only, as this is required by the Linux kernel BPF subsystem.", + "licenses": [ + "GPL-2.0-only", + "GPL-2.0-or-later" + ], + "scope": "in-kernel eBPF programs only", + "approvedDate": "2023-08-31", + "documentUrl": "https://github.com/cncf/foundation/blob/main/license-exceptions/README.md" + } + ], + "exceptions": [ + { + "id": "exc-2023-08-31-001", + "package": "github.com/docker/go-metrics", + "license": "CC-BY-SA 4.0", + "approvedDate": "2023-08-31", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31" + }, + { + "id": "exc-2023-08-31-002", + "package": "github.com/hashicorp/go-memdb", + "license": "MPL-2.0", + "approvedDate": "2023-08-31", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31" + }, + { + "id": "exc-2023-08-31-003", + "package": "github.com/shoenig/go-m1cpu", + "license": "MPL-2.0", + "approvedDate": "2023-08-31", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31" + }, + { + "id": "exc-2023-08-31-004", + "package": "hashicorp/packer-plugin-sdk", + "license": "MPL-2.0", + "approvedDate": "2023-08-31", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31" + }, + { + "id": "exc-2023-06-27-001", + "package": "github.com/hashicorp/consul/api", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-002", + "package": "github.com/hashicorp/go-hclog", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-003", + "package": "github.com/hashicorp/go-immutable-radix", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-004", + "package": "github.com/hashicorp/go-plugin", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-005", + "package": "github.com/hashicorp/go-rootcerts", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-006", + "package": "github.com/hashicorp/go-secure-stdlib", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-007", + "package": "github.com/hashicorp/go-sockaddr", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-008", + "package": "github.com/hashicorp/go-uuid", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-009", + "package": "github.com/hashicorp/serf", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-010", + "package": "github.com/hashicorp/vault", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-011", + "package": "github.com/veraison/go-cose", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-012", + "package": "hashicorp/consul/api", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-013", + "package": "hashicorp/go-hclog", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-014", + "package": "hashicorp/go-immutable-radix", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-015", + "package": "hashicorp/go-plugin", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-016", + "package": "hashicorp/go-rootcerts", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-017", + "package": "hashicorp/go-secure-stdlib", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-018", + "package": "hashicorp/go-sockaddr", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-019", + "package": "hashicorp/go-uuid", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-020", + "package": "hashicorp/go-version", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-021", + "package": "hashicorp/raft", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-022", + "package": "hashicorp/serf", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-023", + "package": "hashicorp/vault", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-024", + "package": "hashicorp/yamux", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-025", + "package": "veraison/go-cose", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2022-04-12-001", + "package": "github.com/eclipse/paho.mqtt.golang", + "license": "EPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12" + }, + { + "id": "exc-2022-04-12-002", + "package": "github.com/hashicorp/go-version", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12" + }, + { + "id": "exc-2022-04-12-003", + "package": "github.com/hashicorp/raft", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12" + }, + { + "id": "exc-2022-04-12-004", + "package": "github.com/hashicorp/raft-boltdb", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12" + }, + { + "id": "exc-2022-04-12-005", + "package": "github.com/Microsoft/tslib", + "license": "0BSD", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12" + }, + { + "id": "exc-2022-04-12-006", + "package": "go-version", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12" + }, + { + "id": "exc-2022-04-12-007", + "package": "paho.mqtt.golang", + "license": "EPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12" + }, + { + "id": "exc-2022-04-12-008", + "package": "raft", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12" + }, + { + "id": "exc-2022-04-12-009", + "package": "raft-boltdb", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12" + }, + { + "id": "exc-2022-04-12-010", + "package": "tslib", + "license": "0BSD", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12" + }, + { + "id": "exc-2022-04-12-011", + "package": "webpki-roots", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12" + }, + { + "id": "exc-2021-07-19-001", + "package": "github.com/hashicorp/go-retryablehttp", + "license": "MPL-2.0", + "approvedDate": "2021-07-19", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19" + }, + { + "id": "exc-2021-07-19-002", + "package": "go-retryablehttp", + "license": "MPL-2.0", + "approvedDate": "2021-07-19", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19" + }, + { + "id": "exc-2019-11-01-001", + "package": "Chart.js", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-002", + "package": "cloud.google.com/go", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-003", + "package": "code.cloudfoundry.org/clock", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-004", + "package": "colors", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-005", + "package": "defusedxml", + "license": "Python-2.0", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-006", + "package": "ejs", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-007", + "package": "github.com/abbot/go-http-auth", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-008", + "package": "github.com/aclements/go-moremath", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-009", + "package": "github.com/andygrunwald/go-gerrit", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-010", + "package": "github.com/aokoli/goutils", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-011", + "package": "github.com/appc/spec", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-012", + "package": "github.com/armon/circbuf", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-013", + "package": "github.com/armon/go-proxyproto", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-014", + "package": "github.com/armon/go-radix", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-015", + "package": "github.com/asaskevich/govalidator", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-016", + "package": "github.com/aws/aws-k8s-tester", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-017", + "package": "github.com/aws/aws-sdk-go", + "license": "((MIT OR GPL-3.0) AND BSD-3-Clause AND Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-018", + "package": "github.com/Azure/azure-sdk-for-go", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-019", + "package": "github.com/Azure/azure-storage-blob-go", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-020", + "package": "github.com/Azure/go-ansiterm", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-021", + "package": "github.com/Azure/go-autorest", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-022", + "package": "github.com/bazelbuild/bazel-gazelle", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-023", + "package": "github.com/bazelbuild/buildtools", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-024", + "package": "github.com/beorn7/perks", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-025", + "package": "github.com/blang/semver", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-026", + "package": "github.com/bluebreezecf/opentsdb-goclient", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-027", + "package": "github.com/boltdb/bolt", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-028", + "package": "github.com/bwmarrin/snowflake", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-029", + "package": "github.com/chai2010/gettext-go", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-030", + "package": "github.com/cloudflare/cfssl", + "license": "(BSD-2-Clause AND BSD-3-Clause AND ISC)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-031", + "package": "github.com/cloudfoundry-incubator/candiedyaml", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-032", + "package": "github.com/clusterhq/flocker-go", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-033", + "package": "github.com/cockroachdb/cmux", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-034", + "package": "github.com/codedellemc/goscaleio", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-035", + "package": "github.com/container-storage-interface/spec", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-036", + "package": "github.com/containerd/console", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-037", + "package": "github.com/containerd/containerd", + "license": "(CC-BY-4.0 AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-038", + "package": "github.com/containernetworking/cni", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-039", + "package": "github.com/containernetworking/plugins", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-040", + "package": "github.com/coredns/coredns", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-041", + "package": "github.com/coreos/bbolt", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-042", + "package": "github.com/coreos/etcd", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-043", + "package": "github.com/coreos/go-etcd", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-044", + "package": "github.com/coreos/go-oidc", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-045", + "package": "github.com/coreos/go-semver", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-046", + "package": "github.com/coreos/go-systemd", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-047", + "package": "github.com/coreos/pkg", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-048", + "package": "github.com/coreos/rkt", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-049", + "package": "github.com/cpuguy83/go-md2man", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-050", + "package": "github.com/cyphar/filepath-securejoin", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-051", + "package": "github.com/daaku/go.zipexe", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-052", + "package": "github.com/davecgh/go-spew", + "license": "ISC", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-053", + "package": "github.com/daviddengcn/go-colortext", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-054", + "package": "github.com/dchest/safefile", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-055", + "package": "github.com/deckarep/golang-set", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-056", + "package": "github.com/denverdino/aliyungo", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-057", + "package": "github.com/dgrijalva/jwt-go", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-058", + "package": "github.com/digitalocean/godo", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-059", + "package": "github.com/djherbis/atime", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-060", + "package": "github.com/docker/cli", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-061", + "package": "github.com/docker/distribution", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-062", + "package": "github.com/docker/docker", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-063", + "package": "github.com/docker/engine-api", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-064", + "package": "github.com/docker/go-connections", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-065", + "package": "github.com/docker/libcompose", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-066", + "package": "github.com/docker/libnetwork", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-067", + "package": "github.com/docker/libtrust", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-068", + "package": "github.com/docker/machine", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-069", + "package": "github.com/dustin/go-humanize", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-070", + "package": "github.com/eapache/channels", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-071", + "package": "github.com/eapache/go-resiliency", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-072", + "package": "github.com/eapache/go-xerial-snappy", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-073", + "package": "github.com/eapache/queue", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-074", + "package": "github.com/elazarl/go-bindata-assetfs", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-075", + "package": "github.com/elazarl/goproxy", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-076", + "package": "github.com/emicklei/go-restful", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-077", + "package": "github.com/emicklei/go-restful-swagger12", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-078", + "package": "github.com/emirpasic/gods", + "license": "(BSD-2-Clause AND ISC)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-079", + "package": "github.com/euank/go-kmsg-parser", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-080", + "package": "github.com/evanphx/json-patch", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-081", + "package": "github.com/exponent-io/jsonpath", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-082", + "package": "github.com/fatih/camelcase", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-083", + "package": "github.com/fatih/structs", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-084", + "package": "github.com/flynn/go-shlex", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-085", + "package": "github.com/fsnotify/fsnotify", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-086", + "package": "github.com/fsouza/fake-gcs-server", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-087", + "package": "github.com/fsouza/go-dockerclient", + "license": "(BSD-2-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-088", + "package": "github.com/fullsailor/pkcs7", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-089", + "package": "github.com/GeertJohan/go.rice", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-090", + "package": "github.com/ghodss/yaml", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-091", + "package": "github.com/globalsign/mgo", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-092", + "package": "github.com/go-ini/ini", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-093", + "package": "github.com/go-openapi/analysis", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-094", + "package": "github.com/go-openapi/errors", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-095", + "package": "github.com/go-openapi/jsonpointer", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-096", + "package": "github.com/go-openapi/jsonreference", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-097", + "package": "github.com/go-openapi/loads", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-098", + "package": "github.com/go-openapi/runtime", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-099", + "package": "github.com/go-openapi/spec", + "license": "(CC-BY-4.0 AND Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-100", + "package": "github.com/go-openapi/strfmt", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-101", + "package": "github.com/go-openapi/swag", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-102", + "package": "github.com/go-openapi/validate", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-103", + "package": "github.com/go-ozzo/ozzo-validation", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-104", + "package": "github.com/go-yaml/yaml", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-105", + "package": "github.com/gobuffalo/envy", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-106", + "package": "github.com/godbus/dbus", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-107", + "package": "github.com/gogo/protobuf", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-108", + "package": "github.com/golang/dep", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-109", + "package": "github.com/golang/glog", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-110", + "package": "github.com/golang/groupcache", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-111", + "package": "github.com/golang/lint", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-112", + "package": "github.com/golang/mock", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-113", + "package": "github.com/golang/protobuf", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-114", + "package": "github.com/golang/snappy", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-115", + "package": "github.com/google/btree", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-116", + "package": "github.com/google/cadvisor", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-117", + "package": "github.com/google/certificate-transparency-go", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-118", + "package": "github.com/google/go-containerregistry", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-119", + "package": "github.com/google/go-querystring", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-120", + "package": "github.com/google/go-tpm", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-121", + "package": "github.com/google/gofuzz", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-122", + "package": "github.com/google/uuid", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-123", + "package": "github.com/googleapis/gax-go", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-124", + "package": "github.com/googleapis/gnostic", + "license": "(BSD-3-Clause AND Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-125", + "package": "github.com/GoogleCloudPlatform/gke-managed-certs", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-126", + "package": "github.com/gophercloud/gophercloud", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-127", + "package": "github.com/gorilla/context", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-128", + "package": "github.com/gorilla/mux", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-129", + "package": "github.com/gorilla/securecookie", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-130", + "package": "github.com/gorilla/sessions", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-131", + "package": "github.com/gorilla/websocket", + "license": "(BSD-2-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-132", + "package": "github.com/gregjones/httpcache", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-133", + "package": "github.com/grpc-ecosystem/go-grpc-middleware", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-134", + "package": "github.com/grpc-ecosystem/go-grpc-prometheus", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-135", + "package": "github.com/grpc-ecosystem/grpc-gateway", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-136", + "package": "github.com/hawkular/hawkular-client-go", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-137", + "package": "github.com/heketi/heketi REST API", + "license": "(Apache-2.0 OR LGPL-3.0-or-later)", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-138", + "package": "github.com/hpcloud/tail", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-139", + "package": "github.com/huandu/xstrings", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-140", + "package": "github.com/imdario/mergo", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-141", + "package": "github.com/inconshreveable/mousetrap", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-142", + "package": "github.com/influxdata/influxdb", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-143", + "package": "github.com/jimmidyson/go-download", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-144", + "package": "github.com/jinzhu/gorm", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-145", + "package": "github.com/jinzhu/inflection", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-146", + "package": "github.com/jmespath/go-jmespath", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-147", + "package": "github.com/jmhodges/clock", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-148", + "package": "github.com/jmoiron/sqlx", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-149", + "package": "github.com/joho/godotenv", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-150", + "package": "github.com/jonboulle/clockwork", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-151", + "package": "github.com/jpillora/backoff", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-152", + "package": "github.com/json-iterator/go", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-153", + "package": "github.com/kardianos/osext", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-154", + "package": "github.com/karrick/godirwalk", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-155", + "package": "github.com/kevinburke/ssh_config", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-156", + "package": "github.com/kisielk/sqlstruct", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-157", + "package": "github.com/knative/build", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-158", + "package": "github.com/kr/fs", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-159", + "package": "github.com/kr/pretty", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-160", + "package": "github.com/kr/pty", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-161", + "package": "github.com/kr/text", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-162", + "package": "github.com/kubernetes-incubator/apiserver-builder", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-163", + "package": "github.com/kubernetes-incubator/reference-docs", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-164", + "package": "github.com/kubernetes-sigs/application", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-165", + "package": "github.com/kubernetes/repo-infra", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-166", + "package": "github.com/kylelemons/godebug", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-167", + "package": "github.com/lib/pq", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-168", + "package": "github.com/libopenstorage/openstorage", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-169", + "package": "github.com/libvirt/libvirt-go", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-170", + "package": "github.com/libvirt/libvirt-go-xml", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-171", + "package": "github.com/lpabon/godbc", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-172", + "package": "github.com/lxn/win", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-173", + "package": "github.com/magiconair/properties", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-174", + "package": "github.com/mailru/easyjson", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-175", + "package": "github.com/MakeNowJust/heredoc", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-176", + "package": "github.com/markbates/inflect", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-177", + "package": "github.com/marpaia/graphite-golang", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-178", + "package": "github.com/Masterminds/semver", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-179", + "package": "github.com/Masterminds/sprig", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-180", + "package": "github.com/Masterminds/vcs", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-181", + "package": "github.com/mattn/go-runewidth", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-182", + "package": "github.com/mattn/go-shellwords", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-183", + "package": "github.com/mattn/go-zglob", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-184", + "package": "github.com/matttproud/golang_protobuf_extensions", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-185", + "package": "github.com/mesos/mesos-go", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-186", + "package": "github.com/mholt/caddy", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-187", + "package": "github.com/Microsoft/go-winio", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-188", + "package": "github.com/Microsoft/hcsshim", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-189", + "package": "github.com/miekg/coredns", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-190", + "package": "github.com/miekg/dns", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-191", + "package": "github.com/mindprince/gonvml", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-192", + "package": "github.com/mistifyio/go-zfs", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-193", + "package": "github.com/mitchellh/go-homedir", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-194", + "package": "github.com/mitchellh/go-ps", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-195", + "package": "github.com/mitchellh/go-wordwrap", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-196", + "package": "github.com/mitchellh/hashstructure", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-197", + "package": "github.com/mitchellh/mapstructure", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-198", + "package": "github.com/moby/hyperkit", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-199", + "package": "github.com/modern-go/concurrent", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-200", + "package": "github.com/modern-go/reflect2", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-201", + "package": "github.com/mohae/deepcopy", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-202", + "package": "github.com/moul/http2curl", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-203", + "package": "github.com/mrunalp/fileutils", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-204", + "package": "github.com/mvdan/xurls", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-205", + "package": "github.com/mxk/go-flowrate", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-206", + "package": "github.com/ncabatoff/process-exporter", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-207", + "package": "github.com/nightlyone/lockfile", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-208", + "package": "github.com/novln/docker-parser", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-209", + "package": "github.com/NYTimes/gziphandler", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-210", + "package": "github.com/olekukonko/tablewriter", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-211", + "package": "github.com/onsi/ginkgo", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-212", + "package": "github.com/onsi/gomega", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-213", + "package": "github.com/opencontainers/image-spec", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-214", + "package": "github.com/opencontainers/runtime-spec", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-215", + "package": "github.com/opencontainers/selinux", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-216", + "package": "github.com/openshift/origin", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-217", + "package": "github.com/opentracing/opentracing-go", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-218", + "package": "github.com/parnurzeal/gorequest", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-219", + "package": "github.com/patrickmn/go-cache", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-220", + "package": "github.com/paultag/sniff", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-221", + "package": "github.com/pborman/uuid", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-222", + "package": "github.com/pelletier/go-buffruneio", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-223", + "package": "github.com/pelletier/go-toml", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-224", + "package": "github.com/petar/GoLLRB", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-225", + "package": "github.com/peterbourgon/diskv", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-226", + "package": "github.com/pierrec/lz4", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-227", + "package": "github.com/pierrec/xxHash", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-228", + "package": "github.com/pkg/browser", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-229", + "package": "github.com/pkg/errors", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-230", + "package": "github.com/pkg/profile", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-231", + "package": "github.com/pkg/sftp", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-232", + "package": "github.com/pmezard/go-difflib", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-233", + "package": "github.com/pquerna/cachecontrol", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-234", + "package": "github.com/pquerna/ffjson", + "license": "(BSD-3-Clause AND Apache-2.0 AND ISC)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-235", + "package": "github.com/prometheus/client_golang", + "license": "(BSD-3-Clause AND Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-236", + "package": "github.com/prometheus/client_model", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-237", + "package": "github.com/prometheus/common", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-238", + "package": "github.com/prometheus/procfs", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-239", + "package": "github.com/PuerkitoBio/purell", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-240", + "package": "github.com/PuerkitoBio/urlesc", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-241", + "package": "github.com/r2d4/external-storage", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-242", + "package": "github.com/rackspace/gophercloud", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-243", + "package": "github.com/rancher/go-rancher", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-244", + "package": "github.com/rcrowley/go-metrics", + "license": "BSD-2-Clause-FreeBSD", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-245", + "package": "github.com/renstrom/dedent", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-246", + "package": "github.com/Rican7/retry", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-247", + "package": "github.com/riemann/riemann-go-client", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-248", + "package": "github.com/robfig/cron", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-249", + "package": "github.com/russross/blackfriday", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-250", + "package": "github.com/samalba/dockerclient", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-251", + "package": "github.com/satori/go.uuid", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-252", + "package": "github.com/scalingdata/gcfg", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-253", + "package": "github.com/sdboyer/constext", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-254", + "package": "github.com/seccomp/libseccomp-golang", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-255", + "package": "github.com/sergi/go-diff", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-256", + "package": "github.com/Shopify/sarama", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-257", + "package": "github.com/shurcooL/githubv4", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-258", + "package": "github.com/shurcooL/go", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-259", + "package": "github.com/shurcooL/graphql", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-260", + "package": "github.com/shurcooL/sanitized_anchor_name", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-261", + "package": "github.com/sirupsen/logrus", + "license": "(BSD-2-Clause AND BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-262", + "package": "github.com/skynetservices/skydns", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-263", + "package": "github.com/smartystreets/go-aws-auth", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-264", + "package": "github.com/soheilhy/cmux", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-265", + "package": "github.com/spf13/afero", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-266", + "package": "github.com/spf13/cast", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-267", + "package": "github.com/spf13/cobra", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-268", + "package": "github.com/spf13/jwalterweatherman", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-269", + "package": "github.com/spf13/pflag", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-270", + "package": "github.com/spf13/viper", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-271", + "package": "github.com/storageos/go-api", + "license": "(BSD-2-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-272", + "package": "github.com/streadway/quantile", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-273", + "package": "github.com/stretchr/objx", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-274", + "package": "github.com/stretchr/testify", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-275", + "package": "github.com/syndtr/gocapability", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-276", + "package": "github.com/tchap/go-patricia", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-277", + "package": "github.com/thockin/glogr", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-278", + "package": "github.com/thockin/logr", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-279", + "package": "github.com/tmc/grpc-websocket-proxy", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-280", + "package": "github.com/tsenart/vegeta", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-281", + "package": "github.com/ugorji/go", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-282", + "package": "github.com/Unknwon/goconfig", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-283", + "package": "github.com/urfave/cli", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-284", + "package": "github.com/vishvananda/netlink", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-285", + "package": "github.com/vishvananda/netns", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-286", + "package": "github.com/vmware/govmomi", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-287", + "package": "github.com/vmware/photon-controller-go-sdk", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-288", + "package": "github.com/weaveworks/mesh", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-289", + "package": "github.com/xanzy/go-cloudstack", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-290", + "package": "github.com/xeipuuv/gojsonpointer", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-291", + "package": "github.com/xeipuuv/gojsonreference", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-292", + "package": "github.com/xeipuuv/gojsonschema", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-293", + "package": "github.com/xiang90/probing", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-294", + "package": "github.com/zakjan/cert-chain-resolver", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-295", + "package": "github.com/ziutek/syslog", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-296", + "package": "go.opencensus.io", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-297", + "package": "go.uber.org/atomic", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-298", + "package": "go.uber.org/multierr", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-299", + "package": "go.uber.org/zap", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-300", + "package": "go4.org/errorutil", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-301", + "package": "golang.org/x/build", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-302", + "package": "golang.org/x/exp", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-303", + "package": "golang.org/x/lint", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-304", + "package": "golang.org/x/oauth2", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-305", + "package": "golang.org/x/sync", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-306", + "package": "golang.org/x/sys", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-307", + "package": "golang.org/x/text", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-308", + "package": "golang.org/x/time", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-309", + "package": "golang.org/x/tools", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause AND Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-310", + "package": "golang/archive/tar", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-311", + "package": "gonum.org/v1/gonum", + "license": "((BSD-3-Clause OR CC0-1.0) AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-312", + "package": "google.golang.org/cloud", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-313", + "package": "google.golang.org/genproto", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-314", + "package": "gopkg.in/check.v1", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-315", + "package": "gopkg.in/cheggaaa/pb.v1", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-316", + "package": "gopkg.in/fsnotify", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-317", + "package": "gopkg.in/gcfg.v1", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-318", + "package": "gopkg.in/go-playground/pool.v3", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-319", + "package": "gopkg.in/igm/sockjs-go.v2", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-320", + "package": "gopkg.in/inf.v0", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-321", + "package": "gopkg.in/natefinch/lumberjack.v2", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-322", + "package": "gopkg.in/olivere/elastic.v3", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-323", + "package": "gopkg.in/olivere/elastic.v5", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-324", + "package": "gopkg.in/robfig/cron.v2", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-325", + "package": "gopkg.in/square/go-jose.v2", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-326", + "package": "gopkg.in/src-d", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed" + }, + { + "id": "exc-2019-11-01-327", + "package": "gopkg.in/tomb.v1", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-328", + "package": "jquery.scrollto", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-329", + "package": "marked", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-330", + "package": "mime", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-331", + "package": "minimist", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-332", + "package": "node-static", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-333", + "package": "optimist", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-334", + "package": "ui-router for Angular", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-335", + "package": "vbom.ml/util", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-11-01-336", + "package": "wordwrap", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted" + }, + { + "id": "exc-2019-05-20-001", + "package": "VirtualBox Linux Guest Drivers Makefile", + "license": "GPL-2.0-only", + "approvedDate": "2019-05-20", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-05-20" + }, + { + "id": "exc-2019-03-11-001", + "package": "Angular", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-002", + "package": "Asciidoctor", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-003", + "package": "Azure acr-docker-credential-helper", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-004", + "package": "Backbone", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-005", + "package": "bitbucket.org/bertimus9/systemstat", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-006", + "package": "bitbucket.org/ww/goautoneg", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-007", + "package": "bootstrap", + "license": "(CC-BY-3.0 AND MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-008", + "package": "dialog-polyfill.css", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-009", + "package": "font-awesome", + "license": "(CC-BY-3.0 AND MIT AND OFL-1.1)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-010", + "package": "Gingko", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-011", + "package": "github.com/Azure/azure-pipeline-go", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-012", + "package": "github.com/bungle/lua-resty-template", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-013", + "package": "github.com/c4milo/gotoolkit", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-014", + "package": "github.com/client9/misspell", + "license": "(Unlicense AND BSD-3-Clause AND MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-015", + "package": "github.com/d2g/dhcp4", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-016", + "package": "github.com/d2g/dhcp4client", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-017", + "package": "github.com/dgryski/go-onlinestats", + "license": "(MIT AND LicenseRef-Public-domain-statement)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-018", + "package": "github.com/docker/go-units", + "license": "(CC-BY-SA-4.0 AND CC-BY-4.0 AND Apache-2.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-019", + "package": "github.com/docker/spdystream", + "license": "(CC-BY-SA-4.0 AND CC-BY-4.0 AND BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-020", + "package": "github.com/go-sql-driver/mysql", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-021", + "package": "github.com/gonum/graph", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-022", + "package": "github.com/google/go-github", + "license": "(BSD-3-Clause AND CC-BY-3.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-023", + "package": "github.com/grpc-ecosystem/grpc-opentracing", + "license": "(BSD-3-Clause AND LicenseRef-Google-Patents-Notice-GRPC)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-024", + "package": "github.com/hashicorp/errwrap", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-025", + "package": "github.com/hashicorp/go-cleanhttp", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-026", + "package": "github.com/hashicorp/go-multierror", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-027", + "package": "github.com/hashicorp/golang-lru", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-028", + "package": "github.com/hashicorp/hcl", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-029", + "package": "github.com/hooklift/iso9660", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-030", + "package": "github.com/howeyc/gopass", + "license": "(ISC AND CDDL-1.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-031", + "package": "github.com/jbenet/go-context", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-032", + "package": "github.com/JeffAshton/win_pdh", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-033", + "package": "github.com/jmank88/nuts", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-034", + "package": "github.com/johanneswuerbach/nfsexports", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-035", + "package": "github.com/joshdk/go-junit", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-036", + "package": "github.com/jteeuwen/go-bindata", + "license": "CC0-1.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-037", + "package": "github.com/konsorten/go-windows-terminal-sequences", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-038", + "package": "github.com/marstr/guid", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-039", + "package": "github.com/mattn/go-sqlite3", + "license": "(MIT AND LicenseRef-Public-domain-statement)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-040", + "package": "github.com/multiarch/qemu-user-static", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-041", + "package": "github.com/Nvveen/Gotty", + "license": "BSD-2-Clause-FreeBSD", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-042", + "package": "github.com/opencontainers/go-digest", + "license": "(CC-BY-SA-4.0 AND CC-BY-4.0 AND Apache-2.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-043", + "package": "github.com/opencontainers/runc", + "license": "(LicenseRef-CC-unspecified AND Apache-2.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-044", + "package": "github.com/quobyte/api", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-045", + "package": "github.com/rubiojr/go-vhd", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-046", + "package": "github.com/sigma/go-inotify", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-047", + "package": "github.com/spotinst/spotinst-sdk-go", + "license": "(BSD-3-Clause AND Apache-2.0 AND MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-048", + "package": "github.com/src-d/gcfg", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-049", + "package": "github.com/tent/http-link-go", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-050", + "package": "github.com/xanzy/ssh-agent", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-051", + "package": "github.com/zchee/go-vmnet", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-052", + "package": "go-srcimporter", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-053", + "package": "go9p", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-054", + "package": "godep", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-055", + "package": "golang.org/x/crypto", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause AND MIT AND LicenseRef-Public-domain-statement)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-056", + "package": "golang.org/x/net", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-2-Clause AND BSD-3-Clause AND CC-BY-3.0 AND (BSD-3-Clause OR LicenseRef-W3C-Test-Suite-License-1))", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-057", + "package": "golang/expansion", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-058", + "package": "golang/go/types", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-059", + "package": "golang/internal/srcimporter", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-060", + "package": "golang/json", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-061", + "package": "golang/netutil", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-062", + "package": "golang/reflect", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-063", + "package": "golang/template", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-064", + "package": "Google Protocol Buffers", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-065", + "package": "google.golang.org/api", + "license": "(BSD-3-Clause AND Apache-2.0 AND MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-066", + "package": "google.golang.org/appengine", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-067", + "package": "google.golang.org/grpc", + "license": "(BSD-3-Clause AND Apache-2.0 AND LicenseRef-Google-Patents-Notice-GRPC)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-068", + "package": "gopkg.in/warnings.v0", + "license": "BSD-2-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-069", + "package": "Handlebars", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-070", + "package": "Highlight", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-071", + "package": "highlight.js", + "license": "(BSD-3-Clause AND MIT AND CC0-1.0 AND LicenseRef-Public-domain-statement)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-072", + "package": "htpasswd", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-073", + "package": "jQuery", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-074", + "package": "jQuery BBQ", + "license": "(MIT OR GPL-2.0+)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-075", + "package": "jQuery hashchange event", + "license": "(GPL-2.0+ OR MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-076", + "package": "jQuery Slideto", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-077", + "package": "jQuery Wiggle", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-078", + "package": "moment.js", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-079", + "package": "normalize.css", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-080", + "package": "Octicons", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-081", + "package": "parseUri", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-082", + "package": "Pause", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-083", + "package": "Pure CSS", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-084", + "package": "shred", + "license": "ISC", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-085", + "package": "sigs.k8s.io/yaml", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "fork of github.com/ghodss/yaml; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-086", + "package": "speter.net/go/exp", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-087", + "package": "sprintf() for JavaScript", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-088", + "package": "Underscore.js", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + } + ] } diff --git a/license-exceptions/scripts/migrate-data.js b/license-exceptions/scripts/migrate-data.js new file mode 100644 index 00000000..9d217139 --- /dev/null +++ b/license-exceptions/scripts/migrate-data.js @@ -0,0 +1,319 @@ +#!/usr/bin/env node + +/** + * Migration script for CNCF License Exceptions + * + * This script consolidates data from: + * - CNCF-licensing-exceptions.csv (primary source) + * - cncf-exceptions-*.json files (supplementary sources) + * + * Into the new unified exceptions.json format + */ + +const fs = require('fs'); +const path = require('path'); + +const DATA_DIR = path.join(__dirname, '..'); +const OUTPUT_FILE = path.join(DATA_DIR, 'exceptions.json'); + +/** + * Parse CSV line handling quoted fields with commas + */ +function parseCSVLine(line) { + const result = []; + let current = ''; + let inQuotes = false; + + for (let i = 0; i < line.length; i++) { + const char = line[i]; + + if (char === '"') { + inQuotes = !inQuotes; + } else if (char === ',' && !inQuotes) { + result.push(current.trim()); + current = ''; + } else { + current += char; + } + } + result.push(current.trim()); + + return result; +} + +/** + * Parse the CSV file + */ +function parseCSV(filePath) { + const content = fs.readFileSync(filePath, 'utf-8'); + const lines = content.split('\n').filter(line => line.trim()); + + // Skip header row + const entries = []; + for (let i = 1; i < lines.length; i++) { + const fields = parseCSVLine(lines[i]); + if (fields.length >= 4 && fields[0]) { + entries.push({ + package: fields[0], + license: fields[1], + comment: fields[2], + datePublished: fields[3] + }); + } + } + + return entries; +} + +/** + * Parse JSON exception files (handles different formats) + */ +function parseJSONFile(filePath) { + const content = fs.readFileSync(filePath, 'utf-8'); + const data = JSON.parse(content); + + // Handle SPDX format (like the 2021-07-19 file) + if (data.packages) { + return data.packages.map(pkg => ({ + package: pkg.name, + license: pkg.licenseConcluded, + comment: pkg.comment || '' + })); + } + + // Handle array format + if (Array.isArray(data)) { + return data.map(entry => ({ + package: entry.package, + license: entry.license ? entry.license.trim() : '', + comment: entry.comment || '' + })); + } + + return []; +} + +/** + * Extract approval date from comment + * Pattern: "approved by GB exception YYYY-MM-DD" + */ +function extractApprovalDate(comment, fallbackDate) { + if (!comment) return fallbackDate; + + // Match YYYY-MM-DD pattern (also handles typos like 20212-04-12) + const match = comment.match(/approved by GB exception (\d{4,5}-\d{2}-\d{2})/); + if (match) { + let date = match[1]; + // Fix common typo: 20212 -> 2022 + if (date.startsWith('20212')) { + date = date.replace('20212', '2022'); + } + return date; + } + + return fallbackDate; +} + +/** + * Determine status from comment + */ +function determineStatus(comment) { + if (!comment) return 'approved'; + + const lowerComment = comment.toLowerCase(); + + if (lowerComment.includes('allowlisted') && !lowerComment.includes('not auto-allowlist')) { + return 'allowlisted'; + } + + if (lowerComment.includes('apache-2.0, no approval needed') || + lowerComment.includes('apache-2.0,no approval needed')) { + return 'apache-2.0'; + } + + return 'approved'; +} + +/** + * Generate unique ID for an exception + */ +function generateId(date, index) { + return `exc-${date}-${String(index).padStart(3, '0')}`; +} + +/** + * Main migration function + */ +function migrate() { + console.log('Starting migration...\n'); + + const stats = { + csvEntries: 0, + jsonEntries: 0, + totalUnique: 0, + byStatus: { + approved: 0, + allowlisted: 0, + 'apache-2.0': 0 + }, + duplicates: 0 + }; + + // Map to store unique entries by package name (CSV is primary) + const packageMap = new Map(); + + // 1. Parse CSV file (primary source) + const csvPath = path.join(DATA_DIR, 'CNCF-licensing-exceptions.csv'); + console.log(`Parsing CSV: ${csvPath}`); + const csvEntries = parseCSV(csvPath); + stats.csvEntries = csvEntries.length; + console.log(` Found ${csvEntries.length} entries in CSV\n`); + + for (const entry of csvEntries) { + const key = entry.package.toLowerCase(); + if (!packageMap.has(key)) { + packageMap.set(key, { + package: entry.package, + license: entry.license, + comment: entry.comment, + approvedDate: extractApprovalDate(entry.comment, entry.datePublished), + status: determineStatus(entry.comment), + source: 'csv' + }); + } + } + + // 2. Parse JSON files (supplementary) + const jsonFiles = fs.readdirSync(DATA_DIR) + .filter(f => f.startsWith('cncf-exceptions-') && f.endsWith('.json')) + .sort(); + + console.log(`Processing ${jsonFiles.length} JSON files:`); + + for (const jsonFile of jsonFiles) { + const filePath = path.join(DATA_DIR, jsonFile); + console.log(` Parsing: ${jsonFile}`); + + // Extract date from filename + const fileDate = jsonFile.match(/(\d{4}-\d{2}-\d{2})/)?.[1] || '2019-11-01'; + + try { + const entries = parseJSONFile(filePath); + stats.jsonEntries += entries.length; + console.log(` Found ${entries.length} entries`); + + let newFromFile = 0; + for (const entry of entries) { + const key = entry.package.toLowerCase(); + if (!packageMap.has(key)) { + packageMap.set(key, { + package: entry.package, + license: entry.license, + comment: entry.comment, + approvedDate: extractApprovalDate(entry.comment, fileDate), + status: determineStatus(entry.comment), + source: jsonFile + }); + newFromFile++; + } + } + console.log(` New unique entries: ${newFromFile}`); + } catch (err) { + console.error(` Error parsing ${jsonFile}: ${err.message}`); + } + } + + // Calculate duplicates + stats.duplicates = stats.csvEntries + stats.jsonEntries - packageMap.size; + stats.totalUnique = packageMap.size; + + console.log(`\nDeduplication: ${stats.csvEntries + stats.jsonEntries} total -> ${stats.totalUnique} unique (${stats.duplicates} duplicates removed)\n`); + + // 3. Convert to exceptions array + const exceptions = []; + const entriesByDate = new Map(); + + for (const entry of packageMap.values()) { + const date = entry.approvedDate || '2019-11-01'; + if (!entriesByDate.has(date)) { + entriesByDate.set(date, []); + } + entriesByDate.get(date).push(entry); + stats.byStatus[entry.status]++; + } + + // Sort dates descending (newest first) + const sortedDates = Array.from(entriesByDate.keys()).sort().reverse(); + + // Generate IDs and build final array + for (const date of sortedDates) { + const dateEntries = entriesByDate.get(date); + // Sort alphabetically by package name within each date + dateEntries.sort((a, b) => a.package.localeCompare(b.package)); + + for (let i = 0; i < dateEntries.length; i++) { + const entry = dateEntries[i]; + exceptions.push({ + id: generateId(date, i + 1), + package: entry.package, + license: entry.license, + approvedDate: date, + status: entry.status, + comment: entry.comment || undefined + }); + } + } + + // 4. Create blanket exceptions + const blanketExceptions = [ + { + id: 'blanket-ebpf-gpl', + name: 'GPL for in-kernel eBPF programs', + description: 'GPL-2.0 licensed code is permitted for in-kernel eBPF programs only, as this is required by the Linux kernel BPF subsystem.', + licenses: ['GPL-2.0-only', 'GPL-2.0-or-later'], + scope: 'in-kernel eBPF programs only', + approvedDate: '2023-08-31', + documentUrl: 'https://github.com/cncf/foundation/blob/main/license-exceptions/README.md' + } + ]; + + // 5. Build output structure + const output = { + version: '1.0.0', + lastUpdated: new Date().toISOString().split('T')[0], + blanketExceptions, + exceptions + }; + + // 6. Write output + fs.writeFileSync(OUTPUT_FILE, JSON.stringify(output, null, 2) + '\n'); + console.log(`Output written to: ${OUTPUT_FILE}`); + + // 7. Print summary + console.log('\n=== Migration Summary ==='); + console.log(`CSV entries processed: ${stats.csvEntries}`); + console.log(`JSON entries processed: ${stats.jsonEntries}`); + console.log(`Duplicates removed: ${stats.duplicates}`); + console.log(`Total unique exceptions: ${stats.totalUnique}`); + console.log(`Blanket exceptions: ${blanketExceptions.length}`); + console.log('\nBy status:'); + console.log(` approved: ${stats.byStatus.approved}`); + console.log(` allowlisted: ${stats.byStatus.allowlisted}`); + console.log(` apache-2.0: ${stats.byStatus['apache-2.0']}`); + + // Count unique dates + const uniqueDates = new Set(exceptions.map(e => e.approvedDate)); + console.log(`\nUnique approval dates: ${uniqueDates.size}`); + console.log('Date range:', [...uniqueDates].sort().join(', ')); + + return stats; +} + +// Run migration +try { + migrate(); + process.exit(0); +} catch (err) { + console.error('Migration failed:', err); + process.exit(1); +} From ebe1284ea82e6fce266cd932c90b59747cf5ac09 Mon Sep 17 00:00:00 2001 From: Jeffrey Sica Date: Sun, 1 Feb 2026 21:43:11 -0600 Subject: [PATCH 03/19] feat(license): add scripts to generate CSV and SPDX from JSON - Add generate-csv.js for CSV format with proper field escaping - Add generate-spdx.js for SPDX 2.1 tag-value format - Add generate-all.js to run both generators - Regenerate CSV (467 entries) and SPDX files from exceptions.json Signed-off-by: Jeffrey Sica --- .../CNCF-licensing-exceptions.csv | 918 +-- .../cncf-exceptions-current.spdx | 5144 +++++++++++++++++ license-exceptions/scripts/generate-all.js | 10 + license-exceptions/scripts/generate-csv.js | 76 + license-exceptions/scripts/generate-spdx.js | 75 + 5 files changed, 5773 insertions(+), 450 deletions(-) create mode 100644 license-exceptions/cncf-exceptions-current.spdx create mode 100644 license-exceptions/scripts/generate-all.js create mode 100644 license-exceptions/scripts/generate-csv.js create mode 100644 license-exceptions/scripts/generate-spdx.js diff --git a/license-exceptions/CNCF-licensing-exceptions.csv b/license-exceptions/CNCF-licensing-exceptions.csv index 174f2604..ec9e99aa 100644 --- a/license-exceptions/CNCF-licensing-exceptions.csv +++ b/license-exceptions/CNCF-licensing-exceptions.csv @@ -1,450 +1,468 @@ -Package Name,License Concluded,Comments,Date Published,Last updated: 8-14-2023 -gonum.org/v1/gonum,((BSD-3-Clause OR CC0-1.0) AND BSD-3-Clause),allowlisted,2019-11-01, -github.com/aws/aws-sdk-go,((MIT OR GPL-3.0) AND BSD-3-Clause AND Apache-2.0 AND MIT),allowlisted,2019-11-01, -ejs,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/cloudfoundry-incubator/candiedyaml,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/docker/cli,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/docker/docker,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/go-openapi/swag,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/go-yaml/yaml,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/ncabatoff/process-exporter,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/skynetservices/skydns,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/spf13/cobra,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/xanzy/ssh-agent,(Apache-2.0 AND MIT),not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/xeipuuv/gojsonschema,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/heketi/heketi REST API,(Apache-2.0 OR LGPL-3.0-or-later),"Apache-2.0, no approval needed",2019-11-01, -github.com/fsouza/go-dockerclient,(BSD-2-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/cloudflare/cfssl,(BSD-2-Clause AND BSD-3-Clause AND ISC),allowlisted,2019-11-01, -github.com/sirupsen/logrus,(BSD-2-Clause AND BSD-3-Clause AND MIT),allowlisted,2019-11-01, -github.com/Sirupsen/logrus,(BSD-2-Clause AND BSD-3-Clause AND MIT),allowlisted,2019-11-01, -github.com/globalsign/mgo,(BSD-2-Clause AND BSD-3-Clause),allowlisted,2019-11-01, -github.com/gogo/protobuf,(BSD-2-Clause AND BSD-3-Clause),allowlisted,2019-11-01, -github.com/magiconair/properties,(BSD-2-Clause AND BSD-3-Clause),allowlisted,2019-11-01, -github.com/scalingdata/gcfg,(BSD-2-Clause AND BSD-3-Clause),allowlisted,2019-11-01, -github.com/zchee/go-vmnet,(BSD-2-Clause AND BSD-3-Clause),not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -gopkg.in/check.v1,(BSD-2-Clause AND BSD-3-Clause),allowlisted,2019-11-01, -speter.net/go/exp,(BSD-2-Clause AND BSD-3-Clause),not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/emirpasic/gods,(BSD-2-Clause AND ISC),allowlisted,2019-11-01, -github.com/gorilla/websocket,(BSD-2-Clause AND MIT),allowlisted,2019-11-01, -github.com/storageos/go-api,(BSD-2-Clause AND MIT),allowlisted,2019-11-01, -github.com/pquerna/ffjson,(BSD-3-Clause AND Apache-2.0 AND ISC),allowlisted,2019-11-01, -google.golang.org/grpc,(BSD-3-Clause AND Apache-2.0 AND LicenseRef-Google-Patents-Notice-GRPC),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/googleapis/gnostic,(BSD-3-Clause AND Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/prometheus/client_golang,(BSD-3-Clause AND Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/spotinst/spotinst-sdk-go,(BSD-3-Clause AND Apache-2.0 AND MIT),not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -google.golang.org/api,(BSD-3-Clause AND Apache-2.0 AND MIT),not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/coreos/etcd,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/docker/engine-api,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/google/certificate-transparency-go,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/grpc-ecosystem/grpc-gateway,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/matttproud/golang_protobuf_extensions,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/pquerna/cachecontrol,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/prometheus/common,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/vmware/govmomi,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/vmware/photon-controller-go-sdk,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -google.golang.org/appengine,(BSD-3-Clause AND Apache-2.0),not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-11-01, -gopkg.in/square/go-jose.v2,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/google/go-github,(BSD-3-Clause AND CC-BY-3.0),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/grpc-ecosystem/grpc-opentracing,(BSD-3-Clause AND LicenseRef-Google-Patents-Notice-GRPC),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -highlight.js,(BSD-3-Clause AND MIT AND CC0-1.0 AND LicenseRef-Public-domain-statement),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/daviddengcn/go-colortext,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -github.com/digitalocean/godo,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -github.com/djherbis/atime,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -github.com/fullsailor/pkcs7,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -github.com/ghodss/yaml,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -github.com/mattn/go-zglob,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -github.com/Microsoft/go-winio,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -github.com/Microsoft/hcsshim,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -gopkg.in/olivere/elastic.v3,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -gopkg.in/olivere/elastic.v5,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -marked,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -sigs.k8s.io/yaml,(BSD-3-Clause AND MIT),fork of github.com/ghodss/yaml; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -font-awesome,(CC-BY-3.0 AND MIT AND OFL-1.1),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -bootstrap,(CC-BY-3.0 AND MIT),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/go-openapi/spec,(CC-BY-4.0 AND Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/containerd/containerd,(CC-BY-4.0 AND Apache-2.0),"Apache-2.0, no approval needed",2019-11-01, -github.com/docker/go-units,(CC-BY-SA-4.0 AND CC-BY-4.0 AND Apache-2.0),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/opencontainers/go-digest,(CC-BY-SA-4.0 AND CC-BY-4.0 AND Apache-2.0),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/docker/spdystream,(CC-BY-SA-4.0 AND CC-BY-4.0 AND BSD-3-Clause AND Apache-2.0),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -jQuery hashchange event,(GPL-2.0+ OR MIT),contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -github.com/howeyc/gopass,(ISC AND CDDL-1.0),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/opencontainers/runc,(LicenseRef-CC-unspecified AND Apache-2.0),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -golang.org/x/net,(LicenseRef-Google-Patents-Notice-Golang AND BSD-2-Clause AND BSD-3-Clause AND CC-BY-3.0 AND (BSD-3-Clause OR LicenseRef-W3C-Test-Suite-License-1)),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -golang.org/x/sys,(LicenseRef-Google-Patents-Notice-Golang AND BSD-2-Clause AND BSD-3-Clause),allowlisted,2019-11-01, -golang.org/x/tools,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause AND Apache-2.0 AND MIT),allowlisted,2019-11-01, -golang.org/x/crypto,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause AND MIT AND LicenseRef-Public-domain-statement),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/golang/dep,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),allowlisted,2019-11-01, -github.com/sigma/go-inotify,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -golang.org/x/build,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),allowlisted,2019-11-01, -golang.org/x/exp,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),allowlisted,2019-11-01, -golang.org/x/sync,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),allowlisted,2019-11-01, -golang.org/x/text,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),allowlisted,2019-11-01, -golang.org/x/time,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),allowlisted,2019-11-01, -golang/expansion,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -golang/go/types,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -golang/reflect,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -golang/template,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -github.com/dgryski/go-onlinestats,(MIT AND LicenseRef-Public-domain-statement),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/mattn/go-sqlite3,(MIT AND LicenseRef-Public-domain-statement),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -jQuery BBQ,(MIT OR GPL-2.0+),contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -github.com/client9/misspell,(Unlicense AND BSD-3-Clause AND MIT),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -cloud.google.com/go,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -code.cloudfoundry.org/clock,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/abbot/go-http-auth,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/aokoli/goutils,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/appc/spec,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/aws/aws-k8s-tester,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/Azure/azure-sdk-for-go,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/Azure/go-autorest,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/bazelbuild/bazel-gazelle,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/bazelbuild/buildtools,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/bluebreezecf/opentsdb-goclient,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/clusterhq/flocker-go,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/cockroachdb/cmux,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/codedellemc/goscaleio,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/container-storage-interface/spec,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/containerd/console,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/containernetworking/cni,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/containernetworking/plugins,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/coredns/coredns,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/coreos/go-etcd,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/coreos/go-oidc,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/coreos/go-semver,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/coreos/go-systemd,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/coreos/pkg,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/coreos/rkt,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/denverdino/aliyungo,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/docker/distribution,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/docker/go-connections,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/docker/libcompose,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/docker/libnetwork,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/docker/libtrust,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/docker/machine,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/euank/go-kmsg-parser,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/flynn/go-shlex,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/go-ini/ini,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/go-openapi/analysis,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/go-openapi/errors,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/go-openapi/jsonpointer,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/go-openapi/jsonreference,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/go-openapi/loads,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/go-openapi/runtime,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/go-openapi/strfmt,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/go-openapi/validate,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/golang/glog,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/golang/groupcache,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/golang/mock,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/google/btree,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/google/cadvisor,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/google/go-containerregistry,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/google/go-tpm,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/google/gofuzz,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/GoogleCloudPlatform/gke-managed-certs,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/gophercloud/gophercloud,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/grpc-ecosystem/go-grpc-middleware,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/grpc-ecosystem/go-grpc-prometheus,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/hawkular/hawkular-client-go,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/inconshreveable/mousetrap,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/jimmidyson/go-download,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/jmespath/go-jmespath,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/jonboulle/clockwork,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/knative/build,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/kubernetes-incubator/apiserver-builder,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/kubernetes-incubator/reference-docs,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/kubernetes-sigs/application,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/kubernetes/repo-infra,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/kylelemons/godebug,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/libopenstorage/openstorage,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/lpabon/godbc,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/mesos/mesos-go,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/mholt/caddy,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/miekg/coredns,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/mindprince/gonvml,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/mistifyio/go-zfs,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/moby/hyperkit,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/modern-go/concurrent,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/modern-go/reflect2,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/mrunalp/fileutils,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/novln/docker-parser,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/NYTimes/gziphandler,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/opencontainers/image-spec,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/opencontainers/runtime-spec,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/opencontainers/selinux,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/openshift/origin,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/paultag/sniff,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/prometheus/client_model,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/prometheus/procfs,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/r2d4/external-storage,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/rackspace/gophercloud,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/rancher/go-rancher,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/samalba/dockerclient,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/soheilhy/cmux,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/spf13/afero,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/thockin/glogr,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/thockin/logr,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/Unknwon/goconfig,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/vishvananda/netlink,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/vishvananda/netns,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/weaveworks/mesh,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/xanzy/go-cloudstack,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/xeipuuv/gojsonpointer,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/xeipuuv/gojsonreference,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -go.opencensus.io,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -go4.org/errorutil,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -google.golang.org/cloud,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -google.golang.org/genproto,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -gopkg.in/src-d,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/bwmarrin/snowflake,BSD-2-Clause,allowlisted,2019-11-01, -github.com/dchest/safefile,BSD-2-Clause,allowlisted,2019-11-01, -github.com/elazarl/go-bindata-assetfs,BSD-2-Clause,allowlisted,2019-11-01, -github.com/fsouza/fake-gcs-server,BSD-2-Clause,allowlisted,2019-11-01, -github.com/GeertJohan/go.rice,BSD-2-Clause,allowlisted,2019-11-01, -github.com/godbus/dbus,BSD-2-Clause,allowlisted,2019-11-01, -github.com/karrick/godirwalk,BSD-2-Clause,allowlisted,2019-11-01, -github.com/pkg/browser,BSD-2-Clause,allowlisted,2019-11-01, -github.com/pkg/errors,BSD-2-Clause,allowlisted,2019-11-01, -github.com/pkg/profile,BSD-2-Clause,allowlisted,2019-11-01, -github.com/pkg/sftp,BSD-2-Clause,allowlisted,2019-11-01, -github.com/russross/blackfriday,BSD-2-Clause,allowlisted,2019-11-01, -github.com/seccomp/libseccomp-golang,BSD-2-Clause,allowlisted,2019-11-01, -github.com/streadway/quantile,BSD-2-Clause,allowlisted,2019-11-01, -github.com/syndtr/gocapability,BSD-2-Clause,allowlisted,2019-11-01, -gopkg.in/warnings.v0,BSD-2-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/Nvveen/Gotty,BSD-2-Clause-FreeBSD,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/rcrowley/go-metrics,BSD-2-Clause-FreeBSD,allowlisted,2019-11-01, -bitbucket.org/ww/goautoneg,BSD-3-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -dialog-polyfill.css,BSD-3-Clause,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -github.com/aclements/go-moremath,BSD-3-Clause,allowlisted,2019-11-01, -github.com/bungle/lua-resty-template,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -github.com/chai2010/gettext-go,BSD-3-Clause,allowlisted,2019-11-01, -github.com/cyphar/filepath-securejoin,BSD-3-Clause,allowlisted,2019-11-01, -github.com/d2g/dhcp4,BSD-3-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/elazarl/goproxy,BSD-3-Clause,allowlisted,2019-11-01, -github.com/evanphx/json-patch,BSD-3-Clause,allowlisted,2019-11-01, -github.com/fsnotify/fsnotify,BSD-3-Clause,allowlisted,2019-11-01, -github.com/golang/lint,BSD-3-Clause,allowlisted,2019-11-01, -github.com/golang/protobuf,BSD-3-Clause,allowlisted,2019-11-01, -github.com/golang/snappy,BSD-3-Clause,allowlisted,2019-11-01, -github.com/gonum/graph,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -github.com/google/go-querystring,BSD-3-Clause,allowlisted,2019-11-01, -github.com/google/uuid,BSD-3-Clause,allowlisted,2019-11-01, -github.com/googleapis/gax-go,BSD-3-Clause,allowlisted,2019-11-01, -github.com/gorilla/context,BSD-3-Clause,allowlisted,2019-11-01, -github.com/gorilla/mux,BSD-3-Clause,allowlisted,2019-11-01, -github.com/gorilla/securecookie,BSD-3-Clause,allowlisted,2019-11-01, -github.com/gorilla/sessions,BSD-3-Clause,allowlisted,2019-11-01, -github.com/imdario/mergo,BSD-3-Clause,allowlisted,2019-11-01, -github.com/JeffAshton/win_pdh,BSD-3-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/kardianos/osext,BSD-3-Clause,allowlisted,2019-11-01, -github.com/kr/fs,BSD-3-Clause,allowlisted,2019-11-01, -github.com/lxn/win,BSD-3-Clause,allowlisted,2019-11-01, -github.com/miekg/dns,BSD-3-Clause,allowlisted,2019-11-01, -github.com/mvdan/xurls,BSD-3-Clause,allowlisted,2019-11-01, -github.com/mxk/go-flowrate,BSD-3-Clause,allowlisted,2019-11-01, -github.com/pborman/uuid,BSD-3-Clause,allowlisted,2019-11-01, -github.com/petar/GoLLRB,BSD-3-Clause,allowlisted,2019-11-01, -github.com/pierrec/lz4,BSD-3-Clause,allowlisted,2019-11-01, -github.com/pierrec/xxHash,BSD-3-Clause,allowlisted,2019-11-01, -github.com/pmezard/go-difflib,BSD-3-Clause,allowlisted,2019-11-01, -github.com/PuerkitoBio/purell,BSD-3-Clause,allowlisted,2019-11-01, -github.com/PuerkitoBio/urlesc,BSD-3-Clause,allowlisted,2019-11-01, -github.com/quobyte/api,BSD-3-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/shurcooL/go,BSD-3-Clause,allowlisted,2019-11-01, -github.com/spf13/pflag,BSD-3-Clause,allowlisted,2019-11-01, -github.com/src-d/gcfg,BSD-3-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/tent/http-link-go,BSD-3-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/ziutek/syslog,BSD-3-Clause,allowlisted,2019-11-01, -go-srcimporter,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -go9p,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -godep,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -golang.org/x/lint,BSD-3-Clause,allowlisted,2019-11-01, -golang.org/x/oauth2,BSD-3-Clause,allowlisted,2019-11-01, -golang/archive/tar,BSD-3-Clause,allowlisted,2019-11-01, -golang/internal/srcimporter,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -golang/json,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -golang/netutil,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -Google Protocol Buffers,BSD-3-Clause,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -gopkg.in/cheggaaa/pb.v1,BSD-3-Clause,allowlisted,2019-11-01, -gopkg.in/fsnotify,BSD-3-Clause,allowlisted,2019-11-01, -gopkg.in/gcfg.v1,BSD-3-Clause,allowlisted,2019-11-01, -gopkg.in/igm/sockjs-go.v2,BSD-3-Clause,allowlisted,2019-11-01, -gopkg.in/inf.v0,BSD-3-Clause,allowlisted,2019-11-01, -gopkg.in/tomb.v1,BSD-3-Clause,allowlisted,2019-11-01, -Highlight,BSD-3-Clause,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -htpasswd,BSD-3-Clause,not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-11-01, -Pure CSS,BSD-3-Clause,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -sprintf() for JavaScript,BSD-3-Clause,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -github.com/jteeuwen/go-bindata,CC0-1.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -VirtualBox Linux Guest Drivers Makefile,GPL-2.0-only,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-05-20,2019-11-01, -github.com/davecgh/go-spew,ISC,allowlisted,2019-11-01, -shred,ISC,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -Angular,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -Asciidoctor,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -Azure acr-docker-credential-helper,MIT,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -Backbone,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -bitbucket.org/bertimus9/systemstat,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -Chart.js,MIT,allowlisted,2019-11-01, -colors,MIT,allowlisted,2019-11-01, -Gingko,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -github.com/andygrunwald/go-gerrit,MIT,allowlisted,2019-11-01, -github.com/armon/circbuf,MIT,allowlisted,2019-11-01, -github.com/armon/go-proxyproto,MIT,allowlisted,2019-11-01, -github.com/armon/go-radix,MIT,allowlisted,2019-11-01, -github.com/asaskevich/govalidator,MIT,allowlisted,2019-11-01, -github.com/Azure/azure-pipeline-go,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/Azure/azure-storage-blob-go,MIT,allowlisted,2019-11-01, -github.com/Azure/go-ansiterm,MIT,allowlisted,2019-11-01, -github.com/beorn7/perks,MIT,allowlisted,2019-11-01, -github.com/blang/semver,MIT,allowlisted,2019-11-01, -github.com/boltdb/bolt,MIT,allowlisted,2019-11-01, -github.com/coreos/bbolt,MIT,allowlisted,2019-11-01, -github.com/cpuguy83/go-md2man,MIT,allowlisted,2019-11-01, -github.com/daaku/go.zipexe,MIT,allowlisted,2019-11-01, -github.com/deckarep/golang-set,MIT,allowlisted,2019-11-01, -github.com/dgrijalva/jwt-go,MIT,allowlisted,2019-11-01, -github.com/dustin/go-humanize,MIT,allowlisted,2019-11-01, -github.com/eapache/channels,MIT,allowlisted,2019-11-01, -github.com/eapache/go-resiliency,MIT,allowlisted,2019-11-01, -github.com/eapache/go-xerial-snappy,MIT,allowlisted,2019-11-01, -github.com/eapache/queue,MIT,allowlisted,2019-11-01, -github.com/emicklei/go-restful,MIT,allowlisted,2019-11-01, -github.com/emicklei/go-restful-swagger12,MIT,allowlisted,2019-11-01, -github.com/exponent-io/jsonpath,MIT,allowlisted,2019-11-01, -github.com/fatih/camelcase,MIT,allowlisted,2019-11-01, -github.com/fatih/structs,MIT,allowlisted,2019-11-01, -github.com/go-ozzo/ozzo-validation,MIT,allowlisted,2019-11-01, -github.com/gobuffalo/envy,MIT,allowlisted,2019-11-01, -github.com/gregjones/httpcache,MIT,allowlisted,2019-11-01, -github.com/hpcloud/tail,MIT,allowlisted,2019-11-01, -github.com/huandu/xstrings,MIT,allowlisted,2019-11-01, -github.com/influxdata/influxdb,MIT,allowlisted,2019-11-01, -github.com/jbenet/go-context,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/jinzhu/gorm,MIT,allowlisted,2019-11-01, -github.com/jinzhu/inflection,MIT,allowlisted,2019-11-01, -github.com/jmank88/nuts,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/jmhodges/clock,MIT,allowlisted,2019-11-01, -github.com/jmoiron/sqlx,MIT,allowlisted,2019-11-01, -github.com/johanneswuerbach/nfsexports,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/joho/godotenv,MIT,allowlisted,2019-11-01, -github.com/joshdk/go-junit,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/jpillora/backoff,MIT,allowlisted,2019-11-01, -github.com/json-iterator/go,MIT,allowlisted,2019-11-01, -github.com/kevinburke/ssh_config,MIT,allowlisted,2019-11-01, -github.com/kisielk/sqlstruct,MIT,allowlisted,2019-11-01, -github.com/konsorten/go-windows-terminal-sequences,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/kr/pretty,MIT,allowlisted,2019-11-01, -github.com/kr/pty,MIT,allowlisted,2019-11-01, -github.com/kr/text,MIT,allowlisted,2019-11-01, -github.com/lib/pq,MIT,allowlisted,2019-11-01, -github.com/libvirt/libvirt-go,MIT,allowlisted,2019-11-01, -github.com/libvirt/libvirt-go-xml,MIT,allowlisted,2019-11-01, -github.com/mailru/easyjson,MIT,allowlisted,2019-11-01, -github.com/MakeNowJust/heredoc,MIT,allowlisted,2019-11-01, -github.com/markbates/inflect,MIT,allowlisted,2019-11-01, -github.com/marpaia/graphite-golang,MIT,allowlisted,2019-11-01, -github.com/marstr/guid,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/Masterminds/semver,MIT,allowlisted,2019-11-01, -github.com/Masterminds/sprig,MIT,allowlisted,2019-11-01, -github.com/Masterminds/vcs,MIT,allowlisted,2019-11-01, -github.com/mattn/go-runewidth,MIT,allowlisted,2019-11-01, -github.com/mattn/go-shellwords,MIT,allowlisted,2019-11-01, -github.com/mitchellh/go-homedir,MIT,allowlisted,2019-11-01, -github.com/mitchellh/go-ps,MIT,allowlisted,2019-11-01, -github.com/mitchellh/go-wordwrap,MIT,allowlisted,2019-11-01, -github.com/mitchellh/hashstructure,MIT,allowlisted,2019-11-01, -github.com/mitchellh/mapstructure,MIT,allowlisted,2019-11-01, -github.com/mohae/deepcopy,MIT,allowlisted,2019-11-01, -github.com/moul/http2curl,MIT,allowlisted,2019-11-01, -github.com/multiarch/qemu-user-static,MIT,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-11-01, -github.com/nightlyone/lockfile,MIT,allowlisted,2019-11-01, -github.com/olekukonko/tablewriter,MIT,allowlisted,2019-11-01, -github.com/onsi/ginkgo,MIT,allowlisted,2019-11-01, -github.com/onsi/gomega,MIT,allowlisted,2019-11-01, -github.com/opentracing/opentracing-go,MIT,allowlisted,2019-11-01, -github.com/parnurzeal/gorequest,MIT,allowlisted,2019-11-01, -github.com/patrickmn/go-cache,MIT,allowlisted,2019-11-01, -github.com/pelletier/go-buffruneio,MIT,allowlisted,2019-11-01, -github.com/pelletier/go-toml,MIT,allowlisted,2019-11-01, -github.com/peterbourgon/diskv,MIT,allowlisted,2019-11-01, -github.com/renstrom/dedent,MIT,allowlisted,2019-11-01, -github.com/Rican7/retry,MIT,allowlisted,2019-11-01, -github.com/riemann/riemann-go-client,MIT,allowlisted,2019-11-01, -github.com/robfig/cron,MIT,allowlisted,2019-11-01, -github.com/rubiojr/go-vhd,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-11-01, -github.com/satori/go.uuid,MIT,allowlisted,2019-11-01, -github.com/sdboyer/constext,MIT,allowlisted,2019-11-01, -github.com/sergi/go-diff,MIT,allowlisted,2019-11-01, -github.com/Shopify/sarama,MIT,allowlisted,2019-11-01, -github.com/shurcooL/githubv4,MIT,allowlisted,2019-11-01, -github.com/shurcooL/graphql,MIT,allowlisted,2019-11-01, -github.com/shurcooL/sanitized_anchor_name,MIT,allowlisted,2019-11-01, -github.com/smartystreets/go-aws-auth,MIT,allowlisted,2019-11-01, -github.com/spf13/cast,MIT,allowlisted,2019-11-01, -github.com/spf13/jwalterweatherman,MIT,allowlisted,2019-11-01, -github.com/spf13/viper,MIT,allowlisted,2019-11-01, -github.com/stretchr/objx,MIT,allowlisted,2019-11-01, -github.com/stretchr/testify,MIT,allowlisted,2019-11-01, -github.com/tchap/go-patricia,MIT,allowlisted,2019-11-01, -github.com/tmc/grpc-websocket-proxy,MIT,allowlisted,2019-11-01, -github.com/tsenart/vegeta,MIT,allowlisted,2019-11-01, -github.com/ugorji/go,MIT,allowlisted,2019-11-01, -github.com/urfave/cli,MIT,allowlisted,2019-11-01, -github.com/xiang90/probing,MIT,allowlisted,2019-11-01, -github.com/zakjan/cert-chain-resolver,MIT,allowlisted,2019-11-01, -go.uber.org/atomic,MIT,allowlisted,2019-11-01, -go.uber.org/multierr,MIT,allowlisted,2019-11-01, -go.uber.org/zap,MIT,allowlisted,2019-11-01, -gopkg.in/go-playground/pool.v3,MIT,allowlisted,2019-11-01, -gopkg.in/natefinch/lumberjack.v2,MIT,allowlisted,2019-11-01, -gopkg.in/robfig/cron.v2,MIT,allowlisted,2019-11-01, -Handlebars,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -jQuery,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -jquery,MIT,allowlisted,2019-11-01, -jQuery Slideto,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -jQuery Wiggle,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -jquery.scrollto,MIT,allowlisted,2019-11-01, -marked,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -mime,MIT,allowlisted,2019-11-01, -minimist,MIT,allowlisted,2019-11-01, -moment.js,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -node-static,MIT,allowlisted,2019-11-01, -normalize.css,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -Octicons,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -optimist,MIT,allowlisted,2019-11-01, -parseUri,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -Pause,MIT,not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-11-01, -ui-router for Angular,MIT,allowlisted,2019-11-01, -Underscore.js,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-11-01, -vbom.ml/util,MIT,allowlisted,2019-11-01, -wordwrap,MIT,allowlisted,2019-11-01, -github.com/c4milo/gotoolkit,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/d2g/dhcp4client,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/go-sql-driver/mysql,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/hashicorp/errwrap,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/hashicorp/go-cleanhttp,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/hashicorp/go-multierror,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/hashicorp/golang-lru,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/hashicorp/hcl,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -github.com/hooklift/iso9660,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-11-01, -defusedxml,Python-2.0,allowlisted,2019-11-01, -go-retryablehttp,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19,2021-07-19, -go-version,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, -paho.mqtt.golang,EPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, -raft,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, -raft-boltdb,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, -tslib,0BSD,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, -webpki-roots,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, -hashicorp/consul/api,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/go-hclog,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/go-immutable-radix,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/go-plugin,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/go-rootcerts,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/go-secure-stdlib,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/go-sockaddr,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/go-uuid,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/go-version,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/raft,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/serf,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/vault,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/yamux,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -veraison/go-cose,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, \ No newline at end of file +Package Name,License Concluded,Comments,Date Published,Last updated: 2026-02-02 +github.com/docker/go-metrics,CC-BY-SA 4.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31,2023-08-31, +github.com/hashicorp/go-memdb,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31,2023-08-31, +github.com/shoenig/go-m1cpu,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31,2023-08-31, +hashicorp/packer-plugin-sdk,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31,2023-08-31, +github.com/hashicorp/consul/api,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/hashicorp/go-hclog,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/hashicorp/go-immutable-radix,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/hashicorp/go-plugin,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/hashicorp/go-rootcerts,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/hashicorp/go-secure-stdlib,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/hashicorp/go-sockaddr,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/hashicorp/go-uuid,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/hashicorp/serf,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/hashicorp/vault,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/veraison/go-cose,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/consul/api,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/go-hclog,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/go-immutable-radix,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/go-plugin,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/go-rootcerts,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/go-secure-stdlib,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/go-sockaddr,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/go-uuid,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/go-version,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/raft,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/serf,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/vault,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/yamux,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +veraison/go-cose,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/eclipse/paho.mqtt.golang,EPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12,2022-04-12, +github.com/hashicorp/go-version,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12,2022-04-12, +github.com/hashicorp/raft,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12,2022-04-12, +github.com/hashicorp/raft-boltdb,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12,2022-04-12, +github.com/Microsoft/tslib,0BSD,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12,2022-04-12, +go-version,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +paho.mqtt.golang,EPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +raft,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +raft-boltdb,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +tslib,0BSD,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +webpki-roots,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +github.com/hashicorp/go-retryablehttp,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19,2021-07-19, +go-retryablehttp,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19,2021-07-19, +Chart.js,MIT,allowlisted,2019-11-01, +cloud.google.com/go,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +code.cloudfoundry.org/clock,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +colors,MIT,allowlisted,2019-11-01, +defusedxml,Python-2.0,allowlisted,2019-11-01, +ejs,(Apache-2.0 AND MIT),allowlisted,2019-11-01, +github.com/abbot/go-http-auth,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/aclements/go-moremath,BSD-3-Clause,allowlisted,2019-11-01, +github.com/andygrunwald/go-gerrit,MIT,allowlisted,2019-11-01, +github.com/aokoli/goutils,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/appc/spec,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/armon/circbuf,MIT,allowlisted,2019-11-01, +github.com/armon/go-proxyproto,MIT,allowlisted,2019-11-01, +github.com/armon/go-radix,MIT,allowlisted,2019-11-01, +github.com/asaskevich/govalidator,MIT,allowlisted,2019-11-01, +github.com/aws/aws-k8s-tester,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/aws/aws-sdk-go,((MIT OR GPL-3.0) AND BSD-3-Clause AND Apache-2.0 AND MIT),allowlisted,2019-11-01, +github.com/Azure/azure-sdk-for-go,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/Azure/azure-storage-blob-go,MIT,allowlisted,2019-11-01, +github.com/Azure/go-ansiterm,MIT,allowlisted,2019-11-01, +github.com/Azure/go-autorest,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/bazelbuild/bazel-gazelle,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/bazelbuild/buildtools,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/beorn7/perks,MIT,allowlisted,2019-11-01, +github.com/blang/semver,MIT,allowlisted,2019-11-01, +github.com/bluebreezecf/opentsdb-goclient,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/boltdb/bolt,MIT,allowlisted,2019-11-01, +github.com/bwmarrin/snowflake,BSD-2-Clause,allowlisted,2019-11-01, +github.com/chai2010/gettext-go,BSD-3-Clause,allowlisted,2019-11-01, +github.com/cloudflare/cfssl,(BSD-2-Clause AND BSD-3-Clause AND ISC),allowlisted,2019-11-01, +github.com/cloudfoundry-incubator/candiedyaml,(Apache-2.0 AND MIT),allowlisted,2019-11-01, +github.com/clusterhq/flocker-go,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/cockroachdb/cmux,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/codedellemc/goscaleio,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/container-storage-interface/spec,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/containerd/console,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/containerd/containerd,(CC-BY-4.0 AND Apache-2.0),"Apache-2.0, no approval needed",2019-11-01, +github.com/containernetworking/cni,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/containernetworking/plugins,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/coredns/coredns,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/coreos/bbolt,MIT,allowlisted,2019-11-01, +github.com/coreos/etcd,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, +github.com/coreos/go-etcd,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/coreos/go-oidc,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/coreos/go-semver,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/coreos/go-systemd,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/coreos/pkg,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/coreos/rkt,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/cpuguy83/go-md2man,MIT,allowlisted,2019-11-01, +github.com/cyphar/filepath-securejoin,BSD-3-Clause,allowlisted,2019-11-01, +github.com/daaku/go.zipexe,MIT,allowlisted,2019-11-01, +github.com/davecgh/go-spew,ISC,allowlisted,2019-11-01, +github.com/daviddengcn/go-colortext,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, +github.com/dchest/safefile,BSD-2-Clause,allowlisted,2019-11-01, +github.com/deckarep/golang-set,MIT,allowlisted,2019-11-01, +github.com/denverdino/aliyungo,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/dgrijalva/jwt-go,MIT,allowlisted,2019-11-01, +github.com/digitalocean/godo,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, +github.com/djherbis/atime,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, +github.com/docker/cli,(Apache-2.0 AND MIT),allowlisted,2019-11-01, +github.com/docker/distribution,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/docker/docker,(Apache-2.0 AND MIT),allowlisted,2019-11-01, +github.com/docker/engine-api,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, +github.com/docker/go-connections,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/docker/libcompose,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/docker/libnetwork,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/docker/libtrust,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/docker/machine,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/dustin/go-humanize,MIT,allowlisted,2019-11-01, +github.com/eapache/channels,MIT,allowlisted,2019-11-01, +github.com/eapache/go-resiliency,MIT,allowlisted,2019-11-01, +github.com/eapache/go-xerial-snappy,MIT,allowlisted,2019-11-01, +github.com/eapache/queue,MIT,allowlisted,2019-11-01, +github.com/elazarl/go-bindata-assetfs,BSD-2-Clause,allowlisted,2019-11-01, +github.com/elazarl/goproxy,BSD-3-Clause,allowlisted,2019-11-01, +github.com/emicklei/go-restful,MIT,allowlisted,2019-11-01, +github.com/emicklei/go-restful-swagger12,MIT,allowlisted,2019-11-01, +github.com/emirpasic/gods,(BSD-2-Clause AND ISC),allowlisted,2019-11-01, +github.com/euank/go-kmsg-parser,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/evanphx/json-patch,BSD-3-Clause,allowlisted,2019-11-01, +github.com/exponent-io/jsonpath,MIT,allowlisted,2019-11-01, +github.com/fatih/camelcase,MIT,allowlisted,2019-11-01, +github.com/fatih/structs,MIT,allowlisted,2019-11-01, +github.com/flynn/go-shlex,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/fsnotify/fsnotify,BSD-3-Clause,allowlisted,2019-11-01, +github.com/fsouza/fake-gcs-server,BSD-2-Clause,allowlisted,2019-11-01, +github.com/fsouza/go-dockerclient,(BSD-2-Clause AND Apache-2.0),allowlisted,2019-11-01, +github.com/fullsailor/pkcs7,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, +github.com/GeertJohan/go.rice,BSD-2-Clause,allowlisted,2019-11-01, +github.com/ghodss/yaml,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, +github.com/globalsign/mgo,(BSD-2-Clause AND BSD-3-Clause),allowlisted,2019-11-01, +github.com/go-ini/ini,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/go-openapi/analysis,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/go-openapi/errors,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/go-openapi/jsonpointer,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/go-openapi/jsonreference,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/go-openapi/loads,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/go-openapi/runtime,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/go-openapi/spec,(CC-BY-4.0 AND Apache-2.0 AND MIT),allowlisted,2019-11-01, +github.com/go-openapi/strfmt,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/go-openapi/swag,(Apache-2.0 AND MIT),allowlisted,2019-11-01, +github.com/go-openapi/validate,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/go-ozzo/ozzo-validation,MIT,allowlisted,2019-11-01, +github.com/go-yaml/yaml,(Apache-2.0 AND MIT),allowlisted,2019-11-01, +github.com/gobuffalo/envy,MIT,allowlisted,2019-11-01, +github.com/godbus/dbus,BSD-2-Clause,allowlisted,2019-11-01, +github.com/gogo/protobuf,(BSD-2-Clause AND BSD-3-Clause),allowlisted,2019-11-01, +github.com/golang/dep,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),allowlisted,2019-11-01, +github.com/golang/glog,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/golang/groupcache,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/golang/lint,BSD-3-Clause,allowlisted,2019-11-01, +github.com/golang/mock,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/golang/protobuf,BSD-3-Clause,allowlisted,2019-11-01, +github.com/golang/snappy,BSD-3-Clause,allowlisted,2019-11-01, +github.com/google/btree,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/google/cadvisor,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/google/certificate-transparency-go,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, +github.com/google/go-containerregistry,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/google/go-querystring,BSD-3-Clause,allowlisted,2019-11-01, +github.com/google/go-tpm,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/google/gofuzz,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/google/uuid,BSD-3-Clause,allowlisted,2019-11-01, +github.com/googleapis/gax-go,BSD-3-Clause,allowlisted,2019-11-01, +github.com/googleapis/gnostic,(BSD-3-Clause AND Apache-2.0 AND MIT),allowlisted,2019-11-01, +github.com/GoogleCloudPlatform/gke-managed-certs,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/gophercloud/gophercloud,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/gorilla/context,BSD-3-Clause,allowlisted,2019-11-01, +github.com/gorilla/mux,BSD-3-Clause,allowlisted,2019-11-01, +github.com/gorilla/securecookie,BSD-3-Clause,allowlisted,2019-11-01, +github.com/gorilla/sessions,BSD-3-Clause,allowlisted,2019-11-01, +github.com/gorilla/websocket,(BSD-2-Clause AND MIT),allowlisted,2019-11-01, +github.com/gregjones/httpcache,MIT,allowlisted,2019-11-01, +github.com/grpc-ecosystem/go-grpc-middleware,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/grpc-ecosystem/go-grpc-prometheus,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/grpc-ecosystem/grpc-gateway,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, +github.com/hawkular/hawkular-client-go,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/heketi/heketi REST API,(Apache-2.0 OR LGPL-3.0-or-later),"Apache-2.0, no approval needed",2019-11-01, +github.com/hpcloud/tail,MIT,allowlisted,2019-11-01, +github.com/huandu/xstrings,MIT,allowlisted,2019-11-01, +github.com/imdario/mergo,BSD-3-Clause,allowlisted,2019-11-01, +github.com/inconshreveable/mousetrap,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/influxdata/influxdb,MIT,allowlisted,2019-11-01, +github.com/jimmidyson/go-download,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/jinzhu/gorm,MIT,allowlisted,2019-11-01, +github.com/jinzhu/inflection,MIT,allowlisted,2019-11-01, +github.com/jmespath/go-jmespath,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/jmhodges/clock,MIT,allowlisted,2019-11-01, +github.com/jmoiron/sqlx,MIT,allowlisted,2019-11-01, +github.com/joho/godotenv,MIT,allowlisted,2019-11-01, +github.com/jonboulle/clockwork,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/jpillora/backoff,MIT,allowlisted,2019-11-01, +github.com/json-iterator/go,MIT,allowlisted,2019-11-01, +github.com/kardianos/osext,BSD-3-Clause,allowlisted,2019-11-01, +github.com/karrick/godirwalk,BSD-2-Clause,allowlisted,2019-11-01, +github.com/kevinburke/ssh_config,MIT,allowlisted,2019-11-01, +github.com/kisielk/sqlstruct,MIT,allowlisted,2019-11-01, +github.com/knative/build,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/kr/fs,BSD-3-Clause,allowlisted,2019-11-01, +github.com/kr/pretty,MIT,allowlisted,2019-11-01, +github.com/kr/pty,MIT,allowlisted,2019-11-01, +github.com/kr/text,MIT,allowlisted,2019-11-01, +github.com/kubernetes-incubator/apiserver-builder,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/kubernetes-incubator/reference-docs,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/kubernetes-sigs/application,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/kubernetes/repo-infra,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/kylelemons/godebug,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/lib/pq,MIT,allowlisted,2019-11-01, +github.com/libopenstorage/openstorage,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/libvirt/libvirt-go,MIT,allowlisted,2019-11-01, +github.com/libvirt/libvirt-go-xml,MIT,allowlisted,2019-11-01, +github.com/lpabon/godbc,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/lxn/win,BSD-3-Clause,allowlisted,2019-11-01, +github.com/magiconair/properties,(BSD-2-Clause AND BSD-3-Clause),allowlisted,2019-11-01, +github.com/mailru/easyjson,MIT,allowlisted,2019-11-01, +github.com/MakeNowJust/heredoc,MIT,allowlisted,2019-11-01, +github.com/markbates/inflect,MIT,allowlisted,2019-11-01, +github.com/marpaia/graphite-golang,MIT,allowlisted,2019-11-01, +github.com/Masterminds/semver,MIT,allowlisted,2019-11-01, +github.com/Masterminds/sprig,MIT,allowlisted,2019-11-01, +github.com/Masterminds/vcs,MIT,allowlisted,2019-11-01, +github.com/mattn/go-runewidth,MIT,allowlisted,2019-11-01, +github.com/mattn/go-shellwords,MIT,allowlisted,2019-11-01, +github.com/mattn/go-zglob,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, +github.com/matttproud/golang_protobuf_extensions,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, +github.com/mesos/mesos-go,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/mholt/caddy,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/Microsoft/go-winio,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, +github.com/Microsoft/hcsshim,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, +github.com/miekg/coredns,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/miekg/dns,BSD-3-Clause,allowlisted,2019-11-01, +github.com/mindprince/gonvml,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/mistifyio/go-zfs,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/mitchellh/go-homedir,MIT,allowlisted,2019-11-01, +github.com/mitchellh/go-ps,MIT,allowlisted,2019-11-01, +github.com/mitchellh/go-wordwrap,MIT,allowlisted,2019-11-01, +github.com/mitchellh/hashstructure,MIT,allowlisted,2019-11-01, +github.com/mitchellh/mapstructure,MIT,allowlisted,2019-11-01, +github.com/moby/hyperkit,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/modern-go/concurrent,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/modern-go/reflect2,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/mohae/deepcopy,MIT,allowlisted,2019-11-01, +github.com/moul/http2curl,MIT,allowlisted,2019-11-01, +github.com/mrunalp/fileutils,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/mvdan/xurls,BSD-3-Clause,allowlisted,2019-11-01, +github.com/mxk/go-flowrate,BSD-3-Clause,allowlisted,2019-11-01, +github.com/ncabatoff/process-exporter,(Apache-2.0 AND MIT),allowlisted,2019-11-01, +github.com/nightlyone/lockfile,MIT,allowlisted,2019-11-01, +github.com/novln/docker-parser,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/NYTimes/gziphandler,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/olekukonko/tablewriter,MIT,allowlisted,2019-11-01, +github.com/onsi/ginkgo,MIT,allowlisted,2019-11-01, +github.com/onsi/gomega,MIT,allowlisted,2019-11-01, +github.com/opencontainers/image-spec,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/opencontainers/runtime-spec,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/opencontainers/selinux,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/openshift/origin,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/opentracing/opentracing-go,MIT,allowlisted,2019-11-01, +github.com/parnurzeal/gorequest,MIT,allowlisted,2019-11-01, +github.com/patrickmn/go-cache,MIT,allowlisted,2019-11-01, +github.com/paultag/sniff,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/pborman/uuid,BSD-3-Clause,allowlisted,2019-11-01, +github.com/pelletier/go-buffruneio,MIT,allowlisted,2019-11-01, +github.com/pelletier/go-toml,MIT,allowlisted,2019-11-01, +github.com/petar/GoLLRB,BSD-3-Clause,allowlisted,2019-11-01, +github.com/peterbourgon/diskv,MIT,allowlisted,2019-11-01, +github.com/pierrec/lz4,BSD-3-Clause,allowlisted,2019-11-01, +github.com/pierrec/xxHash,BSD-3-Clause,allowlisted,2019-11-01, +github.com/pkg/browser,BSD-2-Clause,allowlisted,2019-11-01, +github.com/pkg/errors,BSD-2-Clause,allowlisted,2019-11-01, +github.com/pkg/profile,BSD-2-Clause,allowlisted,2019-11-01, +github.com/pkg/sftp,BSD-2-Clause,allowlisted,2019-11-01, +github.com/pmezard/go-difflib,BSD-3-Clause,allowlisted,2019-11-01, +github.com/pquerna/cachecontrol,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, +github.com/pquerna/ffjson,(BSD-3-Clause AND Apache-2.0 AND ISC),allowlisted,2019-11-01, +github.com/prometheus/client_golang,(BSD-3-Clause AND Apache-2.0 AND MIT),allowlisted,2019-11-01, +github.com/prometheus/client_model,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/prometheus/common,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, +github.com/prometheus/procfs,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/PuerkitoBio/purell,BSD-3-Clause,allowlisted,2019-11-01, +github.com/PuerkitoBio/urlesc,BSD-3-Clause,allowlisted,2019-11-01, +github.com/r2d4/external-storage,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/rackspace/gophercloud,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/rancher/go-rancher,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/rcrowley/go-metrics,BSD-2-Clause-FreeBSD,allowlisted,2019-11-01, +github.com/renstrom/dedent,MIT,allowlisted,2019-11-01, +github.com/Rican7/retry,MIT,allowlisted,2019-11-01, +github.com/riemann/riemann-go-client,MIT,allowlisted,2019-11-01, +github.com/robfig/cron,MIT,allowlisted,2019-11-01, +github.com/russross/blackfriday,BSD-2-Clause,allowlisted,2019-11-01, +github.com/samalba/dockerclient,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/satori/go.uuid,MIT,allowlisted,2019-11-01, +github.com/scalingdata/gcfg,(BSD-2-Clause AND BSD-3-Clause),allowlisted,2019-11-01, +github.com/sdboyer/constext,MIT,allowlisted,2019-11-01, +github.com/seccomp/libseccomp-golang,BSD-2-Clause,allowlisted,2019-11-01, +github.com/sergi/go-diff,MIT,allowlisted,2019-11-01, +github.com/Shopify/sarama,MIT,allowlisted,2019-11-01, +github.com/shurcooL/githubv4,MIT,allowlisted,2019-11-01, +github.com/shurcooL/go,BSD-3-Clause,allowlisted,2019-11-01, +github.com/shurcooL/graphql,MIT,allowlisted,2019-11-01, +github.com/shurcooL/sanitized_anchor_name,MIT,allowlisted,2019-11-01, +github.com/sirupsen/logrus,(BSD-2-Clause AND BSD-3-Clause AND MIT),allowlisted,2019-11-01, +github.com/skynetservices/skydns,(Apache-2.0 AND MIT),allowlisted,2019-11-01, +github.com/smartystreets/go-aws-auth,MIT,allowlisted,2019-11-01, +github.com/soheilhy/cmux,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/spf13/afero,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/spf13/cast,MIT,allowlisted,2019-11-01, +github.com/spf13/cobra,(Apache-2.0 AND MIT),allowlisted,2019-11-01, +github.com/spf13/jwalterweatherman,MIT,allowlisted,2019-11-01, +github.com/spf13/pflag,BSD-3-Clause,allowlisted,2019-11-01, +github.com/spf13/viper,MIT,allowlisted,2019-11-01, +github.com/storageos/go-api,(BSD-2-Clause AND MIT),allowlisted,2019-11-01, +github.com/streadway/quantile,BSD-2-Clause,allowlisted,2019-11-01, +github.com/stretchr/objx,MIT,allowlisted,2019-11-01, +github.com/stretchr/testify,MIT,allowlisted,2019-11-01, +github.com/syndtr/gocapability,BSD-2-Clause,allowlisted,2019-11-01, +github.com/tchap/go-patricia,MIT,allowlisted,2019-11-01, +github.com/thockin/glogr,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/thockin/logr,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/tmc/grpc-websocket-proxy,MIT,allowlisted,2019-11-01, +github.com/tsenart/vegeta,MIT,allowlisted,2019-11-01, +github.com/ugorji/go,MIT,allowlisted,2019-11-01, +github.com/Unknwon/goconfig,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/urfave/cli,MIT,allowlisted,2019-11-01, +github.com/vishvananda/netlink,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/vishvananda/netns,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/vmware/govmomi,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, +github.com/vmware/photon-controller-go-sdk,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, +github.com/weaveworks/mesh,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/xanzy/go-cloudstack,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/xeipuuv/gojsonpointer,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/xeipuuv/gojsonreference,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/xeipuuv/gojsonschema,(Apache-2.0 AND MIT),allowlisted,2019-11-01, +github.com/xiang90/probing,MIT,allowlisted,2019-11-01, +github.com/zakjan/cert-chain-resolver,MIT,allowlisted,2019-11-01, +github.com/ziutek/syslog,BSD-3-Clause,allowlisted,2019-11-01, +go.opencensus.io,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +go.uber.org/atomic,MIT,allowlisted,2019-11-01, +go.uber.org/multierr,MIT,allowlisted,2019-11-01, +go.uber.org/zap,MIT,allowlisted,2019-11-01, +go4.org/errorutil,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +golang.org/x/build,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),allowlisted,2019-11-01, +golang.org/x/exp,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),allowlisted,2019-11-01, +golang.org/x/lint,BSD-3-Clause,allowlisted,2019-11-01, +golang.org/x/oauth2,BSD-3-Clause,allowlisted,2019-11-01, +golang.org/x/sync,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),allowlisted,2019-11-01, +golang.org/x/sys,(LicenseRef-Google-Patents-Notice-Golang AND BSD-2-Clause AND BSD-3-Clause),allowlisted,2019-11-01, +golang.org/x/text,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),allowlisted,2019-11-01, +golang.org/x/time,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),allowlisted,2019-11-01, +golang.org/x/tools,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause AND Apache-2.0 AND MIT),allowlisted,2019-11-01, +golang/archive/tar,BSD-3-Clause,allowlisted,2019-11-01, +gonum.org/v1/gonum,((BSD-3-Clause OR CC0-1.0) AND BSD-3-Clause),allowlisted,2019-11-01, +google.golang.org/cloud,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +google.golang.org/genproto,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +gopkg.in/check.v1,(BSD-2-Clause AND BSD-3-Clause),allowlisted,2019-11-01, +gopkg.in/cheggaaa/pb.v1,BSD-3-Clause,allowlisted,2019-11-01, +gopkg.in/fsnotify,BSD-3-Clause,allowlisted,2019-11-01, +gopkg.in/gcfg.v1,BSD-3-Clause,allowlisted,2019-11-01, +gopkg.in/go-playground/pool.v3,MIT,allowlisted,2019-11-01, +gopkg.in/igm/sockjs-go.v2,BSD-3-Clause,allowlisted,2019-11-01, +gopkg.in/inf.v0,BSD-3-Clause,allowlisted,2019-11-01, +gopkg.in/natefinch/lumberjack.v2,MIT,allowlisted,2019-11-01, +gopkg.in/olivere/elastic.v3,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, +gopkg.in/olivere/elastic.v5,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, +gopkg.in/robfig/cron.v2,MIT,allowlisted,2019-11-01, +gopkg.in/square/go-jose.v2,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, +gopkg.in/src-d,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +gopkg.in/tomb.v1,BSD-3-Clause,allowlisted,2019-11-01, +jquery.scrollto,MIT,allowlisted,2019-11-01, +marked,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, +mime,MIT,allowlisted,2019-11-01, +minimist,MIT,allowlisted,2019-11-01, +node-static,MIT,allowlisted,2019-11-01, +optimist,MIT,allowlisted,2019-11-01, +ui-router for Angular,MIT,allowlisted,2019-11-01, +vbom.ml/util,MIT,allowlisted,2019-11-01, +wordwrap,MIT,allowlisted,2019-11-01, +VirtualBox Linux Guest Drivers Makefile,GPL-2.0-only,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-05-20,2019-05-20, +Angular,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +Asciidoctor,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +Azure acr-docker-credential-helper,MIT,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +Backbone,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +bitbucket.org/bertimus9/systemstat,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +bitbucket.org/ww/goautoneg,BSD-3-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +bootstrap,(CC-BY-3.0 AND MIT),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +dialog-polyfill.css,BSD-3-Clause,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +font-awesome,(CC-BY-3.0 AND MIT AND OFL-1.1),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +Gingko,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +github.com/Azure/azure-pipeline-go,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/bungle/lua-resty-template,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +github.com/c4milo/gotoolkit,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/client9/misspell,(Unlicense AND BSD-3-Clause AND MIT),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/d2g/dhcp4,BSD-3-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/d2g/dhcp4client,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/dgryski/go-onlinestats,(MIT AND LicenseRef-Public-domain-statement),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/docker/go-units,(CC-BY-SA-4.0 AND CC-BY-4.0 AND Apache-2.0),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/docker/spdystream,(CC-BY-SA-4.0 AND CC-BY-4.0 AND BSD-3-Clause AND Apache-2.0),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/go-sql-driver/mysql,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/gonum/graph,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +github.com/google/go-github,(BSD-3-Clause AND CC-BY-3.0),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/grpc-ecosystem/grpc-opentracing,(BSD-3-Clause AND LicenseRef-Google-Patents-Notice-GRPC),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/hashicorp/errwrap,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/hashicorp/go-cleanhttp,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/hashicorp/go-multierror,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/hashicorp/golang-lru,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/hashicorp/hcl,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/hooklift/iso9660,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/howeyc/gopass,(ISC AND CDDL-1.0),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/jbenet/go-context,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/JeffAshton/win_pdh,BSD-3-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/jmank88/nuts,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/johanneswuerbach/nfsexports,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/joshdk/go-junit,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/jteeuwen/go-bindata,CC0-1.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/konsorten/go-windows-terminal-sequences,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/marstr/guid,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/mattn/go-sqlite3,(MIT AND LicenseRef-Public-domain-statement),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/multiarch/qemu-user-static,MIT,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +github.com/Nvveen/Gotty,BSD-2-Clause-FreeBSD,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/opencontainers/go-digest,(CC-BY-SA-4.0 AND CC-BY-4.0 AND Apache-2.0),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/opencontainers/runc,(LicenseRef-CC-unspecified AND Apache-2.0),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/quobyte/api,BSD-3-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/rubiojr/go-vhd,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/sigma/go-inotify,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/spotinst/spotinst-sdk-go,(BSD-3-Clause AND Apache-2.0 AND MIT),not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/src-d/gcfg,BSD-3-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/tent/http-link-go,BSD-3-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/xanzy/ssh-agent,(Apache-2.0 AND MIT),not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/zchee/go-vmnet,(BSD-2-Clause AND BSD-3-Clause),not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +go-srcimporter,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +go9p,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +godep,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +golang.org/x/crypto,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause AND MIT AND LicenseRef-Public-domain-statement),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +golang.org/x/net,(LicenseRef-Google-Patents-Notice-Golang AND BSD-2-Clause AND BSD-3-Clause AND CC-BY-3.0 AND (BSD-3-Clause OR LicenseRef-W3C-Test-Suite-License-1)),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +golang/expansion,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +golang/go/types,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +golang/internal/srcimporter,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +golang/json,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +golang/netutil,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +golang/reflect,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +golang/template,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +Google Protocol Buffers,BSD-3-Clause,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +google.golang.org/api,(BSD-3-Clause AND Apache-2.0 AND MIT),not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-03-11, +google.golang.org/appengine,(BSD-3-Clause AND Apache-2.0),not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-03-11, +google.golang.org/grpc,(BSD-3-Clause AND Apache-2.0 AND LicenseRef-Google-Patents-Notice-GRPC),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +gopkg.in/warnings.v0,BSD-2-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +Handlebars,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +Highlight,BSD-3-Clause,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +highlight.js,(BSD-3-Clause AND MIT AND CC0-1.0 AND LicenseRef-Public-domain-statement),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +htpasswd,BSD-3-Clause,not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-03-11, +jQuery,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +jQuery BBQ,(MIT OR GPL-2.0+),contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +jQuery hashchange event,(GPL-2.0+ OR MIT),contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +jQuery Slideto,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +jQuery Wiggle,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +moment.js,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +normalize.css,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +Octicons,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +parseUri,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +Pause,MIT,not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-03-11, +Pure CSS,BSD-3-Clause,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +shred,ISC,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +sigs.k8s.io/yaml,(BSD-3-Clause AND MIT),fork of github.com/ghodss/yaml; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +speter.net/go/exp,(BSD-2-Clause AND BSD-3-Clause),not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-03-11, +sprintf() for JavaScript,BSD-3-Clause,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +Underscore.js,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, diff --git a/license-exceptions/cncf-exceptions-current.spdx b/license-exceptions/cncf-exceptions-current.spdx new file mode 100644 index 00000000..f5ad4c3b --- /dev/null +++ b/license-exceptions/cncf-exceptions-current.spdx @@ -0,0 +1,5144 @@ +SPDXVersion: SPDX-2.1 +DataLicense: CC0-1.0 +SPDXID: SPDXRef-DOCUMENT +DocumentName: cncf-exceptions-2026-02-02 +DocumentNamespace: https://github.com/cncf/foundation/license-exceptions-2026-02-02 +Creator: Organization: CNCF +Created: 2026-02-02T03:42:40Z + +##### Package: docker/go-metrics + +PackageName: docker/go-metrics +SPDXID: SPDXRef-Package1 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: CC-BY-SA 4.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31 + +##### Package: hashicorp/go-memdb + +PackageName: hashicorp/go-memdb +SPDXID: SPDXRef-Package2 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31 + +##### Package: shoenig/go-m1cpu + +PackageName: shoenig/go-m1cpu +SPDXID: SPDXRef-Package3 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31 + +##### Package: hashicorp/packer-plugin-sdk + +PackageName: hashicorp/packer-plugin-sdk +SPDXID: SPDXRef-Package4 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31 + +##### Package: hashicorp/consul/api + +PackageName: hashicorp/consul/api +SPDXID: SPDXRef-Package5 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-hclog + +PackageName: hashicorp/go-hclog +SPDXID: SPDXRef-Package6 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-immutable-radix + +PackageName: hashicorp/go-immutable-radix +SPDXID: SPDXRef-Package7 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-plugin + +PackageName: hashicorp/go-plugin +SPDXID: SPDXRef-Package8 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-rootcerts + +PackageName: hashicorp/go-rootcerts +SPDXID: SPDXRef-Package9 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-secure-stdlib + +PackageName: hashicorp/go-secure-stdlib +SPDXID: SPDXRef-Package10 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-sockaddr + +PackageName: hashicorp/go-sockaddr +SPDXID: SPDXRef-Package11 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-uuid + +PackageName: hashicorp/go-uuid +SPDXID: SPDXRef-Package12 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/serf + +PackageName: hashicorp/serf +SPDXID: SPDXRef-Package13 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/vault + +PackageName: hashicorp/vault +SPDXID: SPDXRef-Package14 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: veraison/go-cose + +PackageName: veraison/go-cose +SPDXID: SPDXRef-Package15 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/consul/api + +PackageName: hashicorp/consul/api +SPDXID: SPDXRef-Package16 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-hclog + +PackageName: hashicorp/go-hclog +SPDXID: SPDXRef-Package17 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-immutable-radix + +PackageName: hashicorp/go-immutable-radix +SPDXID: SPDXRef-Package18 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-plugin + +PackageName: hashicorp/go-plugin +SPDXID: SPDXRef-Package19 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-rootcerts + +PackageName: hashicorp/go-rootcerts +SPDXID: SPDXRef-Package20 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-secure-stdlib + +PackageName: hashicorp/go-secure-stdlib +SPDXID: SPDXRef-Package21 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-sockaddr + +PackageName: hashicorp/go-sockaddr +SPDXID: SPDXRef-Package22 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-uuid + +PackageName: hashicorp/go-uuid +SPDXID: SPDXRef-Package23 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/go-version + +PackageName: hashicorp/go-version +SPDXID: SPDXRef-Package24 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/raft + +PackageName: hashicorp/raft +SPDXID: SPDXRef-Package25 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/serf + +PackageName: hashicorp/serf +SPDXID: SPDXRef-Package26 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/vault + +PackageName: hashicorp/vault +SPDXID: SPDXRef-Package27 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: hashicorp/yamux + +PackageName: hashicorp/yamux +SPDXID: SPDXRef-Package28 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: veraison/go-cose + +PackageName: veraison/go-cose +SPDXID: SPDXRef-Package29 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 + +##### Package: eclipse/paho.mqtt.golang + +PackageName: eclipse/paho.mqtt.golang +SPDXID: SPDXRef-Package30 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: EPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12 + +##### Package: hashicorp/go-version + +PackageName: hashicorp/go-version +SPDXID: SPDXRef-Package31 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12 + +##### Package: hashicorp/raft + +PackageName: hashicorp/raft +SPDXID: SPDXRef-Package32 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12 + +##### Package: hashicorp/raft-boltdb + +PackageName: hashicorp/raft-boltdb +SPDXID: SPDXRef-Package33 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12 + +##### Package: Microsoft/tslib + +PackageName: Microsoft/tslib +SPDXID: SPDXRef-Package34 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: 0BSD +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12 + +##### Package: go-version + +PackageName: go-version +SPDXID: SPDXRef-Package35 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 + +##### Package: paho.mqtt.golang + +PackageName: paho.mqtt.golang +SPDXID: SPDXRef-Package36 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: EPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 + +##### Package: raft + +PackageName: raft +SPDXID: SPDXRef-Package37 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 + +##### Package: raft-boltdb + +PackageName: raft-boltdb +SPDXID: SPDXRef-Package38 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 + +##### Package: tslib + +PackageName: tslib +SPDXID: SPDXRef-Package39 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: 0BSD +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 + +##### Package: webpki-roots + +PackageName: webpki-roots +SPDXID: SPDXRef-Package40 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 + +##### Package: hashicorp/go-retryablehttp + +PackageName: hashicorp/go-retryablehttp +SPDXID: SPDXRef-Package41 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19 + +##### Package: go-retryablehttp + +PackageName: go-retryablehttp +SPDXID: SPDXRef-Package42 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19 + +##### Package: Chart.js + +PackageName: Chart.js +SPDXID: SPDXRef-Package43 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: cloud.google.com/go + +PackageName: cloud.google.com/go +SPDXID: SPDXRef-Package44 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: code.cloudfoundry.org/clock + +PackageName: code.cloudfoundry.org/clock +SPDXID: SPDXRef-Package45 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: colors + +PackageName: colors +SPDXID: SPDXRef-Package46 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: defusedxml + +PackageName: defusedxml +SPDXID: SPDXRef-Package47 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Python-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: ejs + +PackageName: ejs +SPDXID: SPDXRef-Package48 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: abbot/go-http-auth + +PackageName: abbot/go-http-auth +SPDXID: SPDXRef-Package49 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: aclements/go-moremath + +PackageName: aclements/go-moremath +SPDXID: SPDXRef-Package50 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: andygrunwald/go-gerrit + +PackageName: andygrunwald/go-gerrit +SPDXID: SPDXRef-Package51 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: aokoli/goutils + +PackageName: aokoli/goutils +SPDXID: SPDXRef-Package52 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: appc/spec + +PackageName: appc/spec +SPDXID: SPDXRef-Package53 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: armon/circbuf + +PackageName: armon/circbuf +SPDXID: SPDXRef-Package54 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: armon/go-proxyproto + +PackageName: armon/go-proxyproto +SPDXID: SPDXRef-Package55 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: armon/go-radix + +PackageName: armon/go-radix +SPDXID: SPDXRef-Package56 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: asaskevich/govalidator + +PackageName: asaskevich/govalidator +SPDXID: SPDXRef-Package57 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: aws/aws-k8s-tester + +PackageName: aws/aws-k8s-tester +SPDXID: SPDXRef-Package58 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: aws/aws-sdk-go + +PackageName: aws/aws-sdk-go +SPDXID: SPDXRef-Package59 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: ((MIT OR GPL-3.0) AND BSD-3-Clause AND Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: Azure/azure-sdk-for-go + +PackageName: Azure/azure-sdk-for-go +SPDXID: SPDXRef-Package60 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: Azure/azure-storage-blob-go + +PackageName: Azure/azure-storage-blob-go +SPDXID: SPDXRef-Package61 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: Azure/go-ansiterm + +PackageName: Azure/go-ansiterm +SPDXID: SPDXRef-Package62 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: Azure/go-autorest + +PackageName: Azure/go-autorest +SPDXID: SPDXRef-Package63 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: bazelbuild/bazel-gazelle + +PackageName: bazelbuild/bazel-gazelle +SPDXID: SPDXRef-Package64 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: bazelbuild/buildtools + +PackageName: bazelbuild/buildtools +SPDXID: SPDXRef-Package65 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: beorn7/perks + +PackageName: beorn7/perks +SPDXID: SPDXRef-Package66 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: blang/semver + +PackageName: blang/semver +SPDXID: SPDXRef-Package67 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: bluebreezecf/opentsdb-goclient + +PackageName: bluebreezecf/opentsdb-goclient +SPDXID: SPDXRef-Package68 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: boltdb/bolt + +PackageName: boltdb/bolt +SPDXID: SPDXRef-Package69 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: bwmarrin/snowflake + +PackageName: bwmarrin/snowflake +SPDXID: SPDXRef-Package70 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: chai2010/gettext-go + +PackageName: chai2010/gettext-go +SPDXID: SPDXRef-Package71 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: cloudflare/cfssl + +PackageName: cloudflare/cfssl +SPDXID: SPDXRef-Package72 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-2-Clause AND BSD-3-Clause AND ISC) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: cloudfoundry-incubator/candiedyaml + +PackageName: cloudfoundry-incubator/candiedyaml +SPDXID: SPDXRef-Package73 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: clusterhq/flocker-go + +PackageName: clusterhq/flocker-go +SPDXID: SPDXRef-Package74 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: cockroachdb/cmux + +PackageName: cockroachdb/cmux +SPDXID: SPDXRef-Package75 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: codedellemc/goscaleio + +PackageName: codedellemc/goscaleio +SPDXID: SPDXRef-Package76 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: container-storage-interface/spec + +PackageName: container-storage-interface/spec +SPDXID: SPDXRef-Package77 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: containerd/console + +PackageName: containerd/console +SPDXID: SPDXRef-Package78 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: containerd/containerd + +PackageName: containerd/containerd +SPDXID: SPDXRef-Package79 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (CC-BY-4.0 AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: containernetworking/cni + +PackageName: containernetworking/cni +SPDXID: SPDXRef-Package80 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: containernetworking/plugins + +PackageName: containernetworking/plugins +SPDXID: SPDXRef-Package81 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: coredns/coredns + +PackageName: coredns/coredns +SPDXID: SPDXRef-Package82 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: coreos/bbolt + +PackageName: coreos/bbolt +SPDXID: SPDXRef-Package83 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: coreos/etcd + +PackageName: coreos/etcd +SPDXID: SPDXRef-Package84 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: coreos/go-etcd + +PackageName: coreos/go-etcd +SPDXID: SPDXRef-Package85 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: coreos/go-oidc + +PackageName: coreos/go-oidc +SPDXID: SPDXRef-Package86 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: coreos/go-semver + +PackageName: coreos/go-semver +SPDXID: SPDXRef-Package87 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: coreos/go-systemd + +PackageName: coreos/go-systemd +SPDXID: SPDXRef-Package88 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: coreos/pkg + +PackageName: coreos/pkg +SPDXID: SPDXRef-Package89 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: coreos/rkt + +PackageName: coreos/rkt +SPDXID: SPDXRef-Package90 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: cpuguy83/go-md2man + +PackageName: cpuguy83/go-md2man +SPDXID: SPDXRef-Package91 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: cyphar/filepath-securejoin + +PackageName: cyphar/filepath-securejoin +SPDXID: SPDXRef-Package92 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: daaku/go.zipexe + +PackageName: daaku/go.zipexe +SPDXID: SPDXRef-Package93 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: davecgh/go-spew + +PackageName: davecgh/go-spew +SPDXID: SPDXRef-Package94 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: ISC +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: daviddengcn/go-colortext + +PackageName: daviddengcn/go-colortext +SPDXID: SPDXRef-Package95 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: dchest/safefile + +PackageName: dchest/safefile +SPDXID: SPDXRef-Package96 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: deckarep/golang-set + +PackageName: deckarep/golang-set +SPDXID: SPDXRef-Package97 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: denverdino/aliyungo + +PackageName: denverdino/aliyungo +SPDXID: SPDXRef-Package98 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: dgrijalva/jwt-go + +PackageName: dgrijalva/jwt-go +SPDXID: SPDXRef-Package99 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: digitalocean/godo + +PackageName: digitalocean/godo +SPDXID: SPDXRef-Package100 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: djherbis/atime + +PackageName: djherbis/atime +SPDXID: SPDXRef-Package101 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: docker/cli + +PackageName: docker/cli +SPDXID: SPDXRef-Package102 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: docker/distribution + +PackageName: docker/distribution +SPDXID: SPDXRef-Package103 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: docker/docker + +PackageName: docker/docker +SPDXID: SPDXRef-Package104 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: docker/engine-api + +PackageName: docker/engine-api +SPDXID: SPDXRef-Package105 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: docker/go-connections + +PackageName: docker/go-connections +SPDXID: SPDXRef-Package106 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: docker/libcompose + +PackageName: docker/libcompose +SPDXID: SPDXRef-Package107 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: docker/libnetwork + +PackageName: docker/libnetwork +SPDXID: SPDXRef-Package108 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: docker/libtrust + +PackageName: docker/libtrust +SPDXID: SPDXRef-Package109 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: docker/machine + +PackageName: docker/machine +SPDXID: SPDXRef-Package110 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: dustin/go-humanize + +PackageName: dustin/go-humanize +SPDXID: SPDXRef-Package111 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: eapache/channels + +PackageName: eapache/channels +SPDXID: SPDXRef-Package112 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: eapache/go-resiliency + +PackageName: eapache/go-resiliency +SPDXID: SPDXRef-Package113 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: eapache/go-xerial-snappy + +PackageName: eapache/go-xerial-snappy +SPDXID: SPDXRef-Package114 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: eapache/queue + +PackageName: eapache/queue +SPDXID: SPDXRef-Package115 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: elazarl/go-bindata-assetfs + +PackageName: elazarl/go-bindata-assetfs +SPDXID: SPDXRef-Package116 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: elazarl/goproxy + +PackageName: elazarl/goproxy +SPDXID: SPDXRef-Package117 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: emicklei/go-restful + +PackageName: emicklei/go-restful +SPDXID: SPDXRef-Package118 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: emicklei/go-restful-swagger12 + +PackageName: emicklei/go-restful-swagger12 +SPDXID: SPDXRef-Package119 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: emirpasic/gods + +PackageName: emirpasic/gods +SPDXID: SPDXRef-Package120 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-2-Clause AND ISC) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: euank/go-kmsg-parser + +PackageName: euank/go-kmsg-parser +SPDXID: SPDXRef-Package121 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: evanphx/json-patch + +PackageName: evanphx/json-patch +SPDXID: SPDXRef-Package122 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: exponent-io/jsonpath + +PackageName: exponent-io/jsonpath +SPDXID: SPDXRef-Package123 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: fatih/camelcase + +PackageName: fatih/camelcase +SPDXID: SPDXRef-Package124 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: fatih/structs + +PackageName: fatih/structs +SPDXID: SPDXRef-Package125 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: flynn/go-shlex + +PackageName: flynn/go-shlex +SPDXID: SPDXRef-Package126 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: fsnotify/fsnotify + +PackageName: fsnotify/fsnotify +SPDXID: SPDXRef-Package127 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: fsouza/fake-gcs-server + +PackageName: fsouza/fake-gcs-server +SPDXID: SPDXRef-Package128 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: fsouza/go-dockerclient + +PackageName: fsouza/go-dockerclient +SPDXID: SPDXRef-Package129 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-2-Clause AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: fullsailor/pkcs7 + +PackageName: fullsailor/pkcs7 +SPDXID: SPDXRef-Package130 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: GeertJohan/go.rice + +PackageName: GeertJohan/go.rice +SPDXID: SPDXRef-Package131 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: ghodss/yaml + +PackageName: ghodss/yaml +SPDXID: SPDXRef-Package132 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: globalsign/mgo + +PackageName: globalsign/mgo +SPDXID: SPDXRef-Package133 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-2-Clause AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: go-ini/ini + +PackageName: go-ini/ini +SPDXID: SPDXRef-Package134 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: go-openapi/analysis + +PackageName: go-openapi/analysis +SPDXID: SPDXRef-Package135 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: go-openapi/errors + +PackageName: go-openapi/errors +SPDXID: SPDXRef-Package136 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: go-openapi/jsonpointer + +PackageName: go-openapi/jsonpointer +SPDXID: SPDXRef-Package137 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: go-openapi/jsonreference + +PackageName: go-openapi/jsonreference +SPDXID: SPDXRef-Package138 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: go-openapi/loads + +PackageName: go-openapi/loads +SPDXID: SPDXRef-Package139 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: go-openapi/runtime + +PackageName: go-openapi/runtime +SPDXID: SPDXRef-Package140 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: go-openapi/spec + +PackageName: go-openapi/spec +SPDXID: SPDXRef-Package141 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (CC-BY-4.0 AND Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: go-openapi/strfmt + +PackageName: go-openapi/strfmt +SPDXID: SPDXRef-Package142 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: go-openapi/swag + +PackageName: go-openapi/swag +SPDXID: SPDXRef-Package143 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: go-openapi/validate + +PackageName: go-openapi/validate +SPDXID: SPDXRef-Package144 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: go-ozzo/ozzo-validation + +PackageName: go-ozzo/ozzo-validation +SPDXID: SPDXRef-Package145 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: go-yaml/yaml + +PackageName: go-yaml/yaml +SPDXID: SPDXRef-Package146 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: gobuffalo/envy + +PackageName: gobuffalo/envy +SPDXID: SPDXRef-Package147 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: godbus/dbus + +PackageName: godbus/dbus +SPDXID: SPDXRef-Package148 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: gogo/protobuf + +PackageName: gogo/protobuf +SPDXID: SPDXRef-Package149 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-2-Clause AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: golang/dep + +PackageName: golang/dep +SPDXID: SPDXRef-Package150 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: golang/glog + +PackageName: golang/glog +SPDXID: SPDXRef-Package151 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: golang/groupcache + +PackageName: golang/groupcache +SPDXID: SPDXRef-Package152 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: golang/lint + +PackageName: golang/lint +SPDXID: SPDXRef-Package153 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: golang/mock + +PackageName: golang/mock +SPDXID: SPDXRef-Package154 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: golang/protobuf + +PackageName: golang/protobuf +SPDXID: SPDXRef-Package155 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: golang/snappy + +PackageName: golang/snappy +SPDXID: SPDXRef-Package156 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: google/btree + +PackageName: google/btree +SPDXID: SPDXRef-Package157 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: google/cadvisor + +PackageName: google/cadvisor +SPDXID: SPDXRef-Package158 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: google/certificate-transparency-go + +PackageName: google/certificate-transparency-go +SPDXID: SPDXRef-Package159 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: google/go-containerregistry + +PackageName: google/go-containerregistry +SPDXID: SPDXRef-Package160 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: google/go-querystring + +PackageName: google/go-querystring +SPDXID: SPDXRef-Package161 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: google/go-tpm + +PackageName: google/go-tpm +SPDXID: SPDXRef-Package162 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: google/gofuzz + +PackageName: google/gofuzz +SPDXID: SPDXRef-Package163 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: google/uuid + +PackageName: google/uuid +SPDXID: SPDXRef-Package164 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: googleapis/gax-go + +PackageName: googleapis/gax-go +SPDXID: SPDXRef-Package165 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: googleapis/gnostic + +PackageName: googleapis/gnostic +SPDXID: SPDXRef-Package166 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: GoogleCloudPlatform/gke-managed-certs + +PackageName: GoogleCloudPlatform/gke-managed-certs +SPDXID: SPDXRef-Package167 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: gophercloud/gophercloud + +PackageName: gophercloud/gophercloud +SPDXID: SPDXRef-Package168 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: gorilla/context + +PackageName: gorilla/context +SPDXID: SPDXRef-Package169 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: gorilla/mux + +PackageName: gorilla/mux +SPDXID: SPDXRef-Package170 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: gorilla/securecookie + +PackageName: gorilla/securecookie +SPDXID: SPDXRef-Package171 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: gorilla/sessions + +PackageName: gorilla/sessions +SPDXID: SPDXRef-Package172 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: gorilla/websocket + +PackageName: gorilla/websocket +SPDXID: SPDXRef-Package173 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-2-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: gregjones/httpcache + +PackageName: gregjones/httpcache +SPDXID: SPDXRef-Package174 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: grpc-ecosystem/go-grpc-middleware + +PackageName: grpc-ecosystem/go-grpc-middleware +SPDXID: SPDXRef-Package175 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: grpc-ecosystem/go-grpc-prometheus + +PackageName: grpc-ecosystem/go-grpc-prometheus +SPDXID: SPDXRef-Package176 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: grpc-ecosystem/grpc-gateway + +PackageName: grpc-ecosystem/grpc-gateway +SPDXID: SPDXRef-Package177 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: hawkular/hawkular-client-go + +PackageName: hawkular/hawkular-client-go +SPDXID: SPDXRef-Package178 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: heketi/heketi REST API + +PackageName: heketi/heketi REST API +SPDXID: SPDXRef-Package179 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (Apache-2.0 OR LGPL-3.0-or-later) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: hpcloud/tail + +PackageName: hpcloud/tail +SPDXID: SPDXRef-Package180 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: huandu/xstrings + +PackageName: huandu/xstrings +SPDXID: SPDXRef-Package181 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: imdario/mergo + +PackageName: imdario/mergo +SPDXID: SPDXRef-Package182 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: inconshreveable/mousetrap + +PackageName: inconshreveable/mousetrap +SPDXID: SPDXRef-Package183 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: influxdata/influxdb + +PackageName: influxdata/influxdb +SPDXID: SPDXRef-Package184 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: jimmidyson/go-download + +PackageName: jimmidyson/go-download +SPDXID: SPDXRef-Package185 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: jinzhu/gorm + +PackageName: jinzhu/gorm +SPDXID: SPDXRef-Package186 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: jinzhu/inflection + +PackageName: jinzhu/inflection +SPDXID: SPDXRef-Package187 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: jmespath/go-jmespath + +PackageName: jmespath/go-jmespath +SPDXID: SPDXRef-Package188 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: jmhodges/clock + +PackageName: jmhodges/clock +SPDXID: SPDXRef-Package189 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: jmoiron/sqlx + +PackageName: jmoiron/sqlx +SPDXID: SPDXRef-Package190 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: joho/godotenv + +PackageName: joho/godotenv +SPDXID: SPDXRef-Package191 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: jonboulle/clockwork + +PackageName: jonboulle/clockwork +SPDXID: SPDXRef-Package192 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: jpillora/backoff + +PackageName: jpillora/backoff +SPDXID: SPDXRef-Package193 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: json-iterator/go + +PackageName: json-iterator/go +SPDXID: SPDXRef-Package194 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: kardianos/osext + +PackageName: kardianos/osext +SPDXID: SPDXRef-Package195 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: karrick/godirwalk + +PackageName: karrick/godirwalk +SPDXID: SPDXRef-Package196 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: kevinburke/ssh_config + +PackageName: kevinburke/ssh_config +SPDXID: SPDXRef-Package197 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: kisielk/sqlstruct + +PackageName: kisielk/sqlstruct +SPDXID: SPDXRef-Package198 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: knative/build + +PackageName: knative/build +SPDXID: SPDXRef-Package199 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: kr/fs + +PackageName: kr/fs +SPDXID: SPDXRef-Package200 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: kr/pretty + +PackageName: kr/pretty +SPDXID: SPDXRef-Package201 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: kr/pty + +PackageName: kr/pty +SPDXID: SPDXRef-Package202 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: kr/text + +PackageName: kr/text +SPDXID: SPDXRef-Package203 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: kubernetes-incubator/apiserver-builder + +PackageName: kubernetes-incubator/apiserver-builder +SPDXID: SPDXRef-Package204 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: kubernetes-incubator/reference-docs + +PackageName: kubernetes-incubator/reference-docs +SPDXID: SPDXRef-Package205 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: kubernetes-sigs/application + +PackageName: kubernetes-sigs/application +SPDXID: SPDXRef-Package206 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: kubernetes/repo-infra + +PackageName: kubernetes/repo-infra +SPDXID: SPDXRef-Package207 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: kylelemons/godebug + +PackageName: kylelemons/godebug +SPDXID: SPDXRef-Package208 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: lib/pq + +PackageName: lib/pq +SPDXID: SPDXRef-Package209 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: libopenstorage/openstorage + +PackageName: libopenstorage/openstorage +SPDXID: SPDXRef-Package210 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: libvirt/libvirt-go + +PackageName: libvirt/libvirt-go +SPDXID: SPDXRef-Package211 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: libvirt/libvirt-go-xml + +PackageName: libvirt/libvirt-go-xml +SPDXID: SPDXRef-Package212 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: lpabon/godbc + +PackageName: lpabon/godbc +SPDXID: SPDXRef-Package213 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: lxn/win + +PackageName: lxn/win +SPDXID: SPDXRef-Package214 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: magiconair/properties + +PackageName: magiconair/properties +SPDXID: SPDXRef-Package215 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-2-Clause AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: mailru/easyjson + +PackageName: mailru/easyjson +SPDXID: SPDXRef-Package216 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: MakeNowJust/heredoc + +PackageName: MakeNowJust/heredoc +SPDXID: SPDXRef-Package217 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: markbates/inflect + +PackageName: markbates/inflect +SPDXID: SPDXRef-Package218 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: marpaia/graphite-golang + +PackageName: marpaia/graphite-golang +SPDXID: SPDXRef-Package219 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: Masterminds/semver + +PackageName: Masterminds/semver +SPDXID: SPDXRef-Package220 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: Masterminds/sprig + +PackageName: Masterminds/sprig +SPDXID: SPDXRef-Package221 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: Masterminds/vcs + +PackageName: Masterminds/vcs +SPDXID: SPDXRef-Package222 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: mattn/go-runewidth + +PackageName: mattn/go-runewidth +SPDXID: SPDXRef-Package223 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: mattn/go-shellwords + +PackageName: mattn/go-shellwords +SPDXID: SPDXRef-Package224 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: mattn/go-zglob + +PackageName: mattn/go-zglob +SPDXID: SPDXRef-Package225 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: matttproud/golang_protobuf_extensions + +PackageName: matttproud/golang_protobuf_extensions +SPDXID: SPDXRef-Package226 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: mesos/mesos-go + +PackageName: mesos/mesos-go +SPDXID: SPDXRef-Package227 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: mholt/caddy + +PackageName: mholt/caddy +SPDXID: SPDXRef-Package228 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: Microsoft/go-winio + +PackageName: Microsoft/go-winio +SPDXID: SPDXRef-Package229 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: Microsoft/hcsshim + +PackageName: Microsoft/hcsshim +SPDXID: SPDXRef-Package230 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: miekg/coredns + +PackageName: miekg/coredns +SPDXID: SPDXRef-Package231 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: miekg/dns + +PackageName: miekg/dns +SPDXID: SPDXRef-Package232 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: mindprince/gonvml + +PackageName: mindprince/gonvml +SPDXID: SPDXRef-Package233 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: mistifyio/go-zfs + +PackageName: mistifyio/go-zfs +SPDXID: SPDXRef-Package234 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: mitchellh/go-homedir + +PackageName: mitchellh/go-homedir +SPDXID: SPDXRef-Package235 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: mitchellh/go-ps + +PackageName: mitchellh/go-ps +SPDXID: SPDXRef-Package236 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: mitchellh/go-wordwrap + +PackageName: mitchellh/go-wordwrap +SPDXID: SPDXRef-Package237 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: mitchellh/hashstructure + +PackageName: mitchellh/hashstructure +SPDXID: SPDXRef-Package238 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: mitchellh/mapstructure + +PackageName: mitchellh/mapstructure +SPDXID: SPDXRef-Package239 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: moby/hyperkit + +PackageName: moby/hyperkit +SPDXID: SPDXRef-Package240 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: modern-go/concurrent + +PackageName: modern-go/concurrent +SPDXID: SPDXRef-Package241 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: modern-go/reflect2 + +PackageName: modern-go/reflect2 +SPDXID: SPDXRef-Package242 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: mohae/deepcopy + +PackageName: mohae/deepcopy +SPDXID: SPDXRef-Package243 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: moul/http2curl + +PackageName: moul/http2curl +SPDXID: SPDXRef-Package244 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: mrunalp/fileutils + +PackageName: mrunalp/fileutils +SPDXID: SPDXRef-Package245 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: mvdan/xurls + +PackageName: mvdan/xurls +SPDXID: SPDXRef-Package246 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: mxk/go-flowrate + +PackageName: mxk/go-flowrate +SPDXID: SPDXRef-Package247 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: ncabatoff/process-exporter + +PackageName: ncabatoff/process-exporter +SPDXID: SPDXRef-Package248 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: nightlyone/lockfile + +PackageName: nightlyone/lockfile +SPDXID: SPDXRef-Package249 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: novln/docker-parser + +PackageName: novln/docker-parser +SPDXID: SPDXRef-Package250 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: NYTimes/gziphandler + +PackageName: NYTimes/gziphandler +SPDXID: SPDXRef-Package251 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: olekukonko/tablewriter + +PackageName: olekukonko/tablewriter +SPDXID: SPDXRef-Package252 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: onsi/ginkgo + +PackageName: onsi/ginkgo +SPDXID: SPDXRef-Package253 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: onsi/gomega + +PackageName: onsi/gomega +SPDXID: SPDXRef-Package254 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: opencontainers/image-spec + +PackageName: opencontainers/image-spec +SPDXID: SPDXRef-Package255 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: opencontainers/runtime-spec + +PackageName: opencontainers/runtime-spec +SPDXID: SPDXRef-Package256 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: opencontainers/selinux + +PackageName: opencontainers/selinux +SPDXID: SPDXRef-Package257 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: openshift/origin + +PackageName: openshift/origin +SPDXID: SPDXRef-Package258 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: opentracing/opentracing-go + +PackageName: opentracing/opentracing-go +SPDXID: SPDXRef-Package259 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: parnurzeal/gorequest + +PackageName: parnurzeal/gorequest +SPDXID: SPDXRef-Package260 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: patrickmn/go-cache + +PackageName: patrickmn/go-cache +SPDXID: SPDXRef-Package261 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: paultag/sniff + +PackageName: paultag/sniff +SPDXID: SPDXRef-Package262 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: pborman/uuid + +PackageName: pborman/uuid +SPDXID: SPDXRef-Package263 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: pelletier/go-buffruneio + +PackageName: pelletier/go-buffruneio +SPDXID: SPDXRef-Package264 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: pelletier/go-toml + +PackageName: pelletier/go-toml +SPDXID: SPDXRef-Package265 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: petar/GoLLRB + +PackageName: petar/GoLLRB +SPDXID: SPDXRef-Package266 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: peterbourgon/diskv + +PackageName: peterbourgon/diskv +SPDXID: SPDXRef-Package267 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: pierrec/lz4 + +PackageName: pierrec/lz4 +SPDXID: SPDXRef-Package268 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: pierrec/xxHash + +PackageName: pierrec/xxHash +SPDXID: SPDXRef-Package269 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: pkg/browser + +PackageName: pkg/browser +SPDXID: SPDXRef-Package270 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: pkg/errors + +PackageName: pkg/errors +SPDXID: SPDXRef-Package271 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: pkg/profile + +PackageName: pkg/profile +SPDXID: SPDXRef-Package272 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: pkg/sftp + +PackageName: pkg/sftp +SPDXID: SPDXRef-Package273 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: pmezard/go-difflib + +PackageName: pmezard/go-difflib +SPDXID: SPDXRef-Package274 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: pquerna/cachecontrol + +PackageName: pquerna/cachecontrol +SPDXID: SPDXRef-Package275 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: pquerna/ffjson + +PackageName: pquerna/ffjson +SPDXID: SPDXRef-Package276 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0 AND ISC) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: prometheus/client_golang + +PackageName: prometheus/client_golang +SPDXID: SPDXRef-Package277 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: prometheus/client_model + +PackageName: prometheus/client_model +SPDXID: SPDXRef-Package278 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: prometheus/common + +PackageName: prometheus/common +SPDXID: SPDXRef-Package279 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: prometheus/procfs + +PackageName: prometheus/procfs +SPDXID: SPDXRef-Package280 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: PuerkitoBio/purell + +PackageName: PuerkitoBio/purell +SPDXID: SPDXRef-Package281 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: PuerkitoBio/urlesc + +PackageName: PuerkitoBio/urlesc +SPDXID: SPDXRef-Package282 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: r2d4/external-storage + +PackageName: r2d4/external-storage +SPDXID: SPDXRef-Package283 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: rackspace/gophercloud + +PackageName: rackspace/gophercloud +SPDXID: SPDXRef-Package284 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: rancher/go-rancher + +PackageName: rancher/go-rancher +SPDXID: SPDXRef-Package285 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: rcrowley/go-metrics + +PackageName: rcrowley/go-metrics +SPDXID: SPDXRef-Package286 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause-FreeBSD +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: renstrom/dedent + +PackageName: renstrom/dedent +SPDXID: SPDXRef-Package287 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: Rican7/retry + +PackageName: Rican7/retry +SPDXID: SPDXRef-Package288 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: riemann/riemann-go-client + +PackageName: riemann/riemann-go-client +SPDXID: SPDXRef-Package289 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: robfig/cron + +PackageName: robfig/cron +SPDXID: SPDXRef-Package290 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: russross/blackfriday + +PackageName: russross/blackfriday +SPDXID: SPDXRef-Package291 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: samalba/dockerclient + +PackageName: samalba/dockerclient +SPDXID: SPDXRef-Package292 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: satori/go.uuid + +PackageName: satori/go.uuid +SPDXID: SPDXRef-Package293 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: scalingdata/gcfg + +PackageName: scalingdata/gcfg +SPDXID: SPDXRef-Package294 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-2-Clause AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: sdboyer/constext + +PackageName: sdboyer/constext +SPDXID: SPDXRef-Package295 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: seccomp/libseccomp-golang + +PackageName: seccomp/libseccomp-golang +SPDXID: SPDXRef-Package296 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: sergi/go-diff + +PackageName: sergi/go-diff +SPDXID: SPDXRef-Package297 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: Shopify/sarama + +PackageName: Shopify/sarama +SPDXID: SPDXRef-Package298 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: shurcooL/githubv4 + +PackageName: shurcooL/githubv4 +SPDXID: SPDXRef-Package299 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: shurcooL/go + +PackageName: shurcooL/go +SPDXID: SPDXRef-Package300 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: shurcooL/graphql + +PackageName: shurcooL/graphql +SPDXID: SPDXRef-Package301 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: shurcooL/sanitized_anchor_name + +PackageName: shurcooL/sanitized_anchor_name +SPDXID: SPDXRef-Package302 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: sirupsen/logrus + +PackageName: sirupsen/logrus +SPDXID: SPDXRef-Package303 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-2-Clause AND BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: skynetservices/skydns + +PackageName: skynetservices/skydns +SPDXID: SPDXRef-Package304 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: smartystreets/go-aws-auth + +PackageName: smartystreets/go-aws-auth +SPDXID: SPDXRef-Package305 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: soheilhy/cmux + +PackageName: soheilhy/cmux +SPDXID: SPDXRef-Package306 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: spf13/afero + +PackageName: spf13/afero +SPDXID: SPDXRef-Package307 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: spf13/cast + +PackageName: spf13/cast +SPDXID: SPDXRef-Package308 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: spf13/cobra + +PackageName: spf13/cobra +SPDXID: SPDXRef-Package309 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: spf13/jwalterweatherman + +PackageName: spf13/jwalterweatherman +SPDXID: SPDXRef-Package310 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: spf13/pflag + +PackageName: spf13/pflag +SPDXID: SPDXRef-Package311 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: spf13/viper + +PackageName: spf13/viper +SPDXID: SPDXRef-Package312 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: storageos/go-api + +PackageName: storageos/go-api +SPDXID: SPDXRef-Package313 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-2-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: streadway/quantile + +PackageName: streadway/quantile +SPDXID: SPDXRef-Package314 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: stretchr/objx + +PackageName: stretchr/objx +SPDXID: SPDXRef-Package315 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: stretchr/testify + +PackageName: stretchr/testify +SPDXID: SPDXRef-Package316 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: syndtr/gocapability + +PackageName: syndtr/gocapability +SPDXID: SPDXRef-Package317 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: tchap/go-patricia + +PackageName: tchap/go-patricia +SPDXID: SPDXRef-Package318 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: thockin/glogr + +PackageName: thockin/glogr +SPDXID: SPDXRef-Package319 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: thockin/logr + +PackageName: thockin/logr +SPDXID: SPDXRef-Package320 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: tmc/grpc-websocket-proxy + +PackageName: tmc/grpc-websocket-proxy +SPDXID: SPDXRef-Package321 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: tsenart/vegeta + +PackageName: tsenart/vegeta +SPDXID: SPDXRef-Package322 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: ugorji/go + +PackageName: ugorji/go +SPDXID: SPDXRef-Package323 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: Unknwon/goconfig + +PackageName: Unknwon/goconfig +SPDXID: SPDXRef-Package324 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: urfave/cli + +PackageName: urfave/cli +SPDXID: SPDXRef-Package325 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: vishvananda/netlink + +PackageName: vishvananda/netlink +SPDXID: SPDXRef-Package326 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: vishvananda/netns + +PackageName: vishvananda/netns +SPDXID: SPDXRef-Package327 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: vmware/govmomi + +PackageName: vmware/govmomi +SPDXID: SPDXRef-Package328 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: vmware/photon-controller-go-sdk + +PackageName: vmware/photon-controller-go-sdk +SPDXID: SPDXRef-Package329 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: weaveworks/mesh + +PackageName: weaveworks/mesh +SPDXID: SPDXRef-Package330 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: xanzy/go-cloudstack + +PackageName: xanzy/go-cloudstack +SPDXID: SPDXRef-Package331 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: xeipuuv/gojsonpointer + +PackageName: xeipuuv/gojsonpointer +SPDXID: SPDXRef-Package332 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: xeipuuv/gojsonreference + +PackageName: xeipuuv/gojsonreference +SPDXID: SPDXRef-Package333 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: xeipuuv/gojsonschema + +PackageName: xeipuuv/gojsonschema +SPDXID: SPDXRef-Package334 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: xiang90/probing + +PackageName: xiang90/probing +SPDXID: SPDXRef-Package335 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: zakjan/cert-chain-resolver + +PackageName: zakjan/cert-chain-resolver +SPDXID: SPDXRef-Package336 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: ziutek/syslog + +PackageName: ziutek/syslog +SPDXID: SPDXRef-Package337 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: go.opencensus.io + +PackageName: go.opencensus.io +SPDXID: SPDXRef-Package338 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: go.uber.org/atomic + +PackageName: go.uber.org/atomic +SPDXID: SPDXRef-Package339 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: go.uber.org/multierr + +PackageName: go.uber.org/multierr +SPDXID: SPDXRef-Package340 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: go.uber.org/zap + +PackageName: go.uber.org/zap +SPDXID: SPDXRef-Package341 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: go4.org/errorutil + +PackageName: go4.org/errorutil +SPDXID: SPDXRef-Package342 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: x/build + +PackageName: x/build +SPDXID: SPDXRef-Package343 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: x/exp + +PackageName: x/exp +SPDXID: SPDXRef-Package344 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: x/lint + +PackageName: x/lint +SPDXID: SPDXRef-Package345 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: x/oauth2 + +PackageName: x/oauth2 +SPDXID: SPDXRef-Package346 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: x/sync + +PackageName: x/sync +SPDXID: SPDXRef-Package347 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: x/sys + +PackageName: x/sys +SPDXID: SPDXRef-Package348 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-2-Clause AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: x/text + +PackageName: x/text +SPDXID: SPDXRef-Package349 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: x/time + +PackageName: x/time +SPDXID: SPDXRef-Package350 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: x/tools + +PackageName: x/tools +SPDXID: SPDXRef-Package351 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause AND Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: golang/archive/tar + +PackageName: golang/archive/tar +SPDXID: SPDXRef-Package352 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: gonum.org/v1/gonum + +PackageName: gonum.org/v1/gonum +SPDXID: SPDXRef-Package353 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: ((BSD-3-Clause OR CC0-1.0) AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: google.golang.org/cloud + +PackageName: google.golang.org/cloud +SPDXID: SPDXRef-Package354 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: google.golang.org/genproto + +PackageName: google.golang.org/genproto +SPDXID: SPDXRef-Package355 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: gopkg.in/check.v1 + +PackageName: gopkg.in/check.v1 +SPDXID: SPDXRef-Package356 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-2-Clause AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: gopkg.in/cheggaaa/pb.v1 + +PackageName: gopkg.in/cheggaaa/pb.v1 +SPDXID: SPDXRef-Package357 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: gopkg.in/fsnotify + +PackageName: gopkg.in/fsnotify +SPDXID: SPDXRef-Package358 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: gopkg.in/gcfg.v1 + +PackageName: gopkg.in/gcfg.v1 +SPDXID: SPDXRef-Package359 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: gopkg.in/go-playground/pool.v3 + +PackageName: gopkg.in/go-playground/pool.v3 +SPDXID: SPDXRef-Package360 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: gopkg.in/igm/sockjs-go.v2 + +PackageName: gopkg.in/igm/sockjs-go.v2 +SPDXID: SPDXRef-Package361 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: gopkg.in/inf.v0 + +PackageName: gopkg.in/inf.v0 +SPDXID: SPDXRef-Package362 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: gopkg.in/natefinch/lumberjack.v2 + +PackageName: gopkg.in/natefinch/lumberjack.v2 +SPDXID: SPDXRef-Package363 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: gopkg.in/olivere/elastic.v3 + +PackageName: gopkg.in/olivere/elastic.v3 +SPDXID: SPDXRef-Package364 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: gopkg.in/olivere/elastic.v5 + +PackageName: gopkg.in/olivere/elastic.v5 +SPDXID: SPDXRef-Package365 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: gopkg.in/robfig/cron.v2 + +PackageName: gopkg.in/robfig/cron.v2 +SPDXID: SPDXRef-Package366 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: gopkg.in/square/go-jose.v2 + +PackageName: gopkg.in/square/go-jose.v2 +SPDXID: SPDXRef-Package367 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: gopkg.in/src-d + +PackageName: gopkg.in/src-d +SPDXID: SPDXRef-Package368 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: Apache-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Apache-2.0, no approval needed + +##### Package: gopkg.in/tomb.v1 + +PackageName: gopkg.in/tomb.v1 +SPDXID: SPDXRef-Package369 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: jquery.scrollto + +PackageName: jquery.scrollto +SPDXID: SPDXRef-Package370 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: marked + +PackageName: marked +SPDXID: SPDXRef-Package371 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: mime + +PackageName: mime +SPDXID: SPDXRef-Package372 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: minimist + +PackageName: minimist +SPDXID: SPDXRef-Package373 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: node-static + +PackageName: node-static +SPDXID: SPDXRef-Package374 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: optimist + +PackageName: optimist +SPDXID: SPDXRef-Package375 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: ui-router for Angular + +PackageName: ui-router for Angular +SPDXID: SPDXRef-Package376 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: vbom.ml/util + +PackageName: vbom.ml/util +SPDXID: SPDXRef-Package377 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: wordwrap + +PackageName: wordwrap +SPDXID: SPDXRef-Package378 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: allowlisted + +##### Package: VirtualBox Linux Guest Drivers Makefile + +PackageName: VirtualBox Linux Guest Drivers Makefile +SPDXID: SPDXRef-Package379 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: GPL-2.0-only +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-05-20 + +##### Package: Angular + +PackageName: Angular +SPDXID: SPDXRef-Package380 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: Asciidoctor + +PackageName: Asciidoctor +SPDXID: SPDXRef-Package381 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: Azure acr-docker-credential-helper + +PackageName: Azure acr-docker-credential-helper +SPDXID: SPDXRef-Package382 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: Backbone + +PackageName: Backbone +SPDXID: SPDXRef-Package383 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: bitbucket.org/bertimus9/systemstat + +PackageName: bitbucket.org/bertimus9/systemstat +SPDXID: SPDXRef-Package384 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: bitbucket.org/ww/goautoneg + +PackageName: bitbucket.org/ww/goautoneg +SPDXID: SPDXRef-Package385 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: bootstrap + +PackageName: bootstrap +SPDXID: SPDXRef-Package386 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (CC-BY-3.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: dialog-polyfill.css + +PackageName: dialog-polyfill.css +SPDXID: SPDXRef-Package387 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: font-awesome + +PackageName: font-awesome +SPDXID: SPDXRef-Package388 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (CC-BY-3.0 AND MIT AND OFL-1.1) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: Gingko + +PackageName: Gingko +SPDXID: SPDXRef-Package389 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: Azure/azure-pipeline-go + +PackageName: Azure/azure-pipeline-go +SPDXID: SPDXRef-Package390 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: bungle/lua-resty-template + +PackageName: bungle/lua-resty-template +SPDXID: SPDXRef-Package391 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: c4milo/gotoolkit + +PackageName: c4milo/gotoolkit +SPDXID: SPDXRef-Package392 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: client9/misspell + +PackageName: client9/misspell +SPDXID: SPDXRef-Package393 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (Unlicense AND BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: d2g/dhcp4 + +PackageName: d2g/dhcp4 +SPDXID: SPDXRef-Package394 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: d2g/dhcp4client + +PackageName: d2g/dhcp4client +SPDXID: SPDXRef-Package395 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: dgryski/go-onlinestats + +PackageName: dgryski/go-onlinestats +SPDXID: SPDXRef-Package396 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (MIT AND LicenseRef-Public-domain-statement) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: docker/go-units + +PackageName: docker/go-units +SPDXID: SPDXRef-Package397 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (CC-BY-SA-4.0 AND CC-BY-4.0 AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: docker/spdystream + +PackageName: docker/spdystream +SPDXID: SPDXRef-Package398 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (CC-BY-SA-4.0 AND CC-BY-4.0 AND BSD-3-Clause AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: go-sql-driver/mysql + +PackageName: go-sql-driver/mysql +SPDXID: SPDXRef-Package399 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: gonum/graph + +PackageName: gonum/graph +SPDXID: SPDXRef-Package400 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: google/go-github + +PackageName: google/go-github +SPDXID: SPDXRef-Package401 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND CC-BY-3.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: grpc-ecosystem/grpc-opentracing + +PackageName: grpc-ecosystem/grpc-opentracing +SPDXID: SPDXRef-Package402 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND LicenseRef-Google-Patents-Notice-GRPC) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: hashicorp/errwrap + +PackageName: hashicorp/errwrap +SPDXID: SPDXRef-Package403 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: hashicorp/go-cleanhttp + +PackageName: hashicorp/go-cleanhttp +SPDXID: SPDXRef-Package404 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: hashicorp/go-multierror + +PackageName: hashicorp/go-multierror +SPDXID: SPDXRef-Package405 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: hashicorp/golang-lru + +PackageName: hashicorp/golang-lru +SPDXID: SPDXRef-Package406 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: hashicorp/hcl + +PackageName: hashicorp/hcl +SPDXID: SPDXRef-Package407 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: hooklift/iso9660 + +PackageName: hooklift/iso9660 +SPDXID: SPDXRef-Package408 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: howeyc/gopass + +PackageName: howeyc/gopass +SPDXID: SPDXRef-Package409 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (ISC AND CDDL-1.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: jbenet/go-context + +PackageName: jbenet/go-context +SPDXID: SPDXRef-Package410 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: JeffAshton/win_pdh + +PackageName: JeffAshton/win_pdh +SPDXID: SPDXRef-Package411 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: jmank88/nuts + +PackageName: jmank88/nuts +SPDXID: SPDXRef-Package412 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: johanneswuerbach/nfsexports + +PackageName: johanneswuerbach/nfsexports +SPDXID: SPDXRef-Package413 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: joshdk/go-junit + +PackageName: joshdk/go-junit +SPDXID: SPDXRef-Package414 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: jteeuwen/go-bindata + +PackageName: jteeuwen/go-bindata +SPDXID: SPDXRef-Package415 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: CC0-1.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: konsorten/go-windows-terminal-sequences + +PackageName: konsorten/go-windows-terminal-sequences +SPDXID: SPDXRef-Package416 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: marstr/guid + +PackageName: marstr/guid +SPDXID: SPDXRef-Package417 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: mattn/go-sqlite3 + +PackageName: mattn/go-sqlite3 +SPDXID: SPDXRef-Package418 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (MIT AND LicenseRef-Public-domain-statement) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: multiarch/qemu-user-static + +PackageName: multiarch/qemu-user-static +SPDXID: SPDXRef-Package419 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: Nvveen/Gotty + +PackageName: Nvveen/Gotty +SPDXID: SPDXRef-Package420 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause-FreeBSD +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: opencontainers/go-digest + +PackageName: opencontainers/go-digest +SPDXID: SPDXRef-Package421 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (CC-BY-SA-4.0 AND CC-BY-4.0 AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: opencontainers/runc + +PackageName: opencontainers/runc +SPDXID: SPDXRef-Package422 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-CC-unspecified AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: quobyte/api + +PackageName: quobyte/api +SPDXID: SPDXRef-Package423 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: rubiojr/go-vhd + +PackageName: rubiojr/go-vhd +SPDXID: SPDXRef-Package424 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: sigma/go-inotify + +PackageName: sigma/go-inotify +SPDXID: SPDXRef-Package425 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: spotinst/spotinst-sdk-go + +PackageName: spotinst/spotinst-sdk-go +SPDXID: SPDXRef-Package426 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: src-d/gcfg + +PackageName: src-d/gcfg +SPDXID: SPDXRef-Package427 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: tent/http-link-go + +PackageName: tent/http-link-go +SPDXID: SPDXRef-Package428 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: xanzy/ssh-agent + +PackageName: xanzy/ssh-agent +SPDXID: SPDXRef-Package429 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: zchee/go-vmnet + +PackageName: zchee/go-vmnet +SPDXID: SPDXRef-Package430 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-2-Clause AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: go-srcimporter + +PackageName: go-srcimporter +SPDXID: SPDXRef-Package431 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: go9p + +PackageName: go9p +SPDXID: SPDXRef-Package432 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: godep + +PackageName: godep +SPDXID: SPDXRef-Package433 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: x/crypto + +PackageName: x/crypto +SPDXID: SPDXRef-Package434 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause AND MIT AND LicenseRef-Public-domain-statement) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: x/net + +PackageName: x/net +SPDXID: SPDXRef-Package435 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-2-Clause AND BSD-3-Clause AND CC-BY-3.0 AND (BSD-3-Clause OR LicenseRef-W3C-Test-Suite-License-1)) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: golang/expansion + +PackageName: golang/expansion +SPDXID: SPDXRef-Package436 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: golang/go/types + +PackageName: golang/go/types +SPDXID: SPDXRef-Package437 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: golang/internal/srcimporter + +PackageName: golang/internal/srcimporter +SPDXID: SPDXRef-Package438 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: golang/json + +PackageName: golang/json +SPDXID: SPDXRef-Package439 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: golang/netutil + +PackageName: golang/netutil +SPDXID: SPDXRef-Package440 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: golang/reflect + +PackageName: golang/reflect +SPDXID: SPDXRef-Package441 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: golang/template + +PackageName: golang/template +SPDXID: SPDXRef-Package442 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: Google Protocol Buffers + +PackageName: Google Protocol Buffers +SPDXID: SPDXRef-Package443 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: google.golang.org/api + +PackageName: google.golang.org/api +SPDXID: SPDXRef-Package444 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0 AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11 + +##### Package: google.golang.org/appengine + +PackageName: google.golang.org/appengine +SPDXID: SPDXRef-Package445 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11 + +##### Package: google.golang.org/grpc + +PackageName: google.golang.org/grpc +SPDXID: SPDXRef-Package446 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0 AND LicenseRef-Google-Patents-Notice-GRPC) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: gopkg.in/warnings.v0 + +PackageName: gopkg.in/warnings.v0 +SPDXID: SPDXRef-Package447 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-2-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 + +##### Package: Handlebars + +PackageName: Handlebars +SPDXID: SPDXRef-Package448 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: Highlight + +PackageName: Highlight +SPDXID: SPDXRef-Package449 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: highlight.js + +PackageName: highlight.js +SPDXID: SPDXRef-Package450 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND MIT AND CC0-1.0 AND LicenseRef-Public-domain-statement) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 + +##### Package: htpasswd + +PackageName: htpasswd +SPDXID: SPDXRef-Package451 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11 + +##### Package: jQuery + +PackageName: jQuery +SPDXID: SPDXRef-Package452 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: jQuery BBQ + +PackageName: jQuery BBQ +SPDXID: SPDXRef-Package453 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (MIT OR GPL-2.0+) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: jQuery hashchange event + +PackageName: jQuery hashchange event +SPDXID: SPDXRef-Package454 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (GPL-2.0+ OR MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: jQuery Slideto + +PackageName: jQuery Slideto +SPDXID: SPDXRef-Package455 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: jQuery Wiggle + +PackageName: jQuery Wiggle +SPDXID: SPDXRef-Package456 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: moment.js + +PackageName: moment.js +SPDXID: SPDXRef-Package457 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: normalize.css + +PackageName: normalize.css +SPDXID: SPDXRef-Package458 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: Octicons + +PackageName: Octicons +SPDXID: SPDXRef-Package459 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: parseUri + +PackageName: parseUri +SPDXID: SPDXRef-Package460 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: Pause + +PackageName: Pause +SPDXID: SPDXRef-Package461 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11 + +##### Package: Pure CSS + +PackageName: Pure CSS +SPDXID: SPDXRef-Package462 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: shred + +PackageName: shred +SPDXID: SPDXRef-Package463 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: ISC +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: sigs.k8s.io/yaml + +PackageName: sigs.k8s.io/yaml +SPDXID: SPDXRef-Package464 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-3-Clause AND MIT) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: fork of github.com/ghodss/yaml; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 + +##### Package: speter.net/go/exp + +PackageName: speter.net/go/exp +SPDXID: SPDXRef-Package465 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: (BSD-2-Clause AND BSD-3-Clause) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11 + +##### Package: sprintf() for JavaScript + +PackageName: sprintf() for JavaScript +SPDXID: SPDXRef-Package466 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 + +##### Package: Underscore.js + +PackageName: Underscore.js +SPDXID: SPDXRef-Package467 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 diff --git a/license-exceptions/scripts/generate-all.js b/license-exceptions/scripts/generate-all.js new file mode 100644 index 00000000..7c7dfdca --- /dev/null +++ b/license-exceptions/scripts/generate-all.js @@ -0,0 +1,10 @@ +#!/usr/bin/env node + +/** + * Generate all output formats from exceptions.json + */ + +require('./generate-csv.js'); +require('./generate-spdx.js'); + +console.log('\nAll formats generated successfully!'); diff --git a/license-exceptions/scripts/generate-csv.js b/license-exceptions/scripts/generate-csv.js new file mode 100644 index 00000000..beaa8c95 --- /dev/null +++ b/license-exceptions/scripts/generate-csv.js @@ -0,0 +1,76 @@ +#!/usr/bin/env node + +/** + * Generate CSV format from exceptions.json + * Output: CNCF-licensing-exceptions.csv + */ + +const fs = require('fs'); +const path = require('path'); + +const EXCEPTIONS_FILE = path.join(__dirname, '..', 'exceptions.json'); +const OUTPUT_FILE = path.join(__dirname, '..', 'CNCF-licensing-exceptions.csv'); + +/** + * Escape a field for CSV format + * - Wrap in quotes if contains comma, quote, or newline + * - Double any existing quotes + */ +function escapeCSVField(field) { + if (field === null || field === undefined) { + return ''; + } + const str = String(field); + // Check if field needs quoting + if (str.includes(',') || str.includes('"') || str.includes('\n') || str.includes('\r')) { + // Escape quotes by doubling them + return '"' + str.replace(/"/g, '""') + '"'; + } + return str; +} + +/** + * Format a date for CSV (keeping YYYY-MM-DD format) + */ +function formatDate(dateStr) { + return dateStr || ''; +} + +function main() { + // Read exceptions.json + const data = JSON.parse(fs.readFileSync(EXCEPTIONS_FILE, 'utf8')); + const { lastUpdated, exceptions } = data; + + // Build CSV content + const lines = []; + + // Header row - note "Last updated" column includes the date in the header + const header = [ + 'Package Name', + 'License Concluded', + 'Comments', + 'Date Published', + `Last updated: ${lastUpdated}` + ]; + lines.push(header.map(escapeCSVField).join(',')); + + // Data rows + for (const exc of exceptions) { + const row = [ + exc.package, + exc.license, + exc.comment || '', + formatDate(exc.approvedDate), + '' // Last updated column is empty for data rows + ]; + lines.push(row.map(escapeCSVField).join(',')); + } + + // Write output + fs.writeFileSync(OUTPUT_FILE, lines.join('\n') + '\n'); + console.log(`Generated ${OUTPUT_FILE}`); + console.log(` - ${exceptions.length} exceptions`); + console.log(` - Last updated: ${lastUpdated}`); +} + +main(); diff --git a/license-exceptions/scripts/generate-spdx.js b/license-exceptions/scripts/generate-spdx.js new file mode 100644 index 00000000..88b021f3 --- /dev/null +++ b/license-exceptions/scripts/generate-spdx.js @@ -0,0 +1,75 @@ +#!/usr/bin/env node + +/** + * Generate SPDX tag-value format from exceptions.json + * Output: cncf-exceptions-current.spdx + */ + +const fs = require('fs'); +const path = require('path'); + +const EXCEPTIONS_FILE = path.join(__dirname, '..', 'exceptions.json'); +const OUTPUT_FILE = path.join(__dirname, '..', 'cncf-exceptions-current.spdx'); + +/** + * Strip common prefixes from package names for SPDX format + */ +function stripPackagePrefix(packageName) { + return packageName + .replace(/^github\.com\//, '') + .replace(/^golang\.org\//, ''); +} + +/** + * Generate ISO timestamp for Created field + */ +function getISOTimestamp() { + return new Date().toISOString().replace(/\.\d{3}Z$/, 'Z'); +} + +function main() { + // Read exceptions.json + const data = JSON.parse(fs.readFileSync(EXCEPTIONS_FILE, 'utf8')); + const { lastUpdated, exceptions } = data; + + const lines = []; + + // Document header + lines.push('SPDXVersion: SPDX-2.1'); + lines.push('DataLicense: CC0-1.0'); + lines.push('SPDXID: SPDXRef-DOCUMENT'); + lines.push(`DocumentName: cncf-exceptions-${lastUpdated}`); + lines.push(`DocumentNamespace: https://github.com/cncf/foundation/license-exceptions-${lastUpdated}`); + lines.push('Creator: Organization: CNCF'); + lines.push(`Created: ${getISOTimestamp()}`); + lines.push(''); + + // Package entries + let packageNum = 1; + for (const exc of exceptions) { + const strippedName = stripPackagePrefix(exc.package); + const comment = exc.comment || `approved ${exc.approvedDate}`; + + lines.push(`##### Package: ${strippedName}`); + lines.push(''); + lines.push(`PackageName: ${strippedName}`); + lines.push(`SPDXID: SPDXRef-Package${packageNum}`); + lines.push('PackageDownloadLocation: NOASSERTION'); + lines.push('FilesAnalyzed: false'); + lines.push(`PackageLicenseConcluded: ${exc.license}`); + lines.push('PackageLicenseDeclared: NOASSERTION'); + lines.push('PackageCopyrightText: NOASSERTION'); + lines.push(`PackageComment: ${comment}`); + lines.push(''); + + packageNum++; + } + + // Write output + fs.writeFileSync(OUTPUT_FILE, lines.join('\n')); + console.log(`Generated ${OUTPUT_FILE}`); + console.log(` - ${exceptions.length} packages`); + console.log(` - Document name: cncf-exceptions-${lastUpdated}`); +} + +main(); From 9be1dede5460a1d86a0135c53710410ca8f26f80 Mon Sep 17 00:00:00 2001 From: Jeffrey Sica Date: Sun, 1 Feb 2026 21:45:51 -0600 Subject: [PATCH 04/19] feat(license): add static website for browsing exceptions - Create index.html with filters, table, and blanket exceptions display - Create styles.css with CNCF branding and responsive design - Create app.js with client-side filtering, sorting, and CSV export - Support filtering by package name, license, status, and year - Support sorting by date, package name, or license - Auto-link github.com packages to their URLs - Display blanket exceptions (eBPF/GPL) as cards Signed-off-by: Jeffrey Sica --- license-exceptions/site/app.js | 318 ++++++++++++++++++ license-exceptions/site/index.html | 118 +++++++ license-exceptions/site/styles.css | 503 +++++++++++++++++++++++++++++ 3 files changed, 939 insertions(+) create mode 100644 license-exceptions/site/app.js create mode 100644 license-exceptions/site/index.html create mode 100644 license-exceptions/site/styles.css diff --git a/license-exceptions/site/app.js b/license-exceptions/site/app.js new file mode 100644 index 00000000..18d4ee1f --- /dev/null +++ b/license-exceptions/site/app.js @@ -0,0 +1,318 @@ +/** + * CNCF License Exceptions - Client-side Application + */ + +(function () { + 'use strict'; + + // State + let data = null; + let filteredExceptions = []; + + // DOM Elements + const elements = { + search: document.getElementById('search'), + licenseFilter: document.getElementById('license-filter'), + statusFilter: document.getElementById('status-filter'), + yearFilter: document.getElementById('year-filter'), + sortBy: document.getElementById('sort-by'), + clearFilters: document.getElementById('clear-filters'), + resultsCount: document.getElementById('results-count'), + blanketCards: document.getElementById('blanket-cards'), + tableBody: document.getElementById('exceptions-tbody'), + noResults: document.getElementById('no-results'), + downloadCsv: document.getElementById('download-csv'), + dataVersion: document.getElementById('data-version'), + lastUpdated: document.getElementById('last-updated'), + }; + + // Debounce utility + function debounce(fn, delay) { + let timeoutId; + return function (...args) { + clearTimeout(timeoutId); + timeoutId = setTimeout(() => fn.apply(this, args), delay); + }; + } + + // Fetch and initialize data + async function init() { + try { + const response = await fetch('../exceptions.json'); + if (!response.ok) { + throw new Error(`HTTP error! status: ${response.status}`); + } + data = await response.json(); + + // Update metadata + elements.dataVersion.textContent = data.version || '-'; + elements.lastUpdated.textContent = data.lastUpdated || '-'; + + // Populate filters + populateFilters(); + + // Render blanket exceptions + renderBlanketExceptions(); + + // Initial render + applyFiltersAndRender(); + + // Set up event listeners + setupEventListeners(); + } catch (error) { + console.error('Failed to load data:', error); + elements.tableBody.innerHTML = ` + + + Failed to load data. Please try refreshing the page. + + + `; + elements.resultsCount.textContent = 'Error loading data'; + } + } + + // Populate filter dropdowns from data + function populateFilters() { + // Get unique licenses + const licenses = [...new Set(data.exceptions.map(e => e.license))].sort(); + licenses.forEach(license => { + const option = document.createElement('option'); + option.value = license; + option.textContent = license; + elements.licenseFilter.appendChild(option); + }); + + // Get unique years from approvedDate + const years = [...new Set( + data.exceptions + .map(e => e.approvedDate ? e.approvedDate.split('-')[0] : null) + .filter(Boolean) + )].sort().reverse(); + + years.forEach(year => { + const option = document.createElement('option'); + option.value = year; + option.textContent = year; + elements.yearFilter.appendChild(option); + }); + } + + // Render blanket exceptions as cards + function renderBlanketExceptions() { + if (!data.blanketExceptions || data.blanketExceptions.length === 0) { + document.getElementById('blanket-exceptions').style.display = 'none'; + return; + } + + const html = data.blanketExceptions.map(blanket => ` +
+

${escapeHtml(blanket.name)}

+

${escapeHtml(blanket.description)}

+
+ Scope: ${escapeHtml(blanket.scope)} + Approved: ${escapeHtml(blanket.approvedDate)} +
+
+ ${blanket.licenses.map(l => `${escapeHtml(l)}`).join('')} +
+ ${blanket.documentUrl ? `

View Documentation

` : ''} +
+ `).join(''); + + elements.blanketCards.innerHTML = html; + } + + // Apply filters and render table + function applyFiltersAndRender() { + const searchTerm = elements.search.value.toLowerCase().trim(); + const licenseFilter = elements.licenseFilter.value; + const statusFilter = elements.statusFilter.value; + const yearFilter = elements.yearFilter.value; + const sortBy = elements.sortBy.value; + + // Filter + filteredExceptions = data.exceptions.filter(exc => { + // Search filter + if (searchTerm && !exc.package.toLowerCase().includes(searchTerm)) { + return false; + } + + // License filter + if (licenseFilter && exc.license !== licenseFilter) { + return false; + } + + // Status filter + if (statusFilter && exc.status !== statusFilter) { + return false; + } + + // Year filter + if (yearFilter) { + const excYear = exc.approvedDate ? exc.approvedDate.split('-')[0] : ''; + if (excYear !== yearFilter) { + return false; + } + } + + return true; + }); + + // Sort + filteredExceptions.sort((a, b) => { + switch (sortBy) { + case 'date-desc': + return (b.approvedDate || '').localeCompare(a.approvedDate || ''); + case 'date-asc': + return (a.approvedDate || '').localeCompare(b.approvedDate || ''); + case 'package-asc': + return a.package.toLowerCase().localeCompare(b.package.toLowerCase()); + case 'package-desc': + return b.package.toLowerCase().localeCompare(a.package.toLowerCase()); + case 'license-asc': + return a.license.localeCompare(b.license); + default: + return 0; + } + }); + + // Render + renderTable(); + updateResultsCount(); + } + + // Render the exceptions table + function renderTable() { + if (filteredExceptions.length === 0) { + elements.tableBody.innerHTML = ''; + elements.noResults.style.display = 'block'; + return; + } + + elements.noResults.style.display = 'none'; + + const html = filteredExceptions.map(exc => { + const packageHtml = formatPackage(exc.package); + const statusClass = getStatusClass(exc.status); + + return ` + + ${packageHtml} + ${escapeHtml(exc.license)} + ${escapeHtml(exc.status)} + ${escapeHtml(exc.approvedDate || '-')} + + `; + }).join(''); + + elements.tableBody.innerHTML = html; + } + + // Format package name, auto-linking GitHub URLs + function formatPackage(packageName) { + if (packageName.startsWith('github.com/')) { + const url = `https://${packageName}`; + return `${escapeHtml(packageName)}`; + } + return `${escapeHtml(packageName)}`; + } + + // Get CSS class for status badge + function getStatusClass(status) { + switch (status) { + case 'approved': + return 'status-approved'; + case 'allowlisted': + return 'status-allowlisted'; + case 'apache-2.0': + return 'status-apache-2-0'; + default: + return ''; + } + } + + // Update results count + function updateResultsCount() { + const total = data.exceptions.length; + const filtered = filteredExceptions.length; + + if (filtered === total) { + elements.resultsCount.textContent = `${total} exceptions`; + } else { + elements.resultsCount.textContent = `${filtered} of ${total} exceptions`; + } + } + + // Clear all filters + function clearFilters() { + elements.search.value = ''; + elements.licenseFilter.value = ''; + elements.statusFilter.value = ''; + elements.yearFilter.value = ''; + elements.sortBy.value = 'date-desc'; + applyFiltersAndRender(); + } + + // Download CSV + function downloadCsv() { + const headers = ['Package', 'License', 'Status', 'Approved Date', 'Comment']; + const rows = filteredExceptions.map(exc => [ + exc.package, + exc.license, + exc.status, + exc.approvedDate || '', + exc.comment || '' + ]); + + const csvContent = [ + headers.join(','), + ...rows.map(row => row.map(cell => `"${String(cell).replace(/"/g, '""')}"`).join(',')) + ].join('\n'); + + const blob = new Blob([csvContent], { type: 'text/csv;charset=utf-8;' }); + const url = URL.createObjectURL(blob); + const link = document.createElement('a'); + link.href = url; + link.download = 'cncf-license-exceptions.csv'; + document.body.appendChild(link); + link.click(); + document.body.removeChild(link); + URL.revokeObjectURL(url); + } + + // Escape HTML to prevent XSS + function escapeHtml(text) { + if (text === null || text === undefined) return ''; + const div = document.createElement('div'); + div.textContent = String(text); + return div.innerHTML; + } + + // Set up event listeners + function setupEventListeners() { + // Debounced search + elements.search.addEventListener('input', debounce(applyFiltersAndRender, 300)); + + // Filter dropdowns + elements.licenseFilter.addEventListener('change', applyFiltersAndRender); + elements.statusFilter.addEventListener('change', applyFiltersAndRender); + elements.yearFilter.addEventListener('change', applyFiltersAndRender); + + // Sort + elements.sortBy.addEventListener('change', applyFiltersAndRender); + + // Clear filters + elements.clearFilters.addEventListener('click', clearFilters); + + // Download CSV + elements.downloadCsv.addEventListener('click', downloadCsv); + } + + // Initialize on DOM ready + if (document.readyState === 'loading') { + document.addEventListener('DOMContentLoaded', init); + } else { + init(); + } +})(); diff --git a/license-exceptions/site/index.html b/license-exceptions/site/index.html new file mode 100644 index 00000000..29df5835 --- /dev/null +++ b/license-exceptions/site/index.html @@ -0,0 +1,118 @@ + + + + + + CNCF License Exceptions + + + +
+
+

CNCF License Exceptions

+

Approved license exceptions for CNCF projects

+
+
+ +
+ +
+
+
+ + +
+
+ + +
+
+ + +
+
+ + +
+
+
+ +
+
+ + +
+ Loading... +
+ + +
+
+ + +
+

Blanket Exceptions

+
+ +
+
+ + +
+
+ + + + + + + + + + + + +
PackageLicenseStatusApproved Date
+
+ +
+
+ + + + + + diff --git a/license-exceptions/site/styles.css b/license-exceptions/site/styles.css new file mode 100644 index 00000000..0f96112d --- /dev/null +++ b/license-exceptions/site/styles.css @@ -0,0 +1,503 @@ +/* CSS Variables */ +:root { + --cncf-blue: #446ca9; + --cncf-blue-dark: #365589; + --cncf-blue-light: #5a82bf; + --color-success: #28a745; + --color-info: #17a2b8; + --color-secondary: #6c757d; + --color-warning: #ffc107; + --color-bg: #f8f9fa; + --color-bg-white: #ffffff; + --color-text: #212529; + --color-text-muted: #6c757d; + --color-border: #dee2e6; + --shadow-sm: 0 1px 2px rgba(0, 0, 0, 0.05); + --shadow-md: 0 4px 6px rgba(0, 0, 0, 0.1); + --radius-sm: 4px; + --radius-md: 8px; + --radius-lg: 12px; +} + +/* Reset & Base */ +*, *::before, *::after { + box-sizing: border-box; +} + +body { + margin: 0; + font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif; + font-size: 16px; + line-height: 1.6; + color: var(--color-text); + background-color: var(--color-bg); +} + +.container { + max-width: 1400px; + margin: 0 auto; + padding: 0 1.5rem; +} + +/* Header */ +.header { + background: linear-gradient(135deg, var(--cncf-blue) 0%, var(--cncf-blue-dark) 100%); + color: white; + padding: 2.5rem 0; + text-align: center; +} + +.header h1 { + margin: 0; + font-size: 2.5rem; + font-weight: 700; +} + +.header .subtitle { + margin: 0.5rem 0 0; + opacity: 0.9; + font-size: 1.1rem; +} + +/* Filters */ +.filters { + background: var(--color-bg-white); + padding: 1.5rem; + margin: 1.5rem 0; + border-radius: var(--radius-md); + box-shadow: var(--shadow-sm); +} + +.filters-row { + display: grid; + grid-template-columns: repeat(auto-fit, minmax(200px, 1fr)); + gap: 1rem; +} + +.filter-group { + display: flex; + flex-direction: column; +} + +.filter-group label { + font-weight: 600; + font-size: 0.875rem; + color: var(--color-text-muted); + margin-bottom: 0.375rem; +} + +.filter-group input, +.filter-group select { + padding: 0.625rem 0.75rem; + border: 1px solid var(--color-border); + border-radius: var(--radius-sm); + font-size: 1rem; + transition: border-color 0.2s, box-shadow 0.2s; +} + +.filter-group input:focus, +.filter-group select:focus { + outline: none; + border-color: var(--cncf-blue); + box-shadow: 0 0 0 3px rgba(68, 108, 169, 0.15); +} + +.filters-actions { + margin-top: 1rem; + display: flex; + justify-content: flex-end; +} + +/* Buttons */ +.btn { + padding: 0.625rem 1.25rem; + border: none; + border-radius: var(--radius-sm); + font-size: 0.9375rem; + font-weight: 500; + cursor: pointer; + transition: background-color 0.2s, transform 0.1s; +} + +.btn:hover { + transform: translateY(-1px); +} + +.btn:active { + transform: translateY(0); +} + +.btn-primary { + background-color: var(--cncf-blue); + color: white; +} + +.btn-primary:hover { + background-color: var(--cncf-blue-dark); +} + +.btn-secondary { + background-color: var(--color-bg); + color: var(--color-text); + border: 1px solid var(--color-border); +} + +.btn-secondary:hover { + background-color: var(--color-border); +} + +.link-btn { + background: none; + border: none; + color: inherit; + font: inherit; + cursor: pointer; + text-decoration: underline; + padding: 0; +} + +.link-btn:hover { + color: var(--cncf-blue-light); +} + +/* Sort Controls */ +.sort-controls { + display: flex; + justify-content: space-between; + align-items: center; + margin-bottom: 1rem; + flex-wrap: wrap; + gap: 1rem; +} + +.results-count { + font-weight: 600; + color: var(--color-text-muted); +} + +.sort-group { + display: flex; + align-items: center; + gap: 0.5rem; +} + +.sort-group label { + font-size: 0.875rem; + color: var(--color-text-muted); +} + +.sort-group select { + padding: 0.5rem 0.75rem; + border: 1px solid var(--color-border); + border-radius: var(--radius-sm); + font-size: 0.875rem; +} + +/* Blanket Exceptions */ +.blanket-exceptions { + margin: 2rem 0; +} + +.blanket-exceptions h2 { + font-size: 1.5rem; + margin: 0 0 1rem; + color: var(--cncf-blue); +} + +.blanket-cards { + display: grid; + grid-template-columns: repeat(auto-fit, minmax(350px, 1fr)); + gap: 1rem; +} + +.blanket-card { + background: linear-gradient(135deg, var(--cncf-blue) 0%, var(--cncf-blue-light) 100%); + color: white; + padding: 1.5rem; + border-radius: var(--radius-md); + box-shadow: var(--shadow-md); +} + +.blanket-card h3 { + margin: 0 0 0.75rem; + font-size: 1.25rem; +} + +.blanket-card p { + margin: 0 0 1rem; + opacity: 0.95; + font-size: 0.9375rem; + line-height: 1.5; +} + +.blanket-card .meta { + display: flex; + flex-wrap: wrap; + gap: 0.75rem; + font-size: 0.8125rem; + opacity: 0.9; +} + +.blanket-card .meta-item { + display: flex; + align-items: center; + gap: 0.25rem; +} + +.blanket-card .licenses { + display: flex; + flex-wrap: wrap; + gap: 0.5rem; + margin-top: 0.75rem; +} + +.blanket-card .license-tag { + background: rgba(255, 255, 255, 0.2); + padding: 0.25rem 0.5rem; + border-radius: var(--radius-sm); + font-family: 'SFMono-Regular', Consolas, 'Liberation Mono', Menlo, monospace; + font-size: 0.8125rem; +} + +.blanket-card a { + color: white; + text-decoration: underline; +} + +.blanket-card a:hover { + opacity: 0.8; +} + +/* Results Table */ +.results { + background: var(--color-bg-white); + border-radius: var(--radius-md); + box-shadow: var(--shadow-sm); + overflow: hidden; +} + +.table-wrapper { + overflow-x: auto; +} + +#exceptions-table { + width: 100%; + border-collapse: collapse; + font-size: 0.9375rem; +} + +#exceptions-table thead { + background: var(--cncf-blue); + color: white; + position: sticky; + top: 0; + z-index: 10; +} + +#exceptions-table th { + padding: 1rem; + text-align: left; + font-weight: 600; + white-space: nowrap; +} + +#exceptions-table td { + padding: 0.875rem 1rem; + border-bottom: 1px solid var(--color-border); + vertical-align: middle; +} + +#exceptions-table tbody tr:hover { + background-color: rgba(68, 108, 169, 0.04); +} + +#exceptions-table tbody tr:last-child td { + border-bottom: none; +} + +/* Package Links */ +.package-link { + color: var(--cncf-blue); + text-decoration: none; + word-break: break-word; +} + +.package-link:hover { + text-decoration: underline; +} + +.package-name { + word-break: break-word; +} + +/* License Badge */ +.license-badge { + display: inline-block; + background: var(--color-bg); + color: var(--color-text); + padding: 0.25rem 0.5rem; + border-radius: var(--radius-sm); + font-family: 'SFMono-Regular', Consolas, 'Liberation Mono', Menlo, monospace; + font-size: 0.8125rem; + max-width: 300px; + word-break: break-word; +} + +/* Status Badges */ +.status-badge { + display: inline-block; + padding: 0.25rem 0.625rem; + border-radius: var(--radius-sm); + font-size: 0.8125rem; + font-weight: 600; + text-transform: capitalize; +} + +.status-approved { + background-color: #d4edda; + color: #155724; +} + +.status-allowlisted { + background-color: #cce5ff; + color: #004085; +} + +.status-apache-2-0 { + background-color: #e2e3e5; + color: #383d41; +} + +/* No Results */ +.no-results { + padding: 3rem; + text-align: center; + color: var(--color-text-muted); +} + +.no-results p { + margin: 0; + font-size: 1.125rem; +} + +/* Footer */ +.footer { + background: var(--color-text); + color: white; + padding: 2rem 0; + margin-top: 3rem; +} + +.footer .container { + text-align: center; +} + +.footer-links { + display: flex; + justify-content: center; + gap: 2rem; + flex-wrap: wrap; + margin-bottom: 1rem; +} + +.footer-links a, +.footer-links button { + color: white; + text-decoration: none; + font-size: 0.9375rem; + transition: opacity 0.2s; +} + +.footer-links a:hover, +.footer-links button:hover { + opacity: 0.8; + text-decoration: underline; +} + +.footer-meta { + margin: 0; + font-size: 0.875rem; + opacity: 0.7; +} + +/* Responsive */ +@media (max-width: 768px) { + .header h1 { + font-size: 1.75rem; + } + + .header .subtitle { + font-size: 1rem; + } + + .filters-row { + grid-template-columns: 1fr; + } + + .sort-controls { + flex-direction: column; + align-items: flex-start; + } + + .blanket-cards { + grid-template-columns: 1fr; + } + + #exceptions-table { + font-size: 0.875rem; + } + + #exceptions-table th, + #exceptions-table td { + padding: 0.75rem 0.5rem; + } + + .footer-links { + flex-direction: column; + gap: 1rem; + } +} + +/* Loading State */ +.loading { + text-align: center; + padding: 3rem; + color: var(--color-text-muted); +} + +.loading::after { + content: ''; + display: inline-block; + width: 1rem; + height: 1rem; + border: 2px solid var(--color-border); + border-top-color: var(--cncf-blue); + border-radius: 50%; + animation: spin 1s linear infinite; + margin-left: 0.5rem; + vertical-align: middle; +} + +@keyframes spin { + to { + transform: rotate(360deg); + } +} + +/* Scrollbar styling for table */ +.table-wrapper::-webkit-scrollbar { + height: 8px; +} + +.table-wrapper::-webkit-scrollbar-track { + background: var(--color-bg); +} + +.table-wrapper::-webkit-scrollbar-thumb { + background: var(--color-border); + border-radius: 4px; +} + +.table-wrapper::-webkit-scrollbar-thumb:hover { + background: var(--color-text-muted); +} From 3924e0f573a521ab130b5591d00c9277159a8693 Mon Sep 17 00:00:00 2001 From: Jeffrey Sica Date: Sun, 1 Feb 2026 21:46:38 -0600 Subject: [PATCH 05/19] ci: add GitHub Pages deployment for license exceptions site - Deploy on push to main when license-exceptions/ changes - Generate CSV/SPDX before deployment - Copy site files and data files to _site - Use GitHub's official pages actions (v3/v4) Signed-off-by: Jeffrey Sica --- .github/workflows/deploy-license-site.yml | 58 +++++++++++++++++++++++ 1 file changed, 58 insertions(+) create mode 100644 .github/workflows/deploy-license-site.yml diff --git a/.github/workflows/deploy-license-site.yml b/.github/workflows/deploy-license-site.yml new file mode 100644 index 00000000..b61d26a1 --- /dev/null +++ b/.github/workflows/deploy-license-site.yml @@ -0,0 +1,58 @@ +name: Deploy License Exceptions Site + +on: + push: + branches: [main] + paths: + - 'license-exceptions/**' + workflow_dispatch: + +permissions: + contents: read + pages: write + id-token: write + +concurrency: + group: "pages" + cancel-in-progress: false + +jobs: + build: + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v4 + + - name: Setup Node.js + uses: actions/setup-node@v4 + with: + node-version: '20' + + - name: Generate derived formats + run: | + cd license-exceptions + node scripts/generate-all.js + + - name: Prepare site + run: | + mkdir -p _site + cp -r license-exceptions/site/* _site/ + cp license-exceptions/exceptions.json _site/ + cp license-exceptions/CNCF-licensing-exceptions.csv _site/ + cp license-exceptions/cncf-exceptions-current.spdx _site/ + + - name: Upload artifact + uses: actions/upload-pages-artifact@v3 + with: + path: '_site' + + deploy: + environment: + name: github-pages + url: ${{ steps.deployment.outputs.page_url }} + runs-on: ubuntu-latest + needs: build + steps: + - name: Deploy to GitHub Pages + id: deployment + uses: actions/deploy-pages@v4 From c987db31e09dd3c8056274d4742fe5bd93018455 Mon Sep 17 00:00:00 2001 From: Jeffrey Sica Date: Sun, 1 Feb 2026 21:47:38 -0600 Subject: [PATCH 06/19] docs(license): update README with new data structure and site info - Add link to searchable exceptions database - Document data files and their purposes - Add maintainer instructions for updating data - Document JSON schema and status values - Keep blanket eBPF/GPL exception info Signed-off-by: Jeffrey Sica --- license-exceptions/README.md | 82 ++++++++++++++++++++++++++++++------ 1 file changed, 68 insertions(+), 14 deletions(-) diff --git a/license-exceptions/README.md b/license-exceptions/README.md index 00a8d120..3d3cf98b 100644 --- a/license-exceptions/README.md +++ b/license-exceptions/README.md @@ -1,27 +1,81 @@ -## License exceptions +# CNCF License Exceptions -The manifest files in this directory contain a list of license exceptions that have been approved by the CNCF Governing Board. The exceptions are provided in JSON and SPDX tag-value format for convenience. +This directory contains license exceptions approved by the CNCF Governing Board. -These manifests will be updated from time to time as new exceptions are approved. +## Browse Exceptions -Please see the [CNCF charter] and the [Allowlist Policy] for more background information. +**[View the searchable exceptions database](https://cncf.github.io/foundation/license-exceptions/site/)** -## Allowlisted components +The web interface allows you to: +- Search by package name +- Filter by license type, approval status, or year +- Sort by date or name +- Download data in JSON, CSV, or SPDX formats -For convenience, the manifests also contain a list of certain other dependencies for which individual license exceptions were not required. This is either because (a) they were automatically approved as license exceptions under CNCF's [Allowlist Policy]; or (b) they are under Apache-2.0 and therefore aligned with the IP policy in the [CNCF charter]. +## Data Files -Dependencies that are not currently listed in the manifests, but which satisfy (a) or (b) in the preceding paragraph, are automatically approved and do not need separate license exceptions. +| File | Description | +|------|-------------| +| `exceptions.json` | **Source of truth** - All exception data in structured JSON | +| `CNCF-licensing-exceptions.csv` | Generated CSV for spreadsheet tools | +| `cncf-exceptions-current.spdx` | Generated SPDX tag-value format | +| `schema/exception.schema.json` | JSON Schema for validation | -[Allowlist Policy]: https://github.com/cncf/foundation/blob/main/policies-guidance/allowed-third-party-license-policy.md#cncf-allowlist-license-policy -[CNCF charter]: https://github.com/cncf/foundation/blob/main/charter.md +> **Note:** The CSV and SPDX files are auto-generated from `exceptions.json`. Edit only the JSON file. -## GPL exceptions for in-kernel eBPF programs +## Blanket Exceptions -By email vote concluded on August 31 2023, the Governing Board approved a blanket exception for in-kernel eBPF programs licensed under either of the following licenses, either on its own or dual licensed in combination with any license already on the CNCF Licensing Allowlist Approved Licenses list (e.g., MIT License): +### GPL for in-kernel eBPF programs -* GPL 2.0 -* GPL 2.0 or later +By email vote concluded on August 31, 2023, the Governing Board approved a blanket exception for in-kernel eBPF programs licensed under: -This exception is not documented in the SPDX/JSON files because it applies only to in-kernel eBPF programs. Usage of GPL 2.0 (or later) for other code is not approved. There is more background explaining the rationale behind this exception in [this document](https://docs.google.com/document/d/10CY8V1w8aQ6CrJ_US_Gnz8cx2SoOtOBqpUKX4cWl_4w/edit#heading=h.oxrtx3xdj6dn). +- GPL-2.0-only +- GPL-2.0-or-later + +This applies only to in-kernel eBPF programs, either standalone or dual-licensed with any [allowlist license](../policies-guidance/allowed-third-party-license-policy.md). + +[Background documentation](https://docs.google.com/document/d/10CY8V1w8aQ6CrJ_US_Gnz8cx2SoOtOBqpUKX4cWl_4w/edit) + +## Request an Exception + +If your CNCF project needs to use a component with a non-allowlisted license, [submit an exception request](https://github.com/cncf/foundation/issues/new?template=license-exception-request.yaml). + +See also: +- [CNCF Allowlist License Policy](../policies-guidance/allowed-third-party-license-policy.md) +- [CNCF Charter (IP Policy)](../charter.md#11-ip-policy) + +## For Maintainers + +### Updating Exception Data + +1. Edit `exceptions.json` directly +2. Run `node scripts/generate-all.js` to update derived formats +3. Submit a PR + +### Schema + +All exception entries follow this structure: + +```json +{ + "id": "exc-2023-08-31-001", + "package": "github.com/example/package", + "packageUrl": "https://github.com/example/package", + "license": "MPL-2.0", + "requestingProject": "ProjectName", + "approvedDate": "2023-08-31", + "issueUrl": "https://github.com/cncf/foundation/issues/123", + "status": "approved", + "comment": "Optional notes" +} +``` + +### Status Values + +| Status | Description | +|--------|-------------| +| `approved` | Approved by Governing Board vote | +| `allowlisted` | Meets allowlist criteria automatically | +| `apache-2.0` | Apache-2.0 licensed (no exception needed) | From c71c9210e84926bd941425425ff1c109c762d70f Mon Sep 17 00:00:00 2001 From: Jeffrey Sica Date: Sun, 1 Feb 2026 21:49:01 -0600 Subject: [PATCH 07/19] ci: add automated triage for license exception issues - Parse issue body to extract project name and components - Check for duplicate packages against exceptions.json - Add needs-review label to all new issues - Add possible-duplicate label when components already have exceptions - Post triage comment with summary and links Signed-off-by: Jeffrey Sica --- .../workflows/license-exception-triage.yml | 114 ++++++++++++++++++ 1 file changed, 114 insertions(+) create mode 100644 .github/workflows/license-exception-triage.yml diff --git a/.github/workflows/license-exception-triage.yml b/.github/workflows/license-exception-triage.yml new file mode 100644 index 00000000..cd96019c --- /dev/null +++ b/.github/workflows/license-exception-triage.yml @@ -0,0 +1,114 @@ +name: License Exception Triage + +on: + issues: + types: [opened, edited] + +jobs: + triage: + if: contains(github.event.issue.labels.*.name, 'licensing') + runs-on: ubuntu-latest + permissions: + issues: write + contents: read + + steps: + - name: Checkout + uses: actions/checkout@v4 + + - name: Setup Node.js + uses: actions/setup-node@v4 + with: + node-version: '20' + + - name: Parse issue and check duplicates + id: parse + uses: actions/github-script@v7 + with: + script: | + // Parse issue body + const body = context.payload.issue.body || ''; + + // Extract project name (after "For which CNCF project" question) + const projectMatch = body.match(/For which CNCF project[^]*?\n\n([^\n]+)/); + const project = projectMatch ? projectMatch[1].trim() : 'Unknown'; + + // Extract component table rows + const tableMatch = body.match(/\|[^\n]*Component[^\n]*\|[\s\S]*?\n\|[-|\s]+\|\n([\s\S]*?)(?=\n\n|\n###|$)/); + const components = []; + + if (tableMatch) { + const rows = tableMatch[1].trim().split('\n'); + for (const row of rows) { + const cells = row.split('|').map(c => c.trim()).filter(c => c); + if (cells.length >= 1 && cells[0]) { + components.push(cells[0]); + } + } + } + + // Read exceptions.json + const fs = require('fs'); + const exceptionsData = JSON.parse(fs.readFileSync('license-exceptions/exceptions.json', 'utf-8')); + const existingPackages = new Set(exceptionsData.exceptions.map(e => e.package.toLowerCase())); + + // Check for duplicates + const duplicates = components.filter(c => { + const normalized = c.toLowerCase().replace(/^https?:\/\//, '').replace(/\/$/, ''); + return existingPackages.has(normalized); + }); + + core.setOutput('project', project); + core.setOutput('component_count', components.length); + core.setOutput('duplicates', JSON.stringify(duplicates)); + core.setOutput('has_duplicates', duplicates.length > 0); + + - name: Add labels + uses: actions/github-script@v7 + with: + script: | + const hasDuplicates = ${{ steps.parse.outputs.has_duplicates }}; + + const labels = ['needs-review']; + if (hasDuplicates) { + labels.push('possible-duplicate'); + } + + await github.rest.issues.addLabels({ + owner: context.repo.owner, + repo: context.repo.repo, + issue_number: context.issue.number, + labels: labels + }); + + - name: Post triage comment + uses: actions/github-script@v7 + with: + script: | + const project = `${{ steps.parse.outputs.project }}`; + const componentCount = ${{ steps.parse.outputs.component_count }}; + const duplicates = JSON.parse('${{ steps.parse.outputs.duplicates }}'); + + let comment = `## Automated Triage Summary\n\n`; + comment += `**Project:** ${project}\n`; + comment += `**Components Requested:** ${componentCount}\n\n`; + + if (duplicates.length > 0) { + comment += `### ⚠️ Possible Duplicates Detected\n\n`; + comment += `The following components may already have an exception:\n\n`; + for (const dup of duplicates) { + comment += `- \`${dup}\`\n`; + } + comment += `\nPlease check the [exceptions database](https://cncf.github.io/foundation/license-exceptions/site/) to verify.\n\n`; + } + + comment += `---\n`; + comment += `*This issue will be reviewed by the CNCF staff and Legal Committee. `; + comment += `See [process documentation](https://github.com/cncf/foundation/blob/main/policies-guidance/allowed-third-party-license-policy.md#process-for-applying-for-an-exception).*`; + + await github.rest.issues.createComment({ + owner: context.repo.owner, + repo: context.repo.repo, + issue_number: context.issue.number, + body: comment + }); From 24ea1d2fdc512d7cdfd79e595172958616acc802 Mon Sep 17 00:00:00 2001 From: Jeffrey Sica Date: Sun, 1 Feb 2026 21:50:08 -0600 Subject: [PATCH 08/19] ci: add workflow to create PR when exception is approved - Trigger on 'approved' label added to issue - Parse issue body to extract components and project - Generate unique IDs for each exception - Update exceptions.json and regenerate CSV/SPDX - Create PR with branch license-exception-{issue_number} - Comment on issue with PR link Signed-off-by: Jeffrey Sica --- .../workflows/license-exception-approved.yml | 131 ++++++++++++++++++ 1 file changed, 131 insertions(+) create mode 100644 .github/workflows/license-exception-approved.yml diff --git a/.github/workflows/license-exception-approved.yml b/.github/workflows/license-exception-approved.yml new file mode 100644 index 00000000..1d967980 --- /dev/null +++ b/.github/workflows/license-exception-approved.yml @@ -0,0 +1,131 @@ +name: License Exception Approved + +on: + issues: + types: [labeled] + +jobs: + create-pr: + if: github.event.label.name == 'approved' + runs-on: ubuntu-latest + permissions: + contents: write + pull-requests: write + issues: write + + steps: + - name: Checkout + uses: actions/checkout@v4 + + - name: Setup Node.js + uses: actions/setup-node@v4 + with: + node-version: '20' + + - name: Parse issue for components + id: parse + uses: actions/github-script@v7 + with: + script: | + const body = context.payload.issue.body || ''; + const issueNumber = context.issue.number; + const today = new Date().toISOString().split('T')[0]; + + // Extract project name + const projectMatch = body.match(/For which CNCF project[^]*?\n\n([^\n]+)/); + const project = projectMatch ? projectMatch[1].trim() : 'Unknown'; + + // Extract component table - parse all columns + const tableMatch = body.match(/\|[^\n]*Component[^\n]*\|[\s\S]*?\n\|[-|\s]+\|\n([\s\S]*?)(?=\n\n|\n###|$)/); + const newExceptions = []; + + if (tableMatch) { + const rows = tableMatch[1].trim().split('\n'); + let idx = 1; + for (const row of rows) { + const cells = row.split('|').map(c => c.trim()).filter(c => c); + if (cells.length >= 4 && cells[0]) { + newExceptions.push({ + id: `exc-${today}-${String(idx).padStart(3, '0')}`, + package: cells[0], + packageUrl: cells[1] || undefined, + license: cells[3], + requestingProject: project, + approvedDate: today, + issueUrl: `https://github.com/${context.repo.owner}/${context.repo.repo}/issues/${issueNumber}`, + status: 'approved', + comment: cells[4] || undefined + }); + idx++; + } + } + } + + // Write to temp file for next step + const fs = require('fs'); + fs.writeFileSync('/tmp/new-exceptions.json', JSON.stringify(newExceptions, null, 2)); + + core.setOutput('project', project); + core.setOutput('count', newExceptions.length); + core.setOutput('date', today); + + - name: Update exceptions.json + run: | + node -e " + const fs = require('fs'); + const newExceptions = JSON.parse(fs.readFileSync('/tmp/new-exceptions.json', 'utf-8')); + const data = JSON.parse(fs.readFileSync('license-exceptions/exceptions.json', 'utf-8')); + + // Add new exceptions at the beginning + data.exceptions.unshift(...newExceptions); + + // Update lastUpdated + data.lastUpdated = new Date().toISOString().split('T')[0]; + + fs.writeFileSync('license-exceptions/exceptions.json', JSON.stringify(data, null, 2)); + console.log('Added', newExceptions.length, 'exceptions'); + " + + - name: Generate derived formats + run: | + cd license-exceptions + node scripts/generate-all.js + + - name: Create Pull Request + id: create-pr + uses: peter-evans/create-pull-request@v6 + with: + token: ${{ secrets.GITHUB_TOKEN }} + branch: license-exception-${{ github.event.issue.number }} + title: "Add license exceptions for ${{ steps.parse.outputs.project }} (#${{ github.event.issue.number }})" + body: | + ## License Exception Approval + + This PR adds the license exceptions approved in #${{ github.event.issue.number }}. + + **Project:** ${{ steps.parse.outputs.project }} + **Approval Date:** ${{ steps.parse.outputs.date }} + **Exceptions Added:** ${{ steps.parse.outputs.count }} + + Closes #${{ github.event.issue.number }} + commit-message: "feat(license): add exceptions for ${{ steps.parse.outputs.project }} (#${{ github.event.issue.number }})" + add-paths: | + license-exceptions/exceptions.json + license-exceptions/CNCF-licensing-exceptions.csv + license-exceptions/cncf-exceptions-current.spdx + + - name: Comment on issue + uses: actions/github-script@v7 + with: + script: | + const prNumber = '${{ steps.create-pr.outputs.pull-request-number }}'; + const prUrl = '${{ steps.create-pr.outputs.pull-request-url }}'; + + if (prNumber) { + await github.rest.issues.createComment({ + owner: context.repo.owner, + repo: context.repo.repo, + issue_number: context.issue.number, + body: `## ✅ Exception Approved\n\nA pull request has been created to add these exceptions to the database:\n\n${prUrl}\n\nOnce merged, the exceptions will appear in the [exceptions database](https://cncf.github.io/foundation/license-exceptions/site/).` + }); + } From 25a8e821d6df76b65467ae910812c7788c80ce30 Mon Sep 17 00:00:00 2001 From: Jeffrey Sica Date: Sun, 1 Feb 2026 21:51:08 -0600 Subject: [PATCH 09/19] ci: add validation workflow for exceptions.json - Validate JSON against schema using ajv-cli - Check for duplicate exception IDs - Verify CSV and SPDX files are in sync with JSON - Validate required fields and status enum values Signed-off-by: Jeffrey Sica --- .github/workflows/validate-exceptions.yml | 103 ++++++++++++++++++++++ 1 file changed, 103 insertions(+) create mode 100644 .github/workflows/validate-exceptions.yml diff --git a/.github/workflows/validate-exceptions.yml b/.github/workflows/validate-exceptions.yml new file mode 100644 index 00000000..d78f78e6 --- /dev/null +++ b/.github/workflows/validate-exceptions.yml @@ -0,0 +1,103 @@ +name: Validate License Exceptions + +on: + pull_request: + paths: + - 'license-exceptions/exceptions.json' + - 'license-exceptions/schema/**' + +jobs: + validate: + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v4 + + - name: Setup Node.js + uses: actions/setup-node@v4 + with: + node-version: '20' + + - name: Install ajv-cli + run: npm install -g ajv-cli ajv-formats + + - name: Validate JSON Schema + run: | + ajv validate \ + --spec=draft2020 \ + -s license-exceptions/schema/exception.schema.json \ + -d license-exceptions/exceptions.json \ + --strict=false \ + -c ajv-formats + + - name: Check for duplicate IDs + run: | + node -e " + const data = JSON.parse(require('fs').readFileSync('license-exceptions/exceptions.json', 'utf-8')); + const ids = data.exceptions.map(e => e.id); + const seen = new Set(); + const duplicates = []; + + for (const id of ids) { + if (seen.has(id)) { + duplicates.push(id); + } + seen.add(id); + } + + if (duplicates.length > 0) { + console.error('Duplicate IDs found:', duplicates); + process.exit(1); + } + + console.log('✓ No duplicate IDs found (' + ids.length + ' exceptions)'); + " + + - name: Verify generated files are in sync + run: | + # Generate fresh files + cd license-exceptions + node scripts/generate-all.js + + # Check if CSV changed + if ! git diff --quiet CNCF-licensing-exceptions.csv; then + echo "::error::CSV file is out of sync with exceptions.json" + echo "Run 'node scripts/generate-all.js' and commit the changes" + git diff CNCF-licensing-exceptions.csv + exit 1 + fi + + # Check if SPDX changed + if ! git diff --quiet cncf-exceptions-current.spdx; then + echo "::error::SPDX file is out of sync with exceptions.json" + echo "Run 'node scripts/generate-all.js' and commit the changes" + git diff cncf-exceptions-current.spdx + exit 1 + fi + + echo "✓ All generated files are in sync" + + - name: Validate JSON structure + run: | + node -e " + const data = JSON.parse(require('fs').readFileSync('license-exceptions/exceptions.json', 'utf-8')); + + // Check required top-level fields + if (!data.version) throw new Error('Missing version field'); + if (!data.lastUpdated) throw new Error('Missing lastUpdated field'); + if (!Array.isArray(data.exceptions)) throw new Error('exceptions must be an array'); + + // Check each exception has required fields + for (let i = 0; i < data.exceptions.length; i++) { + const exc = data.exceptions[i]; + if (!exc.id) throw new Error('Exception ' + i + ' missing id'); + if (!exc.package) throw new Error('Exception ' + i + ' missing package'); + if (!exc.license) throw new Error('Exception ' + i + ' missing license'); + if (!exc.status) throw new Error('Exception ' + i + ' missing status'); + if (!['approved', 'allowlisted', 'apache-2.0'].includes(exc.status)) { + throw new Error('Exception ' + i + ' has invalid status: ' + exc.status); + } + } + + console.log('✓ JSON structure is valid'); + " From 492843818cfa9254a7e8927cc28c107c31593cab Mon Sep 17 00:00:00 2001 From: Jeffrey Sica Date: Sun, 1 Feb 2026 21:51:37 -0600 Subject: [PATCH 10/19] docs: add link to exceptions database in issue template Add a section directing users to check the searchable exceptions database before submitting a new request to reduce duplicates. Signed-off-by: Jeffrey Sica --- .github/ISSUE_TEMPLATE/license-exception-request.yaml | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/.github/ISSUE_TEMPLATE/license-exception-request.yaml b/.github/ISSUE_TEMPLATE/license-exception-request.yaml index 9c4af9fd..f368f8e7 100644 --- a/.github/ISSUE_TEMPLATE/license-exception-request.yaml +++ b/.github/ISSUE_TEMPLATE/license-exception-request.yaml @@ -38,6 +38,16 @@ body:
+ # Check for existing exceptions + + Before submitting, please check if an exception already exists for your component(s): + + **[Search the exceptions database](https://cncf.github.io/foundation/license-exceptions/site/)** + + If an exception already exists for the same package and license, you do not need to request a new one. + +
+ --- # License Exception Request form From c1948892f7fa6a7f6b0fbb59bd47c5576e8a5b23 Mon Sep 17 00:00:00 2001 From: Jeffrey Sica Date: Wed, 4 Feb 2026 13:19:17 -0600 Subject: [PATCH 11/19] feat(license-exceptions): add E2E tests and blanket exceptions page - Add Playwright E2E testing with 30 tests covering: - Page loading and data display - Search and filter functionality - Column sorting (clickable headers) - Download functionality (CSV/JSON) - Navigation between pages - Footer metadata - Add blanket exceptions as separate page with card layout - Add navigation bar to switch between package and blanket exceptions - Add scope and results fields to exception schema - Enhance search to query all fields - Add clickable column headers for sorting - Add GitHub Actions workflow for E2E tests on PRs - Integrate E2E tests into deploy workflow (tests must pass before deploy) - Update deploy to serve site at /license-exceptions/ path Signed-off-by: Jeffrey Sica --- .github/workflows/deploy-license-site.yml | 48 +- .github/workflows/e2e-license-site.yml | 46 + license-exceptions/.gitignore | 10 + license-exceptions/exceptions.json | 3 + license-exceptions/package-lock.json | 1125 +++++++++++++++++ license-exceptions/package.json | 21 + license-exceptions/playwright.config.js | 56 + .../schema/exception.schema.json | 2 + license-exceptions/site/app.js | 187 ++- license-exceptions/site/blanket-app.js | 99 ++ .../site/blanket-exceptions.html | 64 + license-exceptions/site/index.html | 36 +- license-exceptions/site/styles.css | 174 +++ .../tests/blanket-exceptions.spec.js | 89 ++ .../tests/package-exceptions.spec.js | 249 ++++ 15 files changed, 2136 insertions(+), 73 deletions(-) create mode 100644 .github/workflows/e2e-license-site.yml create mode 100644 license-exceptions/.gitignore create mode 100644 license-exceptions/package-lock.json create mode 100644 license-exceptions/package.json create mode 100644 license-exceptions/playwright.config.js create mode 100644 license-exceptions/site/blanket-app.js create mode 100644 license-exceptions/site/blanket-exceptions.html create mode 100644 license-exceptions/tests/blanket-exceptions.spec.js create mode 100644 license-exceptions/tests/package-exceptions.spec.js diff --git a/.github/workflows/deploy-license-site.yml b/.github/workflows/deploy-license-site.yml index b61d26a1..ed8911fc 100644 --- a/.github/workflows/deploy-license-site.yml +++ b/.github/workflows/deploy-license-site.yml @@ -17,8 +17,44 @@ concurrency: cancel-in-progress: false jobs: + test: + name: Run E2E Tests + runs-on: ubuntu-latest + defaults: + run: + working-directory: license-exceptions + + steps: + - name: Checkout + uses: actions/checkout@v4 + + - name: Setup Node.js + uses: actions/setup-node@v4 + with: + node-version: '20' + cache: 'npm' + cache-dependency-path: license-exceptions/package-lock.json + + - name: Install dependencies + run: npm ci + + - name: Install Playwright Browsers + run: npx playwright install chromium --with-deps + + - name: Run Playwright tests + run: npm test + + - name: Upload test results + uses: actions/upload-artifact@v4 + if: ${{ !cancelled() }} + with: + name: playwright-report + path: license-exceptions/playwright-report/ + retention-days: 7 + build: runs-on: ubuntu-latest + needs: test steps: - name: Checkout uses: actions/checkout@v4 @@ -35,11 +71,11 @@ jobs: - name: Prepare site run: | - mkdir -p _site - cp -r license-exceptions/site/* _site/ - cp license-exceptions/exceptions.json _site/ - cp license-exceptions/CNCF-licensing-exceptions.csv _site/ - cp license-exceptions/cncf-exceptions-current.spdx _site/ + mkdir -p _site/license-exceptions + cp -r license-exceptions/site/* _site/license-exceptions/ + cp license-exceptions/exceptions.json _site/license-exceptions/ + cp license-exceptions/CNCF-licensing-exceptions.csv _site/license-exceptions/ + cp license-exceptions/cncf-exceptions-current.spdx _site/license-exceptions/ - name: Upload artifact uses: actions/upload-pages-artifact@v3 @@ -49,7 +85,7 @@ jobs: deploy: environment: name: github-pages - url: ${{ steps.deployment.outputs.page_url }} + url: ${{ steps.deployment.outputs.page_url }}license-exceptions/ runs-on: ubuntu-latest needs: build steps: diff --git a/.github/workflows/e2e-license-site.yml b/.github/workflows/e2e-license-site.yml new file mode 100644 index 00000000..0a9b3b21 --- /dev/null +++ b/.github/workflows/e2e-license-site.yml @@ -0,0 +1,46 @@ +name: E2E Tests - License Exceptions Site + +on: + pull_request: + paths: + - 'license-exceptions/site/**' + - 'license-exceptions/exceptions.json' + - 'license-exceptions/tests/**' + - 'license-exceptions/playwright.config.js' + - 'license-exceptions/package.json' + +jobs: + e2e-tests: + name: Run E2E Tests + runs-on: ubuntu-latest + defaults: + run: + working-directory: license-exceptions + + steps: + - name: Checkout + uses: actions/checkout@v4 + + - name: Setup Node.js + uses: actions/setup-node@v4 + with: + node-version: '20' + cache: 'npm' + cache-dependency-path: license-exceptions/package-lock.json + + - name: Install dependencies + run: npm ci + + - name: Install Playwright Browsers + run: npx playwright install chromium --with-deps + + - name: Run Playwright tests + run: npm test + + - name: Upload test results + uses: actions/upload-artifact@v4 + if: ${{ !cancelled() }} + with: + name: playwright-report + path: license-exceptions/playwright-report/ + retention-days: 7 diff --git a/license-exceptions/.gitignore b/license-exceptions/.gitignore new file mode 100644 index 00000000..819da3c9 --- /dev/null +++ b/license-exceptions/.gitignore @@ -0,0 +1,10 @@ +# Dependencies +node_modules/ + +# Playwright +test-results/ +playwright-report/ +playwright/.cache/ + +# OS files +.DS_Store diff --git a/license-exceptions/exceptions.json b/license-exceptions/exceptions.json index b71a2026..cb030de1 100644 --- a/license-exceptions/exceptions.json +++ b/license-exceptions/exceptions.json @@ -22,6 +22,7 @@ "license": "CC-BY-SA 4.0", "approvedDate": "2023-08-31", "status": "approved", + "scope": "runtime dependency, statically linked", "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31" }, { @@ -30,6 +31,7 @@ "license": "MPL-2.0", "approvedDate": "2023-08-31", "status": "approved", + "scope": "runtime dependency, dynamically linked", "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31" }, { @@ -38,6 +40,7 @@ "license": "MPL-2.0", "approvedDate": "2023-08-31", "status": "approved", + "scope": "build dependency", "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31" }, { diff --git a/license-exceptions/package-lock.json b/license-exceptions/package-lock.json new file mode 100644 index 00000000..9c23ffae --- /dev/null +++ b/license-exceptions/package-lock.json @@ -0,0 +1,1125 @@ +{ + "name": "license-exceptions", + "version": "1.0.0", + "lockfileVersion": 3, + "requires": true, + "packages": { + "": { + "name": "license-exceptions", + "version": "1.0.0", + "license": "ISC", + "devDependencies": { + "@playwright/test": "^1.58.1", + "serve": "^14.2.5" + } + }, + "node_modules/@playwright/test": { + "version": "1.58.1", + "resolved": "https://registry.npmjs.org/@playwright/test/-/test-1.58.1.tgz", + "integrity": "sha512-6LdVIUERWxQMmUSSQi0I53GgCBYgM2RpGngCPY7hSeju+VrKjq3lvs7HpJoPbDiY5QM5EYRtRX5fvrinnMAz3w==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "playwright": "1.58.1" + }, + "bin": { + "playwright": "cli.js" + }, + "engines": { + "node": ">=18" + } + }, + "node_modules/@zeit/schemas": { + "version": "2.36.0", + "resolved": "https://registry.npmjs.org/@zeit/schemas/-/schemas-2.36.0.tgz", + "integrity": "sha512-7kjMwcChYEzMKjeex9ZFXkt1AyNov9R5HZtjBKVsmVpw7pa7ZtlCGvCBC2vnnXctaYN+aRI61HjIqeetZW5ROg==", + "dev": true, + "license": "MIT" + }, + "node_modules/ajv": { + "version": "8.12.0", + "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.12.0.tgz", + "integrity": "sha512-sRu1kpcO9yLtYxBKvqfTeh9KzZEwO3STyX1HT+4CaDzC6HpTGYhIhPIzj9XuKU7KYDwnaeh5hcOwjy1QuJzBPA==", + "dev": true, + "license": "MIT", + "dependencies": { + "fast-deep-equal": "^3.1.1", + "json-schema-traverse": "^1.0.0", + "require-from-string": "^2.0.2", + "uri-js": "^4.2.2" + }, + "funding": { + "type": "github", + "url": "https://github.com/sponsors/epoberezkin" + } + }, + "node_modules/ansi-align": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/ansi-align/-/ansi-align-3.0.1.tgz", + "integrity": "sha512-IOfwwBF5iczOjp/WeY4YxyjqAFMQoZufdQWDd19SEExbVLNXqvpzSJ/M7Za4/sCPmQ0+GRquoA7bGcINcxew6w==", + "dev": true, + "license": "ISC", + "dependencies": { + "string-width": "^4.1.0" + } + }, + "node_modules/ansi-align/node_modules/ansi-regex": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz", + "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/ansi-align/node_modules/emoji-regex": { + "version": "8.0.0", + "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==", + "dev": true, + "license": "MIT" + }, + "node_modules/ansi-align/node_modules/string-width": { + "version": "4.2.3", + "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==", + "dev": true, + "license": "MIT", + "dependencies": { + "emoji-regex": "^8.0.0", + "is-fullwidth-code-point": "^3.0.0", + "strip-ansi": "^6.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/ansi-align/node_modules/strip-ansi": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-regex": "^5.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/ansi-regex": { + "version": "6.2.2", + "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.2.2.tgz", + "integrity": "sha512-Bq3SmSpyFHaWjPk8If9yc6svM8c56dB5BAtW4Qbw5jHTwwXXcTLoRMkpDJp6VL0XzlWaCHTXrkFURMYmD0sLqg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/ansi-regex?sponsor=1" + } + }, + "node_modules/ansi-styles": { + "version": "6.2.3", + "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.3.tgz", + "integrity": "sha512-4Dj6M28JB+oAH8kFkTLUo+a2jwOFkuqb3yucU0CANcRRUbxS0cP0nZYCGjcc3BNXwRIsUVmDGgzawme7zvJHvg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/ansi-styles?sponsor=1" + } + }, + "node_modules/arch": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/arch/-/arch-2.2.0.tgz", + "integrity": "sha512-Of/R0wqp83cgHozfIYLbBMnej79U/SVGOOyuB3VVFv1NRM/PSFMK12x9KVtiYzJqmnU5WR2qp0Z5rHb7sWGnFQ==", + "dev": true, + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/feross" + }, + { + "type": "patreon", + "url": "https://www.patreon.com/feross" + }, + { + "type": "consulting", + "url": "https://feross.org/support" + } + ], + "license": "MIT" + }, + "node_modules/arg": { + "version": "5.0.2", + "resolved": "https://registry.npmjs.org/arg/-/arg-5.0.2.tgz", + "integrity": "sha512-PYjyFOLKQ9y57JvQ6QLo8dAgNqswh8M1RMJYdQduT6xbWSgK36P/Z/v+p888pM69jMMfS8Xd8F6I1kQ/I9HUGg==", + "dev": true, + "license": "MIT" + }, + "node_modules/balanced-match": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz", + "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==", + "dev": true, + "license": "MIT" + }, + "node_modules/boxen": { + "version": "7.0.0", + "resolved": "https://registry.npmjs.org/boxen/-/boxen-7.0.0.tgz", + "integrity": "sha512-j//dBVuyacJbvW+tvZ9HuH03fZ46QcaKvvhZickZqtB271DxJ7SNRSNxrV/dZX0085m7hISRZWbzWlJvx/rHSg==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-align": "^3.0.1", + "camelcase": "^7.0.0", + "chalk": "^5.0.1", + "cli-boxes": "^3.0.0", + "string-width": "^5.1.2", + "type-fest": "^2.13.0", + "widest-line": "^4.0.1", + "wrap-ansi": "^8.0.1" + }, + "engines": { + "node": ">=14.16" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/brace-expansion": { + "version": "1.1.12", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz", + "integrity": "sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==", + "dev": true, + "license": "MIT", + "dependencies": { + "balanced-match": "^1.0.0", + "concat-map": "0.0.1" + } + }, + "node_modules/bytes": { + "version": "3.1.2", + "resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz", + "integrity": "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/camelcase": { + "version": "7.0.1", + "resolved": "https://registry.npmjs.org/camelcase/-/camelcase-7.0.1.tgz", + "integrity": "sha512-xlx1yCK2Oc1APsPXDL2LdlNP6+uu8OCDdhOBSVT279M/S+y75O30C2VuD8T2ogdePBBl7PfPF4504tnLgX3zfw==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=14.16" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/chalk": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/chalk/-/chalk-5.0.1.tgz", + "integrity": "sha512-Fo07WOYGqMfCWHOzSXOt2CxDbC6skS/jO9ynEcmpANMoPrD+W1r1K6Vx7iNm+AQmETU1Xr2t+n8nzkV9t6xh3w==", + "dev": true, + "license": "MIT", + "engines": { + "node": "^12.17.0 || ^14.13 || >=16.0.0" + }, + "funding": { + "url": "https://github.com/chalk/chalk?sponsor=1" + } + }, + "node_modules/chalk-template": { + "version": "0.4.0", + "resolved": "https://registry.npmjs.org/chalk-template/-/chalk-template-0.4.0.tgz", + "integrity": "sha512-/ghrgmhfY8RaSdeo43hNXxpoHAtxdbskUHjPpfqUWGttFgycUhYPGx3YZBCnUCvOa7Doivn1IZec3DEGFoMgLg==", + "dev": true, + "license": "MIT", + "dependencies": { + "chalk": "^4.1.2" + }, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/chalk-template?sponsor=1" + } + }, + "node_modules/chalk-template/node_modules/ansi-styles": { + "version": "4.3.0", + "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz", + "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==", + "dev": true, + "license": "MIT", + "dependencies": { + "color-convert": "^2.0.1" + }, + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/chalk/ansi-styles?sponsor=1" + } + }, + "node_modules/chalk-template/node_modules/chalk": { + "version": "4.1.2", + "resolved": "https://registry.npmjs.org/chalk/-/chalk-4.1.2.tgz", + "integrity": "sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-styles": "^4.1.0", + "supports-color": "^7.1.0" + }, + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/chalk/chalk?sponsor=1" + } + }, + "node_modules/cli-boxes": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/cli-boxes/-/cli-boxes-3.0.0.tgz", + "integrity": "sha512-/lzGpEWL/8PfI0BmBOPRwp0c/wFNX1RdUML3jK/RcSBA9T8mZDdQpqYBKtCFTOfQbwPqWEOpjqW+Fnayc0969g==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/clipboardy": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/clipboardy/-/clipboardy-3.0.0.tgz", + "integrity": "sha512-Su+uU5sr1jkUy1sGRpLKjKrvEOVXgSgiSInwa/qeID6aJ07yh+5NWc3h2QfjHjBnfX4LhtFcuAWKUsJ3r+fjbg==", + "dev": true, + "license": "MIT", + "dependencies": { + "arch": "^2.2.0", + "execa": "^5.1.1", + "is-wsl": "^2.2.0" + }, + "engines": { + "node": "^12.20.0 || ^14.13.1 || >=16.0.0" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/color-convert": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz", + "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "color-name": "~1.1.4" + }, + "engines": { + "node": ">=7.0.0" + } + }, + "node_modules/color-name": { + "version": "1.1.4", + "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz", + "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==", + "dev": true, + "license": "MIT" + }, + "node_modules/compressible": { + "version": "2.0.18", + "resolved": "https://registry.npmjs.org/compressible/-/compressible-2.0.18.tgz", + "integrity": "sha512-AF3r7P5dWxL8MxyITRMlORQNaOA2IkAFaTr4k7BUumjPtRpGDTZpl0Pb1XCO6JeDCBdp126Cgs9sMxqSjgYyRg==", + "dev": true, + "license": "MIT", + "dependencies": { + "mime-db": ">= 1.43.0 < 2" + }, + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/compression": { + "version": "1.8.1", + "resolved": "https://registry.npmjs.org/compression/-/compression-1.8.1.tgz", + "integrity": "sha512-9mAqGPHLakhCLeNyxPkK4xVo746zQ/czLH1Ky+vkitMnWfWZps8r0qXuwhwizagCRttsL4lfG4pIOvaWLpAP0w==", + "dev": true, + "license": "MIT", + "dependencies": { + "bytes": "3.1.2", + "compressible": "~2.0.18", + "debug": "2.6.9", + "negotiator": "~0.6.4", + "on-headers": "~1.1.0", + "safe-buffer": "5.2.1", + "vary": "~1.1.2" + }, + "engines": { + "node": ">= 0.8.0" + } + }, + "node_modules/concat-map": { + "version": "0.0.1", + "resolved": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz", + "integrity": "sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==", + "dev": true, + "license": "MIT" + }, + "node_modules/content-disposition": { + "version": "0.5.2", + "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.2.tgz", + "integrity": "sha512-kRGRZw3bLlFISDBgwTSA1TMBFN6J6GWDeubmDE3AF+3+yXL8hTWv8r5rkLbqYXY4RjPk/EzHnClI3zQf1cFmHA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/cross-spawn": { + "version": "7.0.6", + "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz", + "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==", + "dev": true, + "license": "MIT", + "dependencies": { + "path-key": "^3.1.0", + "shebang-command": "^2.0.0", + "which": "^2.0.1" + }, + "engines": { + "node": ">= 8" + } + }, + "node_modules/debug": { + "version": "2.6.9", + "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz", + "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==", + "dev": true, + "license": "MIT", + "dependencies": { + "ms": "2.0.0" + } + }, + "node_modules/deep-extend": { + "version": "0.6.0", + "resolved": "https://registry.npmjs.org/deep-extend/-/deep-extend-0.6.0.tgz", + "integrity": "sha512-LOHxIOaPYdHlJRtCQfDIVZtfw/ufM8+rVj649RIHzcm/vGwQRXFt6OPqIFWsm2XEMrNIEtWR64sY1LEKD2vAOA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=4.0.0" + } + }, + "node_modules/eastasianwidth": { + "version": "0.2.0", + "resolved": "https://registry.npmjs.org/eastasianwidth/-/eastasianwidth-0.2.0.tgz", + "integrity": "sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA==", + "dev": true, + "license": "MIT" + }, + "node_modules/emoji-regex": { + "version": "9.2.2", + "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-9.2.2.tgz", + "integrity": "sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg==", + "dev": true, + "license": "MIT" + }, + "node_modules/execa": { + "version": "5.1.1", + "resolved": "https://registry.npmjs.org/execa/-/execa-5.1.1.tgz", + "integrity": "sha512-8uSpZZocAZRBAPIEINJj3Lo9HyGitllczc27Eh5YYojjMFMn8yHMDMaUHE2Jqfq05D/wucwI4JGURyXt1vchyg==", + "dev": true, + "license": "MIT", + "dependencies": { + "cross-spawn": "^7.0.3", + "get-stream": "^6.0.0", + "human-signals": "^2.1.0", + "is-stream": "^2.0.0", + "merge-stream": "^2.0.0", + "npm-run-path": "^4.0.1", + "onetime": "^5.1.2", + "signal-exit": "^3.0.3", + "strip-final-newline": "^2.0.0" + }, + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sindresorhus/execa?sponsor=1" + } + }, + "node_modules/fast-deep-equal": { + "version": "3.1.3", + "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz", + "integrity": "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==", + "dev": true, + "license": "MIT" + }, + "node_modules/fsevents": { + "version": "2.3.2", + "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz", + "integrity": "sha512-xiqMQR4xAeHTuB9uWm+fFRcIOgKBMiOBP+eXiyT7jsgVCq1bkVygt00oASowB7EdtpOHaaPgKt812P9ab+DDKA==", + "dev": true, + "hasInstallScript": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": "^8.16.0 || ^10.6.0 || >=11.0.0" + } + }, + "node_modules/get-stream": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/get-stream/-/get-stream-6.0.1.tgz", + "integrity": "sha512-ts6Wi+2j3jQjqi70w5AlN8DFnkSwC+MqmxEzdEALB2qXZYV3X/b1CTfgPLGJNMeAWxdPfU8FO1ms3NUfaHCPYg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/has-flag": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz", + "integrity": "sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/human-signals": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/human-signals/-/human-signals-2.1.0.tgz", + "integrity": "sha512-B4FFZ6q/T2jhhksgkbEW3HBvWIfDW85snkQgawt07S7J5QXTk6BkNV+0yAeZrM5QpMAdYlocGoljn0sJ/WQkFw==", + "dev": true, + "license": "Apache-2.0", + "engines": { + "node": ">=10.17.0" + } + }, + "node_modules/ini": { + "version": "1.3.8", + "resolved": "https://registry.npmjs.org/ini/-/ini-1.3.8.tgz", + "integrity": "sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==", + "dev": true, + "license": "ISC" + }, + "node_modules/is-docker": { + "version": "2.2.1", + "resolved": "https://registry.npmjs.org/is-docker/-/is-docker-2.2.1.tgz", + "integrity": "sha512-F+i2BKsFrH66iaUFc0woD8sLy8getkwTwtOBjvs56Cx4CgJDeKQeqfz8wAYiSb8JOprWhHH5p77PbmYCvvUuXQ==", + "dev": true, + "license": "MIT", + "bin": { + "is-docker": "cli.js" + }, + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/is-fullwidth-code-point": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz", + "integrity": "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/is-port-reachable": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/is-port-reachable/-/is-port-reachable-4.0.0.tgz", + "integrity": "sha512-9UoipoxYmSk6Xy7QFgRv2HDyaysmgSG75TFQs6S+3pDM7ZhKTF/bskZV+0UlABHzKjNVhPjYCLfeZUEg1wXxig==", + "dev": true, + "license": "MIT", + "engines": { + "node": "^12.20.0 || ^14.13.1 || >=16.0.0" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/is-stream": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/is-stream/-/is-stream-2.0.1.tgz", + "integrity": "sha512-hFoiJiTl63nn+kstHGBtewWSKnQLpyb155KHheA1l39uvtO9nWIop1p3udqPcUd/xbF1VLMO4n7OI6p7RbngDg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/is-wsl": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/is-wsl/-/is-wsl-2.2.0.tgz", + "integrity": "sha512-fKzAra0rGJUUBwGBgNkHZuToZcn+TtXHpeCgmkMJMMYx1sQDYaCSyjJBSCa2nH1DGm7s3n1oBnohoVTBaN7Lww==", + "dev": true, + "license": "MIT", + "dependencies": { + "is-docker": "^2.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/isexe": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz", + "integrity": "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==", + "dev": true, + "license": "ISC" + }, + "node_modules/json-schema-traverse": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz", + "integrity": "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==", + "dev": true, + "license": "MIT" + }, + "node_modules/merge-stream": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/merge-stream/-/merge-stream-2.0.0.tgz", + "integrity": "sha512-abv/qOcuPfk3URPfDzmZU1LKmuw8kT+0nIHvKrKgFrwifol/doWcdA4ZqsWQ8ENrFKkd67Mfpo/LovbIUsbt3w==", + "dev": true, + "license": "MIT" + }, + "node_modules/mime-db": { + "version": "1.54.0", + "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.54.0.tgz", + "integrity": "sha512-aU5EJuIN2WDemCcAp2vFBfp/m4EAhWJnUNSSw0ixs7/kXbd6Pg64EmwJkNdFhB8aWt1sH2CTXrLxo/iAGV3oPQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/mime-types": { + "version": "2.1.18", + "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.18.tgz", + "integrity": "sha512-lc/aahn+t4/SWV/qcmumYjymLsWfN3ELhpmVuUFjgsORruuZPVSwAQryq+HHGvO/SI2KVX26bx+En+zhM8g8hQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "mime-db": "~1.33.0" + }, + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/mime-types/node_modules/mime-db": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.33.0.tgz", + "integrity": "sha512-BHJ/EKruNIqJf/QahvxwQZXKygOQ256myeN/Ew+THcAa5q+PjyTTMMeNQC4DZw5AwfvelsUrA6B67NKMqXDbzQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/mimic-fn": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-2.1.0.tgz", + "integrity": "sha512-OqbOk5oEQeAZ8WXWydlu9HJjz9WVdEIvamMCcXmuqUYjTknH/sqsWvhQ3vgwKFRR1HpjvNBKQ37nbJgYzGqGcg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/minimatch": { + "version": "3.1.2", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz", + "integrity": "sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==", + "dev": true, + "license": "ISC", + "dependencies": { + "brace-expansion": "^1.1.7" + }, + "engines": { + "node": "*" + } + }, + "node_modules/minimist": { + "version": "1.2.8", + "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz", + "integrity": "sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==", + "dev": true, + "license": "MIT", + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/ms": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz", + "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==", + "dev": true, + "license": "MIT" + }, + "node_modules/negotiator": { + "version": "0.6.4", + "resolved": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.4.tgz", + "integrity": "sha512-myRT3DiWPHqho5PrJaIRyaMv2kgYf0mUVgBNOYMuCH5Ki1yEiQaf/ZJuQ62nvpc44wL5WDbTX7yGJi1Neevw8w==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/npm-run-path": { + "version": "4.0.1", + "resolved": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-4.0.1.tgz", + "integrity": "sha512-S48WzZW777zhNIrn7gxOlISNAqi9ZC/uQFnRdbeIHhZhCA6UqpkOT8T1G7BvfdgP4Er8gF4sUbaS0i7QvIfCWw==", + "dev": true, + "license": "MIT", + "dependencies": { + "path-key": "^3.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/on-headers": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/on-headers/-/on-headers-1.1.0.tgz", + "integrity": "sha512-737ZY3yNnXy37FHkQxPzt4UZ2UWPWiCZWLvFZ4fu5cueciegX0zGPnrlY6bwRg4FdQOe9YU8MkmJwGhoMybl8A==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/onetime": { + "version": "5.1.2", + "resolved": "https://registry.npmjs.org/onetime/-/onetime-5.1.2.tgz", + "integrity": "sha512-kbpaSSGJTWdAY5KPVeMOKXSrPtr8C8C7wodJbcsd51jRnmD+GZu8Y0VoU6Dm5Z4vWr0Ig/1NKuWRKf7j5aaYSg==", + "dev": true, + "license": "MIT", + "dependencies": { + "mimic-fn": "^2.1.0" + }, + "engines": { + "node": ">=6" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/path-is-inside": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/path-is-inside/-/path-is-inside-1.0.2.tgz", + "integrity": "sha512-DUWJr3+ULp4zXmol/SZkFf3JGsS9/SIv+Y3Rt93/UjPpDpklB5f1er4O3POIbUuUJ3FXgqte2Q7SrU6zAqwk8w==", + "dev": true, + "license": "(WTFPL OR MIT)" + }, + "node_modules/path-key": { + "version": "3.1.1", + "resolved": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz", + "integrity": "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/path-to-regexp": { + "version": "3.3.0", + "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-3.3.0.tgz", + "integrity": "sha512-qyCH421YQPS2WFDxDjftfc1ZR5WKQzVzqsp4n9M2kQhVOo/ByahFoUNJfl58kOcEGfQ//7weFTDhm+ss8Ecxgw==", + "dev": true, + "license": "MIT" + }, + "node_modules/playwright": { + "version": "1.58.1", + "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.58.1.tgz", + "integrity": "sha512-+2uTZHxSCcxjvGc5C891LrS1/NlxglGxzrC4seZiVjcYVQfUa87wBL6rTDqzGjuoWNjnBzRqKmF6zRYGMvQUaQ==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "playwright-core": "1.58.1" + }, + "bin": { + "playwright": "cli.js" + }, + "engines": { + "node": ">=18" + }, + "optionalDependencies": { + "fsevents": "2.3.2" + } + }, + "node_modules/playwright-core": { + "version": "1.58.1", + "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.58.1.tgz", + "integrity": "sha512-bcWzOaTxcW+VOOGBCQgnaKToLJ65d6AqfLVKEWvexyS3AS6rbXl+xdpYRMGSRBClPvyj44njOWoxjNdL/H9UNg==", + "dev": true, + "license": "Apache-2.0", + "bin": { + "playwright-core": "cli.js" + }, + "engines": { + "node": ">=18" + } + }, + "node_modules/punycode": { + "version": "2.3.1", + "resolved": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz", + "integrity": "sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/range-parser": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.0.tgz", + "integrity": "sha512-kA5WQoNVo4t9lNx2kQNFCxKeBl5IbbSNBl1M/tLkw9WCn+hxNBAW5Qh8gdhs63CJnhjJ2zQWFoqPJP2sK1AV5A==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/rc": { + "version": "1.2.8", + "resolved": "https://registry.npmjs.org/rc/-/rc-1.2.8.tgz", + "integrity": "sha512-y3bGgqKj3QBdxLbLkomlohkvsA8gdAiUQlSBJnBhfn+BPxg4bc62d8TcBW15wavDfgexCgccckhcZvywyQYPOw==", + "dev": true, + "license": "(BSD-2-Clause OR MIT OR Apache-2.0)", + "dependencies": { + "deep-extend": "^0.6.0", + "ini": "~1.3.0", + "minimist": "^1.2.0", + "strip-json-comments": "~2.0.1" + }, + "bin": { + "rc": "cli.js" + } + }, + "node_modules/registry-auth-token": { + "version": "3.3.2", + "resolved": "https://registry.npmjs.org/registry-auth-token/-/registry-auth-token-3.3.2.tgz", + "integrity": "sha512-JL39c60XlzCVgNrO+qq68FoNb56w/m7JYvGR2jT5iR1xBrUA3Mfx5Twk5rqTThPmQKMWydGmq8oFtDlxfrmxnQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "rc": "^1.1.6", + "safe-buffer": "^5.0.1" + } + }, + "node_modules/registry-url": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/registry-url/-/registry-url-3.1.0.tgz", + "integrity": "sha512-ZbgR5aZEdf4UKZVBPYIgaglBmSF2Hi94s2PcIHhRGFjKYu+chjJdYfHn4rt3hB6eCKLJ8giVIIfgMa1ehDfZKA==", + "dev": true, + "license": "MIT", + "dependencies": { + "rc": "^1.0.1" + }, + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/require-from-string": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz", + "integrity": "sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/safe-buffer": { + "version": "5.2.1", + "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz", + "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==", + "dev": true, + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/feross" + }, + { + "type": "patreon", + "url": "https://www.patreon.com/feross" + }, + { + "type": "consulting", + "url": "https://feross.org/support" + } + ], + "license": "MIT" + }, + "node_modules/serve": { + "version": "14.2.5", + "resolved": "https://registry.npmjs.org/serve/-/serve-14.2.5.tgz", + "integrity": "sha512-Qn/qMkzCcMFVPb60E/hQy+iRLpiU8PamOfOSYoAHmmF+fFFmpPpqa6Oci2iWYpTdOUM3VF+TINud7CfbQnsZbA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@zeit/schemas": "2.36.0", + "ajv": "8.12.0", + "arg": "5.0.2", + "boxen": "7.0.0", + "chalk": "5.0.1", + "chalk-template": "0.4.0", + "clipboardy": "3.0.0", + "compression": "1.8.1", + "is-port-reachable": "4.0.0", + "serve-handler": "6.1.6", + "update-check": "1.5.4" + }, + "bin": { + "serve": "build/main.js" + }, + "engines": { + "node": ">= 14" + } + }, + "node_modules/serve-handler": { + "version": "6.1.6", + "resolved": "https://registry.npmjs.org/serve-handler/-/serve-handler-6.1.6.tgz", + "integrity": "sha512-x5RL9Y2p5+Sh3D38Fh9i/iQ5ZK+e4xuXRd/pGbM4D13tgo/MGwbttUk8emytcr1YYzBYs+apnUngBDFYfpjPuQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "bytes": "3.0.0", + "content-disposition": "0.5.2", + "mime-types": "2.1.18", + "minimatch": "3.1.2", + "path-is-inside": "1.0.2", + "path-to-regexp": "3.3.0", + "range-parser": "1.2.0" + } + }, + "node_modules/serve-handler/node_modules/bytes": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/bytes/-/bytes-3.0.0.tgz", + "integrity": "sha512-pMhOfFDPiv9t5jjIXkHosWmkSyQbvsgEVNkz0ERHbuLh2T/7j4Mqqpz523Fe8MVY89KC6Sh/QfS2sM+SjgFDcw==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/shebang-command": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz", + "integrity": "sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==", + "dev": true, + "license": "MIT", + "dependencies": { + "shebang-regex": "^3.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/shebang-regex": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz", + "integrity": "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/signal-exit": { + "version": "3.0.7", + "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", + "integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==", + "dev": true, + "license": "ISC" + }, + "node_modules/string-width": { + "version": "5.1.2", + "resolved": "https://registry.npmjs.org/string-width/-/string-width-5.1.2.tgz", + "integrity": "sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==", + "dev": true, + "license": "MIT", + "dependencies": { + "eastasianwidth": "^0.2.0", + "emoji-regex": "^9.2.2", + "strip-ansi": "^7.0.1" + }, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/strip-ansi": { + "version": "7.1.2", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.1.2.tgz", + "integrity": "sha512-gmBGslpoQJtgnMAvOVqGZpEz9dyoKTCzy2nfz/n8aIFhN/jCE/rCmcxabB6jOOHV+0WNnylOxaxBQPSvcWklhA==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-regex": "^6.0.1" + }, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/strip-ansi?sponsor=1" + } + }, + "node_modules/strip-final-newline": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/strip-final-newline/-/strip-final-newline-2.0.0.tgz", + "integrity": "sha512-BrpvfNAE3dcvq7ll3xVumzjKjZQ5tI1sEUIKr3Uoks0XUl45St3FlatVqef9prk4jRDzhW6WZg+3bk93y6pLjA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/strip-json-comments": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-2.0.1.tgz", + "integrity": "sha512-4gB8na07fecVVkOI6Rs4e7T6NOTki5EmL7TUduTs6bu3EdnSycntVJ4re8kgZA+wx9IueI2Y11bfbgwtzuE0KQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/supports-color": { + "version": "7.2.0", + "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz", + "integrity": "sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==", + "dev": true, + "license": "MIT", + "dependencies": { + "has-flag": "^4.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/type-fest": { + "version": "2.19.0", + "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-2.19.0.tgz", + "integrity": "sha512-RAH822pAdBgcNMAfWnCBU3CFZcfZ/i1eZjwFU/dsLKumyuuP3niueg2UAukXYF0E2AAoc82ZSSf9J0WQBinzHA==", + "dev": true, + "license": "(MIT OR CC0-1.0)", + "engines": { + "node": ">=12.20" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/update-check": { + "version": "1.5.4", + "resolved": "https://registry.npmjs.org/update-check/-/update-check-1.5.4.tgz", + "integrity": "sha512-5YHsflzHP4t1G+8WGPlvKbJEbAJGCgw+Em+dGR1KmBUbr1J36SJBqlHLjR7oob7sco5hWHGQVcr9B2poIVDDTQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "registry-auth-token": "3.3.2", + "registry-url": "3.1.0" + } + }, + "node_modules/uri-js": { + "version": "4.4.1", + "resolved": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz", + "integrity": "sha512-7rKUyy33Q1yc98pQ1DAmLtwX109F7TIfWlW1Ydo8Wl1ii1SeHieeh0HHfPeL2fMXK6z0s8ecKs9frCuLJvndBg==", + "dev": true, + "license": "BSD-2-Clause", + "dependencies": { + "punycode": "^2.1.0" + } + }, + "node_modules/vary": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz", + "integrity": "sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/which": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz", + "integrity": "sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==", + "dev": true, + "license": "ISC", + "dependencies": { + "isexe": "^2.0.0" + }, + "bin": { + "node-which": "bin/node-which" + }, + "engines": { + "node": ">= 8" + } + }, + "node_modules/widest-line": { + "version": "4.0.1", + "resolved": "https://registry.npmjs.org/widest-line/-/widest-line-4.0.1.tgz", + "integrity": "sha512-o0cyEG0e8GPzT4iGHphIOh0cJOV8fivsXxddQasHPHfoZf1ZexrfeA21w2NaEN1RHE+fXlfISmOE8R9N3u3Qig==", + "dev": true, + "license": "MIT", + "dependencies": { + "string-width": "^5.0.1" + }, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/wrap-ansi": { + "version": "8.1.0", + "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-8.1.0.tgz", + "integrity": "sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "ansi-styles": "^6.1.0", + "string-width": "^5.0.1", + "strip-ansi": "^7.0.1" + }, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/wrap-ansi?sponsor=1" + } + } + } +} diff --git a/license-exceptions/package.json b/license-exceptions/package.json new file mode 100644 index 00000000..25cbd6ec --- /dev/null +++ b/license-exceptions/package.json @@ -0,0 +1,21 @@ +{ + "name": "license-exceptions", + "version": "1.0.0", + "description": "CNCF License Exceptions site and tooling", + "private": true, + "scripts": { + "test": "playwright test", + "test:headed": "playwright test --headed", + "test:debug": "playwright test --debug", + "serve": "serve -l 3000 .", + "generate": "node scripts/generate-all.js" + }, + "keywords": [], + "author": "CNCF", + "license": "Apache-2.0", + "type": "commonjs", + "devDependencies": { + "@playwright/test": "^1.58.1", + "serve": "^14.2.5" + } +} diff --git a/license-exceptions/playwright.config.js b/license-exceptions/playwright.config.js new file mode 100644 index 00000000..f4f6f7b7 --- /dev/null +++ b/license-exceptions/playwright.config.js @@ -0,0 +1,56 @@ +// @ts-check +const { defineConfig } = require('@playwright/test'); + +/** + * Playwright configuration for CNCF License Exceptions E2E tests + * @see https://playwright.dev/docs/test-configuration + */ +module.exports = defineConfig({ + testDir: './tests', + + // Run tests in parallel + fullyParallel: true, + + // Fail the build on CI if you accidentally left test.only in the source code + forbidOnly: !!process.env.CI, + + // Retry on CI only + retries: process.env.CI ? 2 : 0, + + // Opt out of parallel tests on CI for stability + workers: process.env.CI ? 1 : undefined, + + // Reporter to use + reporter: process.env.CI ? 'github' : 'list', + + // Shared settings for all projects + use: { + // Base URL for the static site + baseURL: 'http://localhost:3000', + + // Collect trace when retrying the failed test + trace: 'on-first-retry', + + // Take screenshot on failure + screenshot: 'only-on-failure', + }, + + // Configure projects for Chromium only (lightweight for CI) + projects: [ + { + name: 'chromium', + use: { + browserName: 'chromium', + }, + }, + ], + + // Run local dev server before starting tests + // Use python http.server which doesn't rewrite URLs + webServer: { + command: 'python3 -m http.server 3000', + url: 'http://localhost:3000', + reuseExistingServer: !process.env.CI, + timeout: 30000, + }, +}); diff --git a/license-exceptions/schema/exception.schema.json b/license-exceptions/schema/exception.schema.json index b16dbace..3e0add44 100644 --- a/license-exceptions/schema/exception.schema.json +++ b/license-exceptions/schema/exception.schema.json @@ -36,6 +36,8 @@ "approvedDate": { "type": "string", "format": "date" }, "issueUrl": { "type": "string", "format": "uri" }, "status": { "type": "string", "enum": ["approved", "allowlisted", "apache-2.0"] }, + "scope": { "type": "string", "description": "Usage context and codebase area, e.g., 'build dependency, dynamically linked'" }, + "results": { "type": "string", "format": "uri", "description": "Link to results documentation (Google Doc or GitHub issue)" }, "comment": { "type": "string" } }, "required": ["id", "package", "license", "status"] diff --git a/license-exceptions/site/app.js b/license-exceptions/site/app.js index 18d4ee1f..62bf1319 100644 --- a/license-exceptions/site/app.js +++ b/license-exceptions/site/app.js @@ -8,6 +8,7 @@ // State let data = null; let filteredExceptions = []; + let currentSort = { column: 'date', direction: 'desc' }; // DOM Elements const elements = { @@ -18,7 +19,6 @@ sortBy: document.getElementById('sort-by'), clearFilters: document.getElementById('clear-filters'), resultsCount: document.getElementById('results-count'), - blanketCards: document.getElementById('blanket-cards'), tableBody: document.getElementById('exceptions-tbody'), noResults: document.getElementById('no-results'), downloadCsv: document.getElementById('download-csv'), @@ -38,7 +38,11 @@ // Fetch and initialize data async function init() { try { - const response = await fetch('../exceptions.json'); + // Try same-directory first (deployed), fall back to parent (local dev) + let response = await fetch('exceptions.json'); + if (!response.ok) { + response = await fetch('../exceptions.json'); + } if (!response.ok) { throw new Error(`HTTP error! status: ${response.status}`); } @@ -51,9 +55,6 @@ // Populate filters populateFilters(); - // Render blanket exceptions - renderBlanketExceptions(); - // Initial render applyFiltersAndRender(); @@ -98,44 +99,29 @@ }); } - // Render blanket exceptions as cards - function renderBlanketExceptions() { - if (!data.blanketExceptions || data.blanketExceptions.length === 0) { - document.getElementById('blanket-exceptions').style.display = 'none'; - return; - } - - const html = data.blanketExceptions.map(blanket => ` -
-

${escapeHtml(blanket.name)}

-

${escapeHtml(blanket.description)}

-
- Scope: ${escapeHtml(blanket.scope)} - Approved: ${escapeHtml(blanket.approvedDate)} -
-
- ${blanket.licenses.map(l => `${escapeHtml(l)}`).join('')} -
- ${blanket.documentUrl ? `

View Documentation

` : ''} -
- `).join(''); - - elements.blanketCards.innerHTML = html; - } - // Apply filters and render table function applyFiltersAndRender() { const searchTerm = elements.search.value.toLowerCase().trim(); const licenseFilter = elements.licenseFilter.value; const statusFilter = elements.statusFilter.value; const yearFilter = elements.yearFilter.value; - const sortBy = elements.sortBy.value; // Filter filteredExceptions = data.exceptions.filter(exc => { - // Search filter - if (searchTerm && !exc.package.toLowerCase().includes(searchTerm)) { - return false; + // Search filter - search across all fields + if (searchTerm) { + const searchableText = [ + exc.package, + exc.license, + exc.status, + exc.scope || '', + exc.approvedDate || '', + exc.comment || '' + ].join(' ').toLowerCase(); + + if (!searchableText.includes(searchTerm)) { + return false; + } } // License filter @@ -159,27 +145,85 @@ return true; }); - // Sort + // Sort based on current sort state + sortExceptions(); + + // Render + renderTable(); + updateResultsCount(); + updateSortIndicators(); + } + + // Sort exceptions based on current sort state + function sortExceptions() { + const { column, direction } = currentSort; + const modifier = direction === 'asc' ? 1 : -1; + filteredExceptions.sort((a, b) => { - switch (sortBy) { - case 'date-desc': - return (b.approvedDate || '').localeCompare(a.approvedDate || ''); - case 'date-asc': - return (a.approvedDate || '').localeCompare(b.approvedDate || ''); - case 'package-asc': - return a.package.toLowerCase().localeCompare(b.package.toLowerCase()); - case 'package-desc': - return b.package.toLowerCase().localeCompare(a.package.toLowerCase()); - case 'license-asc': - return a.license.localeCompare(b.license); + let valA, valB; + + switch (column) { + case 'package': + valA = a.package.toLowerCase(); + valB = b.package.toLowerCase(); + break; + case 'license': + valA = a.license.toLowerCase(); + valB = b.license.toLowerCase(); + break; + case 'status': + valA = a.status.toLowerCase(); + valB = b.status.toLowerCase(); + break; + case 'date': + valA = a.approvedDate || ''; + valB = b.approvedDate || ''; + break; default: return 0; } + + if (valA < valB) return -1 * modifier; + if (valA > valB) return 1 * modifier; + return 0; }); + } - // Render - renderTable(); - updateResultsCount(); + // Handle column header click for sorting + function handleColumnSort(column) { + if (currentSort.column === column) { + // Toggle direction if same column + currentSort.direction = currentSort.direction === 'asc' ? 'desc' : 'asc'; + } else { + // New column, default to ascending (except date which defaults to descending) + currentSort.column = column; + currentSort.direction = column === 'date' ? 'desc' : 'asc'; + } + + // Update the dropdown to match + const sortValue = `${column}-${currentSort.direction}`; + if (elements.sortBy.querySelector(`option[value="${sortValue}"]`)) { + elements.sortBy.value = sortValue; + } + + applyFiltersAndRender(); + } + + // Update sort indicators in table headers + function updateSortIndicators() { + const headers = document.querySelectorAll('#exceptions-table th.sortable'); + headers.forEach(header => { + const column = header.dataset.sort; + const indicator = header.querySelector('.sort-indicator'); + + if (column === currentSort.column) { + indicator.textContent = currentSort.direction === 'asc' ? ' \u25B2' : ' \u25BC'; + header.classList.add('sorted'); + } else { + indicator.textContent = ''; + header.classList.remove('sorted'); + } + }); } // Render the exceptions table @@ -195,13 +239,16 @@ const html = filteredExceptions.map(exc => { const packageHtml = formatPackage(exc.package); const statusClass = getStatusClass(exc.status); + const resultsHtml = formatResults(exc.results); return ` ${packageHtml} ${escapeHtml(exc.license)} + ${escapeHtml(exc.scope || '-')} ${escapeHtml(exc.status)} ${escapeHtml(exc.approvedDate || '-')} + ${resultsHtml} `; }).join(''); @@ -218,6 +265,22 @@ return `${escapeHtml(packageName)}`; } + // Format results link (Google Doc or GitHub issue) + function formatResults(resultsUrl) { + if (!resultsUrl) { + return '-'; + } + + let linkText = 'View'; + if (resultsUrl.includes('docs.google.com')) { + linkText = 'Google Doc'; + } else if (resultsUrl.includes('github.com')) { + linkText = 'GitHub Issue'; + } + + return `${linkText}`; + } + // Get CSS class for status badge function getStatusClass(status) { switch (status) { @@ -251,17 +314,20 @@ elements.statusFilter.value = ''; elements.yearFilter.value = ''; elements.sortBy.value = 'date-desc'; + currentSort = { column: 'date', direction: 'desc' }; applyFiltersAndRender(); } // Download CSV function downloadCsv() { - const headers = ['Package', 'License', 'Status', 'Approved Date', 'Comment']; + const headers = ['Package', 'License', 'Scope', 'Status', 'Approved Date', 'Results', 'Comment']; const rows = filteredExceptions.map(exc => [ exc.package, exc.license, + exc.scope || '', exc.status, exc.approvedDate || '', + exc.results || '', exc.comment || '' ]); @@ -299,8 +365,25 @@ elements.statusFilter.addEventListener('change', applyFiltersAndRender); elements.yearFilter.addEventListener('change', applyFiltersAndRender); - // Sort - elements.sortBy.addEventListener('change', applyFiltersAndRender); + // Sort dropdown + elements.sortBy.addEventListener('change', function() { + const value = this.value; + const parts = value.split('-'); + if (parts.length >= 2) { + currentSort.column = parts[0]; + currentSort.direction = parts[parts.length - 1]; + applyFiltersAndRender(); + } + }); + + // Clickable column headers + const sortableHeaders = document.querySelectorAll('#exceptions-table th.sortable'); + sortableHeaders.forEach(header => { + header.addEventListener('click', () => { + const column = header.dataset.sort; + handleColumnSort(column); + }); + }); // Clear filters elements.clearFilters.addEventListener('click', clearFilters); diff --git a/license-exceptions/site/blanket-app.js b/license-exceptions/site/blanket-app.js new file mode 100644 index 00000000..72235170 --- /dev/null +++ b/license-exceptions/site/blanket-app.js @@ -0,0 +1,99 @@ +/** + * CNCF License Exceptions - Blanket Exceptions Page + */ + +(function () { + 'use strict'; + + // DOM Elements + const elements = { + blanketCards: document.getElementById('blanket-cards'), + noResults: document.getElementById('no-results'), + dataVersion: document.getElementById('data-version'), + lastUpdated: document.getElementById('last-updated'), + }; + + // Escape HTML to prevent XSS + function escapeHtml(text) { + if (text === null || text === undefined) return ''; + const div = document.createElement('div'); + div.textContent = String(text); + return div.innerHTML; + } + + // Fetch and initialize data + async function init() { + try { + // Try same-directory first (deployed), fall back to parent (local dev) + let response = await fetch('exceptions.json'); + if (!response.ok) { + response = await fetch('../exceptions.json'); + } + if (!response.ok) { + throw new Error(`HTTP error! status: ${response.status}`); + } + const data = await response.json(); + + // Update metadata + elements.dataVersion.textContent = data.version || '-'; + elements.lastUpdated.textContent = data.lastUpdated || '-'; + + // Render blanket exceptions + renderBlanketExceptions(data.blanketExceptions || []); + } catch (error) { + console.error('Failed to load data:', error); + elements.blanketCards.innerHTML = ` +
+ Failed to load data. Please try refreshing the page. +
+ `; + } + } + + // Render blanket exceptions as cards + function renderBlanketExceptions(blanketExceptions) { + if (!blanketExceptions || blanketExceptions.length === 0) { + elements.noResults.style.display = 'block'; + return; + } + + const html = blanketExceptions.map(blanket => ` +
+

${escapeHtml(blanket.name)}

+

${escapeHtml(blanket.description)}

+
+
+ Scope: + ${escapeHtml(blanket.scope || 'Not specified')} +
+
+ Approved: + ${escapeHtml(blanket.approvedDate)} +
+
+
+ Licenses: +
+ ${blanket.licenses.map(l => `${escapeHtml(l)}`).join('')} +
+
+ ${blanket.documentUrl ? ` +
+ + View Documentation + +
+ ` : ''} +
+ `).join(''); + + elements.blanketCards.innerHTML = html; + } + + // Initialize on DOM ready + if (document.readyState === 'loading') { + document.addEventListener('DOMContentLoaded', init); + } else { + init(); + } +})(); diff --git a/license-exceptions/site/blanket-exceptions.html b/license-exceptions/site/blanket-exceptions.html new file mode 100644 index 00000000..25cea98d --- /dev/null +++ b/license-exceptions/site/blanket-exceptions.html @@ -0,0 +1,64 @@ + + + + + + Blanket Exceptions - CNCF License Exceptions + + + +
+
+

CNCF License Exceptions

+

Approved license exceptions for CNCF projects

+
+
+ + + +
+ +
+
+

Blanket Exceptions

+

+ Blanket exceptions are pre-approved license exceptions that apply broadly to specific use cases. + These don't require individual package approval when the criteria are met. +

+
+
+ +
+ +
+
+ + + + + + diff --git a/license-exceptions/site/index.html b/license-exceptions/site/index.html index 29df5835..9f4b7830 100644 --- a/license-exceptions/site/index.html +++ b/license-exceptions/site/index.html @@ -14,13 +14,22 @@

CNCF License Exceptions

+ +
- - + +
@@ -60,28 +69,25 @@

CNCF License Exceptions

+ + +
- -
-

Blanket Exceptions

-
- -
-
-
- - - - + + + + + + @@ -101,7 +107,7 @@

Blanket Exceptions

View on GitHub - + Download JSON diff --git a/license-exceptions/site/styles.css b/license-exceptions/site/styles.css index 0f96112d..a842f1d8 100644 --- a/license-exceptions/site/styles.css +++ b/license-exceptions/site/styles.css @@ -59,6 +59,45 @@ body { font-size: 1.1rem; } +/* Navigation */ +.nav { + background: var(--color-bg-white); + border-bottom: 1px solid var(--color-border); + box-shadow: var(--shadow-sm); +} + +.nav-links { + list-style: none; + margin: 0; + padding: 0; + display: flex; + gap: 0; +} + +.nav-links li { + margin: 0; +} + +.nav-links a { + display: block; + padding: 1rem 1.5rem; + color: var(--color-text); + text-decoration: none; + font-weight: 500; + border-bottom: 3px solid transparent; + transition: color 0.2s, border-color 0.2s, background-color 0.2s; +} + +.nav-links a:hover { + color: var(--cncf-blue); + background-color: rgba(68, 108, 169, 0.05); +} + +.nav-links a.active { + color: var(--cncf-blue); + border-bottom-color: var(--cncf-blue); +} + /* Filters */ .filters { background: var(--color-bg-white); @@ -268,6 +307,102 @@ body { opacity: 0.8; } +/* Blanket Exceptions Page */ +.blanket-exceptions-page { + margin: 2rem 0; +} + +.blanket-exceptions-page .page-header { + margin-bottom: 2rem; +} + +.blanket-exceptions-page .page-header h2 { + font-size: 1.75rem; + margin: 0 0 0.5rem; + color: var(--cncf-blue); +} + +.blanket-exceptions-page .page-description { + color: var(--color-text-muted); + font-size: 1rem; + margin: 0; + max-width: 800px; +} + +.blanket-card-large { + padding: 2rem; +} + +.blanket-card-large h3 { + font-size: 1.5rem; + margin: 0 0 1rem; +} + +.blanket-card-large .description { + font-size: 1rem; + line-height: 1.6; + margin: 0 0 1.5rem; +} + +.blanket-card-large .meta { + display: flex; + flex-direction: column; + gap: 0.5rem; + margin-bottom: 1.5rem; +} + +.blanket-card-large .meta-item { + font-size: 0.9375rem; +} + +.blanket-card-large .licenses { + margin-bottom: 1.5rem; +} + +.blanket-card-large .licenses strong { + display: block; + margin-bottom: 0.5rem; + font-size: 0.875rem; + opacity: 0.9; +} + +.blanket-card-large .license-tags { + display: flex; + flex-wrap: wrap; + gap: 0.5rem; +} + +.blanket-card-large .documentation { + padding-top: 1rem; + border-top: 1px solid rgba(255, 255, 255, 0.2); +} + +.blanket-card-large .doc-link { + display: inline-flex; + align-items: center; + gap: 0.5rem; + color: white; + text-decoration: none; + font-weight: 500; + padding: 0.5rem 1rem; + background: rgba(255, 255, 255, 0.15); + border-radius: var(--radius-sm); + transition: background-color 0.2s; +} + +.blanket-card-large .doc-link:hover { + background: rgba(255, 255, 255, 0.25); + opacity: 1; +} + +.error-message { + text-align: center; + padding: 2rem; + color: #dc3545; + background: #fff; + border-radius: var(--radius-md); +} + /* Results Table */ .results { background: var(--color-bg-white); @@ -301,6 +436,25 @@ body { white-space: nowrap; } +#exceptions-table th.sortable { + cursor: pointer; + user-select: none; + transition: background-color 0.2s; +} + +#exceptions-table th.sortable:hover { + background-color: var(--cncf-blue-dark); +} + +#exceptions-table th.sortable.sorted { + background-color: var(--cncf-blue-dark); +} + +#exceptions-table th .sort-indicator { + font-size: 0.75rem; + opacity: 0.9; +} + #exceptions-table td { padding: 0.875rem 1rem; border-bottom: 1px solid var(--color-border); @@ -330,6 +484,26 @@ body { word-break: break-word; } +/* Results Link */ +.results-link { + display: inline-flex; + align-items: center; + gap: 0.25rem; + color: var(--cncf-blue); + text-decoration: none; + font-size: 0.875rem; + font-weight: 500; + padding: 0.25rem 0.5rem; + border-radius: var(--radius-sm); + background-color: rgba(68, 108, 169, 0.08); + transition: background-color 0.2s, color 0.2s; +} + +.results-link:hover { + background-color: rgba(68, 108, 169, 0.15); + text-decoration: none; +} + /* License Badge */ .license-badge { display: inline-block; diff --git a/license-exceptions/tests/blanket-exceptions.spec.js b/license-exceptions/tests/blanket-exceptions.spec.js new file mode 100644 index 00000000..03e774c2 --- /dev/null +++ b/license-exceptions/tests/blanket-exceptions.spec.js @@ -0,0 +1,89 @@ +// @ts-check +const { test, expect } = require('@playwright/test'); + +/** + * E2E tests for CNCF License Exceptions - Blanket Exceptions page + */ + +test.describe('Blanket Exceptions Page', () => { + test.beforeEach(async ({ page }) => { + await page.goto('/site/blanket-exceptions.html'); + }); + + test('page loads successfully with title', async ({ page }) => { + await expect(page).toHaveTitle('Blanket Exceptions - CNCF License Exceptions'); + await expect(page.locator('h1')).toHaveText('CNCF License Exceptions'); + await expect(page.locator('h2')).toHaveText('Blanket Exceptions'); + }); + + test('page has description text', async ({ page }) => { + await expect(page.locator('.page-description')).toContainText('pre-approved license exceptions'); + }); + + test('navigation links are present and correct', async ({ page }) => { + const navLinks = page.locator('.nav-links a'); + await expect(navLinks).toHaveCount(2); + + await expect(navLinks.nth(0)).toHaveText('Package Exceptions'); + await expect(navLinks.nth(1)).toHaveText('Blanket Exceptions'); + await expect(navLinks.nth(1)).toHaveClass(/active/); + }); + + test('can navigate to package exceptions page', async ({ page }) => { + await page.click('a:has-text("Package Exceptions")'); + // Check for index.html or just /site/ path + await expect(page).toHaveURL(/index\.html|\/site\/?$/); + }); + + test('blanket exception cards load', async ({ page }) => { + // Wait a moment for JS to populate + await page.waitForTimeout(1000); + + // Either cards are shown or no-results message + const cards = page.locator('#blanket-cards .blanket-card'); + const noResults = page.locator('#no-results'); + + const cardsCount = await cards.count(); + const noResultsVisible = await noResults.isVisible(); + + // One or the other should be true + expect(cardsCount > 0 || noResultsVisible).toBe(true); + }); + + test('footer displays metadata', async ({ page }) => { + // Wait for data to load + await page.waitForTimeout(1000); + + await expect(page.locator('#data-version')).not.toHaveText('-'); + await expect(page.locator('#last-updated')).not.toHaveText('-'); + }); + + test('GitHub link is present in footer', async ({ page }) => { + // Use footer-specific selector + const githubLink = page.locator('.footer a[href*="github.com/cncf/foundation"]'); + await expect(githubLink).toBeVisible(); + }); + + test('JSON download link is present', async ({ page }) => { + const jsonLink = page.locator('a[download="cncf-license-exceptions.json"]'); + await expect(jsonLink).toBeVisible(); + }); +}); + +test.describe('Navigation Between Pages', () => { + test('can navigate from package to blanket and back', async ({ page }) => { + // Start at package exceptions + await page.goto('/site/index.html'); + await expect(page.locator('.nav-links a.active')).toHaveText('Package Exceptions'); + + // Navigate to blanket + await page.click('a:has-text("Blanket Exceptions")'); + await expect(page).toHaveURL(/blanket-exceptions/); + await expect(page.locator('.nav-links a.active')).toHaveText('Blanket Exceptions'); + + // Navigate back + await page.click('a:has-text("Package Exceptions")'); + await expect(page).toHaveURL(/index\.html|\/site\/?$/); + await expect(page.locator('.nav-links a.active')).toHaveText('Package Exceptions'); + }); +}); diff --git a/license-exceptions/tests/package-exceptions.spec.js b/license-exceptions/tests/package-exceptions.spec.js new file mode 100644 index 00000000..c27e5b8d --- /dev/null +++ b/license-exceptions/tests/package-exceptions.spec.js @@ -0,0 +1,249 @@ +// @ts-check +const { test, expect } = require('@playwright/test'); + +/** + * E2E tests for CNCF License Exceptions - Package Exceptions page + */ + +// Helper to wait for data to load +async function waitForDataLoad(page) { + // Wait for the results count to show actual data (not "Loading...") + await expect(page.locator('#results-count')).not.toHaveText('Loading...', { timeout: 10000 }); +} + +test.describe('Package Exceptions Page', () => { + test.beforeEach(async ({ page }) => { + await page.goto('/site/index.html'); + }); + + test('page loads successfully with title', async ({ page }) => { + await expect(page).toHaveTitle('CNCF License Exceptions'); + await expect(page.locator('h1')).toHaveText('CNCF License Exceptions'); + }); + + test('data loads and displays in table', async ({ page }) => { + await waitForDataLoad(page); + + // Check that we have rows in the table + const rows = page.locator('#exceptions-tbody tr'); + await expect(rows).not.toHaveCount(0); + + // Verify results count shows a number + const resultsText = await page.locator('#results-count').textContent(); + expect(resultsText).toMatch(/\d+ exceptions/); + }); + + test('navigation links are present and correct', async ({ page }) => { + const navLinks = page.locator('.nav-links a'); + await expect(navLinks).toHaveCount(2); + + await expect(navLinks.nth(0)).toHaveText('Package Exceptions'); + await expect(navLinks.nth(0)).toHaveClass(/active/); + + await expect(navLinks.nth(1)).toHaveText('Blanket Exceptions'); + }); + + test('can navigate to blanket exceptions page', async ({ page }) => { + await page.click('a:has-text("Blanket Exceptions")'); + await expect(page).toHaveURL(/blanket-exceptions/); + await expect(page.locator('h1')).toHaveText('CNCF License Exceptions'); + }); +}); + +test.describe('Search Functionality', () => { + test.beforeEach(async ({ page }) => { + await page.goto('/site/index.html'); + await waitForDataLoad(page); + }); + + test('search filters results', async ({ page }) => { + // Get initial count + const initialText = await page.locator('#results-count').textContent(); + const initialMatch = initialText?.match(/(\d+) exceptions/); + const initialCount = initialMatch ? parseInt(initialMatch[1]) : 0; + + // Type a search term + await page.fill('#search', 'MIT'); + + // Wait for debounce and filtering + await page.waitForTimeout(400); + + // Check that results are filtered + const filteredText = await page.locator('#results-count').textContent(); + expect(filteredText).toMatch(/\d+ of \d+ exceptions|\d+ exceptions/); + }); + + test('search with no results shows message', async ({ page }) => { + await page.fill('#search', 'xyznonexistent123456789'); + await page.waitForTimeout(400); + + await expect(page.locator('#no-results')).toBeVisible(); + await expect(page.locator('#results-count')).toHaveText(/0 of \d+ exceptions/); + }); + + test('clear filters button resets search', async ({ page }) => { + await page.fill('#search', 'MIT'); + await page.waitForTimeout(400); + + await page.click('#clear-filters'); + + await expect(page.locator('#search')).toHaveValue(''); + const resultsText = await page.locator('#results-count').textContent(); + expect(resultsText).not.toMatch(/of/); // Should show total, not "X of Y" + }); +}); + +test.describe('Filter Dropdowns', () => { + test.beforeEach(async ({ page }) => { + await page.goto('/site/index.html'); + await waitForDataLoad(page); + }); + + test('license filter has options populated', async ({ page }) => { + const options = page.locator('#license-filter option'); + // Should have more than just "All Licenses" + const count = await options.count(); + expect(count).toBeGreaterThan(1); + }); + + test('status filter works', async ({ page }) => { + await page.selectOption('#status-filter', 'approved'); + + // All visible rows should have "approved" status + const statusBadges = page.locator('#exceptions-tbody .status-badge'); + const count = await statusBadges.count(); + + if (count > 0) { + for (let i = 0; i < Math.min(count, 5); i++) { + await expect(statusBadges.nth(i)).toHaveText('approved'); + } + } + }); + + test('year filter has options populated', async ({ page }) => { + const options = page.locator('#year-filter option'); + const count = await options.count(); + expect(count).toBeGreaterThan(1); + }); + + test('multiple filters can be combined', async ({ page }) => { + await page.selectOption('#status-filter', 'approved'); + await page.waitForTimeout(100); + + const afterStatusText = await page.locator('#results-count').textContent(); + + await page.fill('#search', 'MIT'); + await page.waitForTimeout(400); + + const afterBothText = await page.locator('#results-count').textContent(); + + // Results should be filtered (might be same or different depending on data) + expect(afterBothText).toMatch(/\d+/); + }); +}); + +test.describe('Column Sorting', () => { + test.beforeEach(async ({ page }) => { + await page.goto('/site/index.html'); + await waitForDataLoad(page); + }); + + test('clicking package column header sorts by package', async ({ page }) => { + const packageHeader = page.locator('th[data-sort="package"]'); + + // Click to sort ascending + await packageHeader.click(); + + // Check sort indicator appears + const indicator = packageHeader.locator('.sort-indicator'); + await expect(indicator).toHaveText(/[▲▼]/); + + // Header should have sorted class + await expect(packageHeader).toHaveClass(/sorted/); + }); + + test('clicking same column toggles sort direction', async ({ page }) => { + const packageHeader = page.locator('th[data-sort="package"]'); + + // Click once for ascending + await packageHeader.click(); + const firstIndicator = await packageHeader.locator('.sort-indicator').textContent(); + + // Click again for descending + await packageHeader.click(); + const secondIndicator = await packageHeader.locator('.sort-indicator').textContent(); + + // Direction should change + expect(firstIndicator).not.toEqual(secondIndicator); + }); + + test('sort dropdown stays in sync with column clicks', async ({ page }) => { + const packageHeader = page.locator('th[data-sort="package"]'); + + await packageHeader.click(); + + // Dropdown should reflect the sort + const sortValue = await page.locator('#sort-by').inputValue(); + expect(sortValue).toMatch(/package/); + }); + + test('date column is sorted descending by default', async ({ page }) => { + const dateHeader = page.locator('th[data-sort="date"]'); + const indicator = dateHeader.locator('.sort-indicator'); + + // Should show descending indicator (▼) + await expect(indicator).toHaveText(/▼/); + }); +}); + +test.describe('Download Functionality', () => { + test.beforeEach(async ({ page }) => { + await page.goto('/site/index.html'); + await waitForDataLoad(page); + }); + + test('CSV download button exists', async ({ page }) => { + await expect(page.locator('#download-csv')).toBeVisible(); + await expect(page.locator('#download-csv')).toHaveText('Download CSV'); + }); + + test('JSON download link exists', async ({ page }) => { + const jsonLink = page.locator('a[download="cncf-license-exceptions.json"]'); + await expect(jsonLink).toBeVisible(); + }); + + test('CSV download triggers file download', async ({ page }) => { + // Listen for download event + const downloadPromise = page.waitForEvent('download'); + + await page.click('#download-csv'); + + const download = await downloadPromise; + expect(download.suggestedFilename()).toBe('cncf-license-exceptions.csv'); + }); +}); + +test.describe('Footer Metadata', () => { + test.beforeEach(async ({ page }) => { + await page.goto('/site/index.html'); + await waitForDataLoad(page); + }); + + test('displays data version', async ({ page }) => { + const version = await page.locator('#data-version').textContent(); + expect(version).not.toBe('-'); + expect(version?.length).toBeGreaterThan(0); + }); + + test('displays last updated date', async ({ page }) => { + const lastUpdated = await page.locator('#last-updated').textContent(); + expect(lastUpdated).not.toBe('-'); + expect(lastUpdated).toMatch(/\d{4}-\d{2}-\d{2}/); // YYYY-MM-DD format + }); + + test('GitHub link is present', async ({ page }) => { + // Use footer-specific selector to avoid matching multiple GitHub links + const githubLink = page.locator('.footer a[href*="github.com/cncf/foundation"]'); + await expect(githubLink).toBeVisible(); + }); +}); From 1efeec47b96fe2226aa0864b1e260d994aaee008 Mon Sep 17 00:00:00 2001 From: Jeffrey Sica Date: Wed, 4 Feb 2026 13:37:14 -0600 Subject: [PATCH 12/19] fix(license-exceptions): use deterministic timestamp in SPDX generation The Created timestamp was using current time, causing CI validation to fail because regenerated files always differed. Now uses noon UTC on the lastUpdated date for reproducible output. Signed-off-by: Jeffrey Sica --- license-exceptions/cncf-exceptions-current.spdx | 2 +- license-exceptions/scripts/generate-spdx.js | 8 +++++--- 2 files changed, 6 insertions(+), 4 deletions(-) diff --git a/license-exceptions/cncf-exceptions-current.spdx b/license-exceptions/cncf-exceptions-current.spdx index f5ad4c3b..df467a98 100644 --- a/license-exceptions/cncf-exceptions-current.spdx +++ b/license-exceptions/cncf-exceptions-current.spdx @@ -4,7 +4,7 @@ SPDXID: SPDXRef-DOCUMENT DocumentName: cncf-exceptions-2026-02-02 DocumentNamespace: https://github.com/cncf/foundation/license-exceptions-2026-02-02 Creator: Organization: CNCF -Created: 2026-02-02T03:42:40Z +Created: 2026-02-02T12:00:00Z ##### Package: docker/go-metrics diff --git a/license-exceptions/scripts/generate-spdx.js b/license-exceptions/scripts/generate-spdx.js index 88b021f3..237d5d75 100644 --- a/license-exceptions/scripts/generate-spdx.js +++ b/license-exceptions/scripts/generate-spdx.js @@ -22,9 +22,11 @@ function stripPackagePrefix(packageName) { /** * Generate ISO timestamp for Created field + * Uses lastUpdated date for deterministic output */ -function getISOTimestamp() { - return new Date().toISOString().replace(/\.\d{3}Z$/, 'Z'); +function getISOTimestamp(lastUpdated) { + // Use noon UTC on lastUpdated date for deterministic timestamp + return `${lastUpdated}T12:00:00Z`; } function main() { @@ -41,7 +43,7 @@ function main() { lines.push(`DocumentName: cncf-exceptions-${lastUpdated}`); lines.push(`DocumentNamespace: https://github.com/cncf/foundation/license-exceptions-${lastUpdated}`); lines.push('Creator: Organization: CNCF'); - lines.push(`Created: ${getISOTimestamp()}`); + lines.push(`Created: ${getISOTimestamp(lastUpdated)}`); lines.push(''); // Package entries From 95e7a11a39f531147d8e9f14b0e49d737c9e9ea6 Mon Sep 17 00:00:00 2001 From: Jeffrey Sica Date: Wed, 4 Feb 2026 13:39:18 -0600 Subject: [PATCH 13/19] Update license-exceptions/tests/package-exceptions.spec.js Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Signed-off-by: Jeffrey Sica --- license-exceptions/tests/package-exceptions.spec.js | 2 -- 1 file changed, 2 deletions(-) diff --git a/license-exceptions/tests/package-exceptions.spec.js b/license-exceptions/tests/package-exceptions.spec.js index c27e5b8d..b2665b1d 100644 --- a/license-exceptions/tests/package-exceptions.spec.js +++ b/license-exceptions/tests/package-exceptions.spec.js @@ -130,8 +130,6 @@ test.describe('Filter Dropdowns', () => { await page.selectOption('#status-filter', 'approved'); await page.waitForTimeout(100); - const afterStatusText = await page.locator('#results-count').textContent(); - await page.fill('#search', 'MIT'); await page.waitForTimeout(400); From 4feac202fd5f7b6795e9631f6fcb395c87553dd5 Mon Sep 17 00:00:00 2001 From: Jeffrey Sica Date: Wed, 4 Feb 2026 13:40:42 -0600 Subject: [PATCH 14/19] Update license-exceptions/CNCF-licensing-exceptions.csv Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Signed-off-by: Jeffrey Sica --- license-exceptions/CNCF-licensing-exceptions.csv | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/license-exceptions/CNCF-licensing-exceptions.csv b/license-exceptions/CNCF-licensing-exceptions.csv index ec9e99aa..cfbdf33b 100644 --- a/license-exceptions/CNCF-licensing-exceptions.csv +++ b/license-exceptions/CNCF-licensing-exceptions.csv @@ -28,11 +28,11 @@ hashicorp/serf,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); app hashicorp/vault,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, hashicorp/yamux,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, veraison/go-cose,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -github.com/eclipse/paho.mqtt.golang,EPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12,2022-04-12, -github.com/hashicorp/go-version,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12,2022-04-12, -github.com/hashicorp/raft,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12,2022-04-12, -github.com/hashicorp/raft-boltdb,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12,2022-04-12, -github.com/Microsoft/tslib,0BSD,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12,2022-04-12, +github.com/eclipse/paho.mqtt.golang,EPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +github.com/hashicorp/go-version,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +github.com/hashicorp/raft,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +github.com/hashicorp/raft-boltdb,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +github.com/Microsoft/tslib,0BSD,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, go-version,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, paho.mqtt.golang,EPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, raft,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, From 92d00363c25b292b94cce8f783b3dd61b3bd518e Mon Sep 17 00:00:00 2001 From: Jeffrey Sica Date: Wed, 4 Feb 2026 13:41:40 -0600 Subject: [PATCH 15/19] Update license-exceptions/tests/package-exceptions.spec.js Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Signed-off-by: Jeffrey Sica --- license-exceptions/tests/package-exceptions.spec.js | 5 ----- 1 file changed, 5 deletions(-) diff --git a/license-exceptions/tests/package-exceptions.spec.js b/license-exceptions/tests/package-exceptions.spec.js index b2665b1d..8dba86ad 100644 --- a/license-exceptions/tests/package-exceptions.spec.js +++ b/license-exceptions/tests/package-exceptions.spec.js @@ -57,11 +57,6 @@ test.describe('Search Functionality', () => { }); test('search filters results', async ({ page }) => { - // Get initial count - const initialText = await page.locator('#results-count').textContent(); - const initialMatch = initialText?.match(/(\d+) exceptions/); - const initialCount = initialMatch ? parseInt(initialMatch[1]) : 0; - // Type a search term await page.fill('#search', 'MIT'); From 0368959325064ab2c578c0866318d8b5557e2ab8 Mon Sep 17 00:00:00 2001 From: Jeffrey Sica Date: Wed, 4 Feb 2026 13:43:41 -0600 Subject: [PATCH 16/19] fix(license-exceptions): correct date typo in exception comments Fixed typo '20212-04-12' -> '2022-04-12' in 5 exception comments. Signed-off-by: Jeffrey Sica --- license-exceptions/cncf-exceptions-current.spdx | 10 +++++----- license-exceptions/exceptions.json | 10 +++++----- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/license-exceptions/cncf-exceptions-current.spdx b/license-exceptions/cncf-exceptions-current.spdx index df467a98..b286aaab 100644 --- a/license-exceptions/cncf-exceptions-current.spdx +++ b/license-exceptions/cncf-exceptions-current.spdx @@ -334,7 +334,7 @@ FilesAnalyzed: false PackageLicenseConcluded: EPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12 +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 ##### Package: hashicorp/go-version @@ -345,7 +345,7 @@ FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12 +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 ##### Package: hashicorp/raft @@ -356,7 +356,7 @@ FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12 +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 ##### Package: hashicorp/raft-boltdb @@ -367,7 +367,7 @@ FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12 +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 ##### Package: Microsoft/tslib @@ -378,7 +378,7 @@ FilesAnalyzed: false PackageLicenseConcluded: 0BSD PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12 +PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 ##### Package: go-version diff --git a/license-exceptions/exceptions.json b/license-exceptions/exceptions.json index cb030de1..b5f55b89 100644 --- a/license-exceptions/exceptions.json +++ b/license-exceptions/exceptions.json @@ -257,7 +257,7 @@ "license": "EPL-2.0", "approvedDate": "2022-04-12", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12" }, { "id": "exc-2022-04-12-002", @@ -265,7 +265,7 @@ "license": "MPL-2.0", "approvedDate": "2022-04-12", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12" }, { "id": "exc-2022-04-12-003", @@ -273,7 +273,7 @@ "license": "MPL-2.0", "approvedDate": "2022-04-12", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12" }, { "id": "exc-2022-04-12-004", @@ -281,7 +281,7 @@ "license": "MPL-2.0", "approvedDate": "2022-04-12", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12" }, { "id": "exc-2022-04-12-005", @@ -289,7 +289,7 @@ "license": "0BSD", "approvedDate": "2022-04-12", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 20212-04-12" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12" }, { "id": "exc-2022-04-12-006", From 358aa8a87c102c414a84a3ba449c017700fff5a5 Mon Sep 17 00:00:00 2001 From: Jeffrey Sica Date: Wed, 4 Feb 2026 20:39:10 -0600 Subject: [PATCH 17/19] feat(license-exceptions): add project column, denied status, and backfill data - Add Project column to site UI with filter and sorting support - Add 'denied' status for rejected exception requests (e.g., Liquibase FSL) - Move blanket exceptions to main table with project='All CNCF Projects' - Backfill ~20 exception entries from GitHub issues with scope/results/project - Update GHA workflow to capture scope field and handle denied labels - Update CSV/SPDX generators with new columns (Project, Scope, Status) - Remove top-level nav from main page (blanket exceptions now in main table) - Update README with new field documentation and blanket exception details - Fix tests for removed navigation and improve data loading reliability - Add pretest/posttest hooks to copy exceptions.json for test server Signed-off-by: Jeffrey Sica --- .../workflows/license-exception-approved.yml | 43 +- .../CNCF-licensing-exceptions.csv | 956 ++++---- license-exceptions/README.md | 41 +- .../cncf-exceptions-current.spdx | 2094 +++++++++-------- license-exceptions/exceptions.json | 1360 ++++++++--- license-exceptions/package.json | 8 +- license-exceptions/playwright.config.js | 2 +- .../schema/exception.schema.json | 11 +- license-exceptions/scripts/generate-csv.js | 17 +- license-exceptions/scripts/generate-spdx.js | 7 +- license-exceptions/site/app.js | 56 +- license-exceptions/site/index.html | 19 +- license-exceptions/site/styles.css | 5 + .../tests/blanket-exceptions.spec.js | 17 +- .../tests/package-exceptions.spec.js | 29 +- 15 files changed, 2820 insertions(+), 1845 deletions(-) diff --git a/.github/workflows/license-exception-approved.yml b/.github/workflows/license-exception-approved.yml index 1d967980..cd9ac345 100644 --- a/.github/workflows/license-exception-approved.yml +++ b/.github/workflows/license-exception-approved.yml @@ -1,4 +1,4 @@ -name: License Exception Approved +name: License Exception Decision on: issues: @@ -6,7 +6,7 @@ on: jobs: create-pr: - if: github.event.label.name == 'approved' + if: github.event.label.name == 'approved' || github.event.label.name == 'denied' runs-on: ubuntu-latest permissions: contents: write @@ -30,12 +30,18 @@ jobs: const body = context.payload.issue.body || ''; const issueNumber = context.issue.number; const today = new Date().toISOString().split('T')[0]; + const labelName = context.payload.label.name; + const status = labelName === 'approved' ? 'approved' : 'denied'; // Extract project name const projectMatch = body.match(/For which CNCF project[^]*?\n\n([^\n]+)/); const project = projectMatch ? projectMatch[1].trim() : 'Unknown'; - // Extract component table - parse all columns + // Extract scope/usage context if present + const scopeMatch = body.match(/(?:How|Where|What).*(?:used|usage|scope|context)[^]*?\n\n([^\n]+)/i); + const defaultScope = scopeMatch ? scopeMatch[1].trim() : undefined; + + // Extract component table - parse all columns including scope const tableMatch = body.match(/\|[^\n]*Component[^\n]*\|[\s\S]*?\n\|[-|\s]+\|\n([\s\S]*?)(?=\n\n|\n###|$)/); const newExceptions = []; @@ -45,16 +51,20 @@ jobs: for (const row of rows) { const cells = row.split('|').map(c => c.trim()).filter(c => c); if (cells.length >= 4 && cells[0]) { + // Try to extract scope from table (column 5 if present) or use default + const scope = (cells.length >= 5 && cells[4]) ? cells[4] : defaultScope; + newExceptions.push({ id: `exc-${today}-${String(idx).padStart(3, '0')}`, package: cells[0], packageUrl: cells[1] || undefined, license: cells[3], - requestingProject: project, + project: project, approvedDate: today, issueUrl: `https://github.com/${context.repo.owner}/${context.repo.repo}/issues/${issueNumber}`, - status: 'approved', - comment: cells[4] || undefined + status: status, + scope: scope, + comment: cells.length >= 6 ? cells[5] : undefined }); idx++; } @@ -68,6 +78,7 @@ jobs: core.setOutput('project', project); core.setOutput('count', newExceptions.length); core.setOutput('date', today); + core.setOutput('status', status); - name: Update exceptions.json run: | @@ -97,18 +108,19 @@ jobs: with: token: ${{ secrets.GITHUB_TOKEN }} branch: license-exception-${{ github.event.issue.number }} - title: "Add license exceptions for ${{ steps.parse.outputs.project }} (#${{ github.event.issue.number }})" + title: "Record license exception decision (${{ steps.parse.outputs.status }}) for ${{ steps.parse.outputs.project }} (#${{ github.event.issue.number }})" body: | - ## License Exception Approval + ## License Exception Decision - This PR adds the license exceptions approved in #${{ github.event.issue.number }}. + This PR records the license exception decision from #${{ github.event.issue.number }}. **Project:** ${{ steps.parse.outputs.project }} - **Approval Date:** ${{ steps.parse.outputs.date }} - **Exceptions Added:** ${{ steps.parse.outputs.count }} + **Decision:** ${{ steps.parse.outputs.status }} + **Decision Date:** ${{ steps.parse.outputs.date }} + **Exceptions Recorded:** ${{ steps.parse.outputs.count }} Closes #${{ github.event.issue.number }} - commit-message: "feat(license): add exceptions for ${{ steps.parse.outputs.project }} (#${{ github.event.issue.number }})" + commit-message: "feat(license): record ${{ steps.parse.outputs.status }} exceptions for ${{ steps.parse.outputs.project }} (#${{ github.event.issue.number }})" add-paths: | license-exceptions/exceptions.json license-exceptions/CNCF-licensing-exceptions.csv @@ -120,12 +132,17 @@ jobs: script: | const prNumber = '${{ steps.create-pr.outputs.pull-request-number }}'; const prUrl = '${{ steps.create-pr.outputs.pull-request-url }}'; + const status = '${{ steps.parse.outputs.status }}'; if (prNumber) { + const emoji = status === 'approved' ? '✅' : '❌'; + const title = status === 'approved' ? 'Exception Approved' : 'Exception Denied'; + const action = status === 'approved' ? 'add these approved exceptions' : 'record these denied exceptions'; + await github.rest.issues.createComment({ owner: context.repo.owner, repo: context.repo.repo, issue_number: context.issue.number, - body: `## ✅ Exception Approved\n\nA pull request has been created to add these exceptions to the database:\n\n${prUrl}\n\nOnce merged, the exceptions will appear in the [exceptions database](https://cncf.github.io/foundation/license-exceptions/site/).` + body: `## ${emoji} ${title}\n\nA pull request has been created to ${action} to the database:\n\n${prUrl}\n\nOnce merged, the exceptions will appear in the [exceptions database](https://cncf.github.io/foundation/license-exceptions/site/).` }); } diff --git a/license-exceptions/CNCF-licensing-exceptions.csv b/license-exceptions/CNCF-licensing-exceptions.csv index cfbdf33b..b9a9fa3f 100644 --- a/license-exceptions/CNCF-licensing-exceptions.csv +++ b/license-exceptions/CNCF-licensing-exceptions.csv @@ -1,468 +1,488 @@ -Package Name,License Concluded,Comments,Date Published,Last updated: 2026-02-02 -github.com/docker/go-metrics,CC-BY-SA 4.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31,2023-08-31, -github.com/hashicorp/go-memdb,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31,2023-08-31, -github.com/shoenig/go-m1cpu,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31,2023-08-31, -hashicorp/packer-plugin-sdk,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31,2023-08-31, -github.com/hashicorp/consul/api,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -github.com/hashicorp/go-hclog,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -github.com/hashicorp/go-immutable-radix,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -github.com/hashicorp/go-plugin,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -github.com/hashicorp/go-rootcerts,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -github.com/hashicorp/go-secure-stdlib,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -github.com/hashicorp/go-sockaddr,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -github.com/hashicorp/go-uuid,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -github.com/hashicorp/serf,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -github.com/hashicorp/vault,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -github.com/veraison/go-cose,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/consul/api,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/go-hclog,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/go-immutable-radix,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/go-plugin,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/go-rootcerts,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/go-secure-stdlib,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/go-sockaddr,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/go-uuid,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/go-version,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/raft,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/serf,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/vault,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -hashicorp/yamux,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -veraison/go-cose,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, -github.com/eclipse/paho.mqtt.golang,EPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, -github.com/hashicorp/go-version,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, -github.com/hashicorp/raft,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, -github.com/hashicorp/raft-boltdb,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, -github.com/Microsoft/tslib,0BSD,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, -go-version,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, -paho.mqtt.golang,EPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, -raft,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, -raft-boltdb,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, -tslib,0BSD,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, -webpki-roots,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, -github.com/hashicorp/go-retryablehttp,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19,2021-07-19, -go-retryablehttp,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19,2021-07-19, -Chart.js,MIT,allowlisted,2019-11-01, -cloud.google.com/go,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -code.cloudfoundry.org/clock,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -colors,MIT,allowlisted,2019-11-01, -defusedxml,Python-2.0,allowlisted,2019-11-01, -ejs,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/abbot/go-http-auth,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/aclements/go-moremath,BSD-3-Clause,allowlisted,2019-11-01, -github.com/andygrunwald/go-gerrit,MIT,allowlisted,2019-11-01, -github.com/aokoli/goutils,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/appc/spec,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/armon/circbuf,MIT,allowlisted,2019-11-01, -github.com/armon/go-proxyproto,MIT,allowlisted,2019-11-01, -github.com/armon/go-radix,MIT,allowlisted,2019-11-01, -github.com/asaskevich/govalidator,MIT,allowlisted,2019-11-01, -github.com/aws/aws-k8s-tester,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/aws/aws-sdk-go,((MIT OR GPL-3.0) AND BSD-3-Clause AND Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/Azure/azure-sdk-for-go,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/Azure/azure-storage-blob-go,MIT,allowlisted,2019-11-01, -github.com/Azure/go-ansiterm,MIT,allowlisted,2019-11-01, -github.com/Azure/go-autorest,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/bazelbuild/bazel-gazelle,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/bazelbuild/buildtools,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/beorn7/perks,MIT,allowlisted,2019-11-01, -github.com/blang/semver,MIT,allowlisted,2019-11-01, -github.com/bluebreezecf/opentsdb-goclient,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/boltdb/bolt,MIT,allowlisted,2019-11-01, -github.com/bwmarrin/snowflake,BSD-2-Clause,allowlisted,2019-11-01, -github.com/chai2010/gettext-go,BSD-3-Clause,allowlisted,2019-11-01, -github.com/cloudflare/cfssl,(BSD-2-Clause AND BSD-3-Clause AND ISC),allowlisted,2019-11-01, -github.com/cloudfoundry-incubator/candiedyaml,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/clusterhq/flocker-go,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/cockroachdb/cmux,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/codedellemc/goscaleio,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/container-storage-interface/spec,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/containerd/console,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/containerd/containerd,(CC-BY-4.0 AND Apache-2.0),"Apache-2.0, no approval needed",2019-11-01, -github.com/containernetworking/cni,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/containernetworking/plugins,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/coredns/coredns,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/coreos/bbolt,MIT,allowlisted,2019-11-01, -github.com/coreos/etcd,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/coreos/go-etcd,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/coreos/go-oidc,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/coreos/go-semver,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/coreos/go-systemd,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/coreos/pkg,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/coreos/rkt,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/cpuguy83/go-md2man,MIT,allowlisted,2019-11-01, -github.com/cyphar/filepath-securejoin,BSD-3-Clause,allowlisted,2019-11-01, -github.com/daaku/go.zipexe,MIT,allowlisted,2019-11-01, -github.com/davecgh/go-spew,ISC,allowlisted,2019-11-01, -github.com/daviddengcn/go-colortext,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -github.com/dchest/safefile,BSD-2-Clause,allowlisted,2019-11-01, -github.com/deckarep/golang-set,MIT,allowlisted,2019-11-01, -github.com/denverdino/aliyungo,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/dgrijalva/jwt-go,MIT,allowlisted,2019-11-01, -github.com/digitalocean/godo,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -github.com/djherbis/atime,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -github.com/docker/cli,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/docker/distribution,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/docker/docker,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/docker/engine-api,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/docker/go-connections,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/docker/libcompose,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/docker/libnetwork,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/docker/libtrust,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/docker/machine,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/dustin/go-humanize,MIT,allowlisted,2019-11-01, -github.com/eapache/channels,MIT,allowlisted,2019-11-01, -github.com/eapache/go-resiliency,MIT,allowlisted,2019-11-01, -github.com/eapache/go-xerial-snappy,MIT,allowlisted,2019-11-01, -github.com/eapache/queue,MIT,allowlisted,2019-11-01, -github.com/elazarl/go-bindata-assetfs,BSD-2-Clause,allowlisted,2019-11-01, -github.com/elazarl/goproxy,BSD-3-Clause,allowlisted,2019-11-01, -github.com/emicklei/go-restful,MIT,allowlisted,2019-11-01, -github.com/emicklei/go-restful-swagger12,MIT,allowlisted,2019-11-01, -github.com/emirpasic/gods,(BSD-2-Clause AND ISC),allowlisted,2019-11-01, -github.com/euank/go-kmsg-parser,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/evanphx/json-patch,BSD-3-Clause,allowlisted,2019-11-01, -github.com/exponent-io/jsonpath,MIT,allowlisted,2019-11-01, -github.com/fatih/camelcase,MIT,allowlisted,2019-11-01, -github.com/fatih/structs,MIT,allowlisted,2019-11-01, -github.com/flynn/go-shlex,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/fsnotify/fsnotify,BSD-3-Clause,allowlisted,2019-11-01, -github.com/fsouza/fake-gcs-server,BSD-2-Clause,allowlisted,2019-11-01, -github.com/fsouza/go-dockerclient,(BSD-2-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/fullsailor/pkcs7,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -github.com/GeertJohan/go.rice,BSD-2-Clause,allowlisted,2019-11-01, -github.com/ghodss/yaml,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -github.com/globalsign/mgo,(BSD-2-Clause AND BSD-3-Clause),allowlisted,2019-11-01, -github.com/go-ini/ini,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/go-openapi/analysis,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/go-openapi/errors,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/go-openapi/jsonpointer,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/go-openapi/jsonreference,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/go-openapi/loads,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/go-openapi/runtime,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/go-openapi/spec,(CC-BY-4.0 AND Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/go-openapi/strfmt,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/go-openapi/swag,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/go-openapi/validate,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/go-ozzo/ozzo-validation,MIT,allowlisted,2019-11-01, -github.com/go-yaml/yaml,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/gobuffalo/envy,MIT,allowlisted,2019-11-01, -github.com/godbus/dbus,BSD-2-Clause,allowlisted,2019-11-01, -github.com/gogo/protobuf,(BSD-2-Clause AND BSD-3-Clause),allowlisted,2019-11-01, -github.com/golang/dep,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),allowlisted,2019-11-01, -github.com/golang/glog,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/golang/groupcache,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/golang/lint,BSD-3-Clause,allowlisted,2019-11-01, -github.com/golang/mock,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/golang/protobuf,BSD-3-Clause,allowlisted,2019-11-01, -github.com/golang/snappy,BSD-3-Clause,allowlisted,2019-11-01, -github.com/google/btree,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/google/cadvisor,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/google/certificate-transparency-go,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/google/go-containerregistry,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/google/go-querystring,BSD-3-Clause,allowlisted,2019-11-01, -github.com/google/go-tpm,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/google/gofuzz,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/google/uuid,BSD-3-Clause,allowlisted,2019-11-01, -github.com/googleapis/gax-go,BSD-3-Clause,allowlisted,2019-11-01, -github.com/googleapis/gnostic,(BSD-3-Clause AND Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/GoogleCloudPlatform/gke-managed-certs,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/gophercloud/gophercloud,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/gorilla/context,BSD-3-Clause,allowlisted,2019-11-01, -github.com/gorilla/mux,BSD-3-Clause,allowlisted,2019-11-01, -github.com/gorilla/securecookie,BSD-3-Clause,allowlisted,2019-11-01, -github.com/gorilla/sessions,BSD-3-Clause,allowlisted,2019-11-01, -github.com/gorilla/websocket,(BSD-2-Clause AND MIT),allowlisted,2019-11-01, -github.com/gregjones/httpcache,MIT,allowlisted,2019-11-01, -github.com/grpc-ecosystem/go-grpc-middleware,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/grpc-ecosystem/go-grpc-prometheus,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/grpc-ecosystem/grpc-gateway,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/hawkular/hawkular-client-go,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/heketi/heketi REST API,(Apache-2.0 OR LGPL-3.0-or-later),"Apache-2.0, no approval needed",2019-11-01, -github.com/hpcloud/tail,MIT,allowlisted,2019-11-01, -github.com/huandu/xstrings,MIT,allowlisted,2019-11-01, -github.com/imdario/mergo,BSD-3-Clause,allowlisted,2019-11-01, -github.com/inconshreveable/mousetrap,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/influxdata/influxdb,MIT,allowlisted,2019-11-01, -github.com/jimmidyson/go-download,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/jinzhu/gorm,MIT,allowlisted,2019-11-01, -github.com/jinzhu/inflection,MIT,allowlisted,2019-11-01, -github.com/jmespath/go-jmespath,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/jmhodges/clock,MIT,allowlisted,2019-11-01, -github.com/jmoiron/sqlx,MIT,allowlisted,2019-11-01, -github.com/joho/godotenv,MIT,allowlisted,2019-11-01, -github.com/jonboulle/clockwork,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/jpillora/backoff,MIT,allowlisted,2019-11-01, -github.com/json-iterator/go,MIT,allowlisted,2019-11-01, -github.com/kardianos/osext,BSD-3-Clause,allowlisted,2019-11-01, -github.com/karrick/godirwalk,BSD-2-Clause,allowlisted,2019-11-01, -github.com/kevinburke/ssh_config,MIT,allowlisted,2019-11-01, -github.com/kisielk/sqlstruct,MIT,allowlisted,2019-11-01, -github.com/knative/build,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/kr/fs,BSD-3-Clause,allowlisted,2019-11-01, -github.com/kr/pretty,MIT,allowlisted,2019-11-01, -github.com/kr/pty,MIT,allowlisted,2019-11-01, -github.com/kr/text,MIT,allowlisted,2019-11-01, -github.com/kubernetes-incubator/apiserver-builder,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/kubernetes-incubator/reference-docs,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/kubernetes-sigs/application,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/kubernetes/repo-infra,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/kylelemons/godebug,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/lib/pq,MIT,allowlisted,2019-11-01, -github.com/libopenstorage/openstorage,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/libvirt/libvirt-go,MIT,allowlisted,2019-11-01, -github.com/libvirt/libvirt-go-xml,MIT,allowlisted,2019-11-01, -github.com/lpabon/godbc,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/lxn/win,BSD-3-Clause,allowlisted,2019-11-01, -github.com/magiconair/properties,(BSD-2-Clause AND BSD-3-Clause),allowlisted,2019-11-01, -github.com/mailru/easyjson,MIT,allowlisted,2019-11-01, -github.com/MakeNowJust/heredoc,MIT,allowlisted,2019-11-01, -github.com/markbates/inflect,MIT,allowlisted,2019-11-01, -github.com/marpaia/graphite-golang,MIT,allowlisted,2019-11-01, -github.com/Masterminds/semver,MIT,allowlisted,2019-11-01, -github.com/Masterminds/sprig,MIT,allowlisted,2019-11-01, -github.com/Masterminds/vcs,MIT,allowlisted,2019-11-01, -github.com/mattn/go-runewidth,MIT,allowlisted,2019-11-01, -github.com/mattn/go-shellwords,MIT,allowlisted,2019-11-01, -github.com/mattn/go-zglob,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -github.com/matttproud/golang_protobuf_extensions,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/mesos/mesos-go,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/mholt/caddy,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/Microsoft/go-winio,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -github.com/Microsoft/hcsshim,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -github.com/miekg/coredns,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/miekg/dns,BSD-3-Clause,allowlisted,2019-11-01, -github.com/mindprince/gonvml,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/mistifyio/go-zfs,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/mitchellh/go-homedir,MIT,allowlisted,2019-11-01, -github.com/mitchellh/go-ps,MIT,allowlisted,2019-11-01, -github.com/mitchellh/go-wordwrap,MIT,allowlisted,2019-11-01, -github.com/mitchellh/hashstructure,MIT,allowlisted,2019-11-01, -github.com/mitchellh/mapstructure,MIT,allowlisted,2019-11-01, -github.com/moby/hyperkit,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/modern-go/concurrent,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/modern-go/reflect2,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/mohae/deepcopy,MIT,allowlisted,2019-11-01, -github.com/moul/http2curl,MIT,allowlisted,2019-11-01, -github.com/mrunalp/fileutils,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/mvdan/xurls,BSD-3-Clause,allowlisted,2019-11-01, -github.com/mxk/go-flowrate,BSD-3-Clause,allowlisted,2019-11-01, -github.com/ncabatoff/process-exporter,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/nightlyone/lockfile,MIT,allowlisted,2019-11-01, -github.com/novln/docker-parser,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/NYTimes/gziphandler,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/olekukonko/tablewriter,MIT,allowlisted,2019-11-01, -github.com/onsi/ginkgo,MIT,allowlisted,2019-11-01, -github.com/onsi/gomega,MIT,allowlisted,2019-11-01, -github.com/opencontainers/image-spec,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/opencontainers/runtime-spec,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/opencontainers/selinux,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/openshift/origin,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/opentracing/opentracing-go,MIT,allowlisted,2019-11-01, -github.com/parnurzeal/gorequest,MIT,allowlisted,2019-11-01, -github.com/patrickmn/go-cache,MIT,allowlisted,2019-11-01, -github.com/paultag/sniff,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/pborman/uuid,BSD-3-Clause,allowlisted,2019-11-01, -github.com/pelletier/go-buffruneio,MIT,allowlisted,2019-11-01, -github.com/pelletier/go-toml,MIT,allowlisted,2019-11-01, -github.com/petar/GoLLRB,BSD-3-Clause,allowlisted,2019-11-01, -github.com/peterbourgon/diskv,MIT,allowlisted,2019-11-01, -github.com/pierrec/lz4,BSD-3-Clause,allowlisted,2019-11-01, -github.com/pierrec/xxHash,BSD-3-Clause,allowlisted,2019-11-01, -github.com/pkg/browser,BSD-2-Clause,allowlisted,2019-11-01, -github.com/pkg/errors,BSD-2-Clause,allowlisted,2019-11-01, -github.com/pkg/profile,BSD-2-Clause,allowlisted,2019-11-01, -github.com/pkg/sftp,BSD-2-Clause,allowlisted,2019-11-01, -github.com/pmezard/go-difflib,BSD-3-Clause,allowlisted,2019-11-01, -github.com/pquerna/cachecontrol,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/pquerna/ffjson,(BSD-3-Clause AND Apache-2.0 AND ISC),allowlisted,2019-11-01, -github.com/prometheus/client_golang,(BSD-3-Clause AND Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/prometheus/client_model,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/prometheus/common,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/prometheus/procfs,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/PuerkitoBio/purell,BSD-3-Clause,allowlisted,2019-11-01, -github.com/PuerkitoBio/urlesc,BSD-3-Clause,allowlisted,2019-11-01, -github.com/r2d4/external-storage,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/rackspace/gophercloud,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/rancher/go-rancher,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/rcrowley/go-metrics,BSD-2-Clause-FreeBSD,allowlisted,2019-11-01, -github.com/renstrom/dedent,MIT,allowlisted,2019-11-01, -github.com/Rican7/retry,MIT,allowlisted,2019-11-01, -github.com/riemann/riemann-go-client,MIT,allowlisted,2019-11-01, -github.com/robfig/cron,MIT,allowlisted,2019-11-01, -github.com/russross/blackfriday,BSD-2-Clause,allowlisted,2019-11-01, -github.com/samalba/dockerclient,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/satori/go.uuid,MIT,allowlisted,2019-11-01, -github.com/scalingdata/gcfg,(BSD-2-Clause AND BSD-3-Clause),allowlisted,2019-11-01, -github.com/sdboyer/constext,MIT,allowlisted,2019-11-01, -github.com/seccomp/libseccomp-golang,BSD-2-Clause,allowlisted,2019-11-01, -github.com/sergi/go-diff,MIT,allowlisted,2019-11-01, -github.com/Shopify/sarama,MIT,allowlisted,2019-11-01, -github.com/shurcooL/githubv4,MIT,allowlisted,2019-11-01, -github.com/shurcooL/go,BSD-3-Clause,allowlisted,2019-11-01, -github.com/shurcooL/graphql,MIT,allowlisted,2019-11-01, -github.com/shurcooL/sanitized_anchor_name,MIT,allowlisted,2019-11-01, -github.com/sirupsen/logrus,(BSD-2-Clause AND BSD-3-Clause AND MIT),allowlisted,2019-11-01, -github.com/skynetservices/skydns,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/smartystreets/go-aws-auth,MIT,allowlisted,2019-11-01, -github.com/soheilhy/cmux,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/spf13/afero,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/spf13/cast,MIT,allowlisted,2019-11-01, -github.com/spf13/cobra,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/spf13/jwalterweatherman,MIT,allowlisted,2019-11-01, -github.com/spf13/pflag,BSD-3-Clause,allowlisted,2019-11-01, -github.com/spf13/viper,MIT,allowlisted,2019-11-01, -github.com/storageos/go-api,(BSD-2-Clause AND MIT),allowlisted,2019-11-01, -github.com/streadway/quantile,BSD-2-Clause,allowlisted,2019-11-01, -github.com/stretchr/objx,MIT,allowlisted,2019-11-01, -github.com/stretchr/testify,MIT,allowlisted,2019-11-01, -github.com/syndtr/gocapability,BSD-2-Clause,allowlisted,2019-11-01, -github.com/tchap/go-patricia,MIT,allowlisted,2019-11-01, -github.com/thockin/glogr,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/thockin/logr,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/tmc/grpc-websocket-proxy,MIT,allowlisted,2019-11-01, -github.com/tsenart/vegeta,MIT,allowlisted,2019-11-01, -github.com/ugorji/go,MIT,allowlisted,2019-11-01, -github.com/Unknwon/goconfig,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/urfave/cli,MIT,allowlisted,2019-11-01, -github.com/vishvananda/netlink,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/vishvananda/netns,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/vmware/govmomi,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/vmware/photon-controller-go-sdk,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -github.com/weaveworks/mesh,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/xanzy/go-cloudstack,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/xeipuuv/gojsonpointer,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/xeipuuv/gojsonreference,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -github.com/xeipuuv/gojsonschema,(Apache-2.0 AND MIT),allowlisted,2019-11-01, -github.com/xiang90/probing,MIT,allowlisted,2019-11-01, -github.com/zakjan/cert-chain-resolver,MIT,allowlisted,2019-11-01, -github.com/ziutek/syslog,BSD-3-Clause,allowlisted,2019-11-01, -go.opencensus.io,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -go.uber.org/atomic,MIT,allowlisted,2019-11-01, -go.uber.org/multierr,MIT,allowlisted,2019-11-01, -go.uber.org/zap,MIT,allowlisted,2019-11-01, -go4.org/errorutil,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -golang.org/x/build,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),allowlisted,2019-11-01, -golang.org/x/exp,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),allowlisted,2019-11-01, -golang.org/x/lint,BSD-3-Clause,allowlisted,2019-11-01, -golang.org/x/oauth2,BSD-3-Clause,allowlisted,2019-11-01, -golang.org/x/sync,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),allowlisted,2019-11-01, -golang.org/x/sys,(LicenseRef-Google-Patents-Notice-Golang AND BSD-2-Clause AND BSD-3-Clause),allowlisted,2019-11-01, -golang.org/x/text,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),allowlisted,2019-11-01, -golang.org/x/time,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),allowlisted,2019-11-01, -golang.org/x/tools,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause AND Apache-2.0 AND MIT),allowlisted,2019-11-01, -golang/archive/tar,BSD-3-Clause,allowlisted,2019-11-01, -gonum.org/v1/gonum,((BSD-3-Clause OR CC0-1.0) AND BSD-3-Clause),allowlisted,2019-11-01, -google.golang.org/cloud,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -google.golang.org/genproto,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -gopkg.in/check.v1,(BSD-2-Clause AND BSD-3-Clause),allowlisted,2019-11-01, -gopkg.in/cheggaaa/pb.v1,BSD-3-Clause,allowlisted,2019-11-01, -gopkg.in/fsnotify,BSD-3-Clause,allowlisted,2019-11-01, -gopkg.in/gcfg.v1,BSD-3-Clause,allowlisted,2019-11-01, -gopkg.in/go-playground/pool.v3,MIT,allowlisted,2019-11-01, -gopkg.in/igm/sockjs-go.v2,BSD-3-Clause,allowlisted,2019-11-01, -gopkg.in/inf.v0,BSD-3-Clause,allowlisted,2019-11-01, -gopkg.in/natefinch/lumberjack.v2,MIT,allowlisted,2019-11-01, -gopkg.in/olivere/elastic.v3,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -gopkg.in/olivere/elastic.v5,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -gopkg.in/robfig/cron.v2,MIT,allowlisted,2019-11-01, -gopkg.in/square/go-jose.v2,(BSD-3-Clause AND Apache-2.0),allowlisted,2019-11-01, -gopkg.in/src-d,Apache-2.0,"Apache-2.0, no approval needed",2019-11-01, -gopkg.in/tomb.v1,BSD-3-Clause,allowlisted,2019-11-01, -jquery.scrollto,MIT,allowlisted,2019-11-01, -marked,(BSD-3-Clause AND MIT),allowlisted,2019-11-01, -mime,MIT,allowlisted,2019-11-01, -minimist,MIT,allowlisted,2019-11-01, -node-static,MIT,allowlisted,2019-11-01, -optimist,MIT,allowlisted,2019-11-01, -ui-router for Angular,MIT,allowlisted,2019-11-01, -vbom.ml/util,MIT,allowlisted,2019-11-01, -wordwrap,MIT,allowlisted,2019-11-01, -VirtualBox Linux Guest Drivers Makefile,GPL-2.0-only,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-05-20,2019-05-20, -Angular,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, -Asciidoctor,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, -Azure acr-docker-credential-helper,MIT,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, -Backbone,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, -bitbucket.org/bertimus9/systemstat,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, -bitbucket.org/ww/goautoneg,BSD-3-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, -bootstrap,(CC-BY-3.0 AND MIT),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, -dialog-polyfill.css,BSD-3-Clause,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, -font-awesome,(CC-BY-3.0 AND MIT AND OFL-1.1),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, -Gingko,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, -github.com/Azure/azure-pipeline-go,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, -github.com/bungle/lua-resty-template,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, -github.com/c4milo/gotoolkit,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, -github.com/client9/misspell,(Unlicense AND BSD-3-Clause AND MIT),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, -github.com/d2g/dhcp4,BSD-3-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, -github.com/d2g/dhcp4client,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, -github.com/dgryski/go-onlinestats,(MIT AND LicenseRef-Public-domain-statement),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, -github.com/docker/go-units,(CC-BY-SA-4.0 AND CC-BY-4.0 AND Apache-2.0),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, -github.com/docker/spdystream,(CC-BY-SA-4.0 AND CC-BY-4.0 AND BSD-3-Clause AND Apache-2.0),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, -github.com/go-sql-driver/mysql,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, -github.com/gonum/graph,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, -github.com/google/go-github,(BSD-3-Clause AND CC-BY-3.0),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, -github.com/grpc-ecosystem/grpc-opentracing,(BSD-3-Clause AND LicenseRef-Google-Patents-Notice-GRPC),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, -github.com/hashicorp/errwrap,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, -github.com/hashicorp/go-cleanhttp,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, -github.com/hashicorp/go-multierror,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, -github.com/hashicorp/golang-lru,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, -github.com/hashicorp/hcl,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, -github.com/hooklift/iso9660,MPL-2.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, -github.com/howeyc/gopass,(ISC AND CDDL-1.0),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, -github.com/jbenet/go-context,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, -github.com/JeffAshton/win_pdh,BSD-3-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, -github.com/jmank88/nuts,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, -github.com/johanneswuerbach/nfsexports,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, -github.com/joshdk/go-junit,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, -github.com/jteeuwen/go-bindata,CC0-1.0,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, -github.com/konsorten/go-windows-terminal-sequences,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, -github.com/marstr/guid,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, -github.com/mattn/go-sqlite3,(MIT AND LicenseRef-Public-domain-statement),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, -github.com/multiarch/qemu-user-static,MIT,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, -github.com/Nvveen/Gotty,BSD-2-Clause-FreeBSD,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, -github.com/opencontainers/go-digest,(CC-BY-SA-4.0 AND CC-BY-4.0 AND Apache-2.0),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, -github.com/opencontainers/runc,(LicenseRef-CC-unspecified AND Apache-2.0),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, -github.com/quobyte/api,BSD-3-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, -github.com/rubiojr/go-vhd,MIT,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, -github.com/sigma/go-inotify,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, -github.com/spotinst/spotinst-sdk-go,(BSD-3-Clause AND Apache-2.0 AND MIT),not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, -github.com/src-d/gcfg,BSD-3-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, -github.com/tent/http-link-go,BSD-3-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, -github.com/xanzy/ssh-agent,(Apache-2.0 AND MIT),not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, -github.com/zchee/go-vmnet,(BSD-2-Clause AND BSD-3-Clause),not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, -go-srcimporter,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, -go9p,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, -godep,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, -golang.org/x/crypto,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause AND MIT AND LicenseRef-Public-domain-statement),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, -golang.org/x/net,(LicenseRef-Google-Patents-Notice-Golang AND BSD-2-Clause AND BSD-3-Clause AND CC-BY-3.0 AND (BSD-3-Clause OR LicenseRef-W3C-Test-Suite-License-1)),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, -golang/expansion,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, -golang/go/types,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, -golang/internal/srcimporter,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, -golang/json,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, -golang/netutil,BSD-3-Clause,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, -golang/reflect,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, -golang/template,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, -Google Protocol Buffers,BSD-3-Clause,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, -google.golang.org/api,(BSD-3-Clause AND Apache-2.0 AND MIT),not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-03-11, -google.golang.org/appengine,(BSD-3-Clause AND Apache-2.0),not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-03-11, -google.golang.org/grpc,(BSD-3-Clause AND Apache-2.0 AND LicenseRef-Google-Patents-Notice-GRPC),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, -gopkg.in/warnings.v0,BSD-2-Clause,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, -Handlebars,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, -Highlight,BSD-3-Clause,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, -highlight.js,(BSD-3-Clause AND MIT AND CC0-1.0 AND LicenseRef-Public-domain-statement),not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, -htpasswd,BSD-3-Clause,not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-03-11, -jQuery,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, -jQuery BBQ,(MIT OR GPL-2.0+),contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, -jQuery hashchange event,(GPL-2.0+ OR MIT),contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, -jQuery Slideto,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, -jQuery Wiggle,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, -moment.js,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, -normalize.css,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, -Octicons,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, -parseUri,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, -Pause,MIT,not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-03-11, -Pure CSS,BSD-3-Clause,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, -shred,ISC,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, -sigs.k8s.io/yaml,(BSD-3-Clause AND MIT),fork of github.com/ghodss/yaml; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, -speter.net/go/exp,(BSD-2-Clause AND BSD-3-Clause),not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-03-11, -sprintf() for JavaScript,BSD-3-Clause,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, -Underscore.js,MIT,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +Package or Category,License Concluded,Project,Scope,Status,Comments,Date Published,Last updated: 2026-02-04 +eclipse-ee4j/expressly,EPL-2.0 OR GPL-2.0-only WITH Classpath-exception-2.0,Keycloak,"required upstream dependency, dynamically linked, unmodified",approved,"Default implementation of Jakarta Expression Language 6.0, transitive dependency for Hibernate Validator",2026-02-05, +libpathrs,MPL-2.0 OR LGPL-3.0-or-later,All CNCF Projects,"vendored component, build-time dependency, or install-time dependency; statically or dynamically linked",approved,Blanket exception: Projects using libpathrs statically linked MUST elect MPL-2.0 and document this. Provides secure path resolution APIs.,2026-02-05, +go-pathrs,MPL-2.0,All CNCF Projects,"vendored component, build-time dependency, or install-time dependency; statically or dynamically linked",approved,Blanket exception: Go bindings for libpathrs. Provides secure path resolution APIs.,2026-02-05, +cyphar/filepath-securejoin,MPL-2.0 AND BSD-3-Clause,All CNCF Projects,"vendored component, build-time dependency, or install-time dependency; statically or dynamically linked",approved,"Blanket exception: Provides secure path resolution APIs on Linux. Used by Kubernetes, containerd, Podman, buildah, cri-o, nerdctl.",2025-11-21, +Liquibase,FSL (Functional Source License),Keycloak,"incorporated code, dynamically linked",denied,Denied: FSL is not an open source license. GB does not approve exceptions for non-OSS licenses.,2025-11-21, +paramiko,LGPL-2.1,oscal-compass,"build-time dependency, dynamically linked",approved,"Pure-Python SSHv2 protocol implementation, used for fetching files",2025-10-17, +certifi,MPL-2.0,oscal-compass,"install-time dependency, dynamically linked",approved,Dependency for requests library,2025-10-17, +pathspec,MPL-2.0,oscal-compass,"build-time dependency, separate process",approved,"Dependency for black, mkdocs, mypy",2025-10-17, +cyphar/filepath-securejoin,BSD-3-Clause AND MPL-2.0,Kubernetes,"vendored component, build-time dependency, statically linked",approved,Provides secure path construction functions. Superseded by blanket exception in issue #1154.,2025-10-17, +hashicorp/terraform-provider-aws,MPL-2.0,Crossplane,"build-time dependency, modified fork",approved,"Fork maintained for Crossplane providers, changes contributed upstream",2024-10-23, +hashicorp/terraform-provider-azurerm,MPL-2.0,Crossplane,"build-time dependency, modified fork",approved,"Fork maintained for Crossplane providers, changes contributed upstream",2024-10-23, +hashicorp/terraform-provider-azuread,MPL-2.0,Crossplane,"build-time dependency, modified fork",approved,"Fork maintained for Crossplane providers, changes contributed upstream",2024-10-23, +apple/swift-nio-ssl,OpenSSL,Connect,"build-time dependency, unmodified",approved,Required for HTTP/2 + TLS with HTTP trailers on iOS. Also used by gRPC Swift.,2024-10-23, +Crossplane Upjet MPL dependencies,MPL-2.0,Crossplane,"build-time dependency, unmodified, linked at build time",approved,"Various hashicorp terraform dependencies for Upjet: hcl, terraform-json, terraform-plugin-framework, terraform-plugin-go, terraform-plugin-sdk, go-plugin, go-uuid, go-version, logutils, terraform-plugin-log, terraform-registry-address, terraform-svchost, yamux",2024-10-23, +Linux kernel uapi headers (btrfs),GPL-2.0-only WITH Linux-syscall-note,containerd,"kernel headers included via #include, no inline functions compiled in",approved,Used by containerd/btrfs for btrfs-related ioctl syscalls. Headers from linux/btrfs.h and linux/btrfs_tree.h.,2024-10-23, +github.com/hashicorp/go-set/v2,MPL-2.0,OpenFGA,"build-time dependency, linked at build time",approved,Unmodified code,2024-10-22, +Keycloak Java dependencies,"0BSD, CDDL-1.1, EPL-1.0, EPL-2.0, GPL-2.0-only, GPL-2.0-with-classpath-exception, LGPL-2.1, LGPL-2.1-only, MIT-0, MPL-2.0, UPL-1.0",Keycloak,"transitive dependencies from Quarkus framework, unmodified",approved,"Multiple Java dependencies including: tslib, h2, mysql-connector-j, jakarta.* APIs, parsson, graalvm SDK, hibernate-*, mariadb-java-client, nashorn-core, reactive-streams",2024-10-22, +github.com/hashicorp/memberlist,MPL-2.0,kubernetes/kops,"build-time dependency, unmodified",approved,Main component of Gossip DNS feature for peer-to-peer network K8s API address propagation,2024-07-16, +Falco kernel module,GPL-2.0-only OR MIT,Falco,"kernel module, dual-licensed",approved,Falco's kernel module is dual-licensed GPL-2.0-only OR MIT,2024-02-27, +In-kernel eBPF programs,"GPL-2.0-only, GPL-2.0-or-later",All CNCF Projects,in-kernel eBPF programs only,approved,"Blanket exception: GPL-2.0 licensed code is permitted for in-kernel eBPF programs only, as this is required by the Linux kernel BPF subsystem.",2023-08-31, +github.com/docker/go-metrics,CC-BY-SA 4.0,,"runtime dependency, statically linked",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31,2023-08-31, +github.com/hashicorp/go-memdb,MPL-2.0,Cilium,"runtime dependency, dynamically linked",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31,2023-08-31, +github.com/shoenig/go-m1cpu,MPL-2.0,,build dependency,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31,2023-08-31, +hashicorp/packer-plugin-sdk,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31,2023-08-31, +github.com/hashicorp/consul/api,MPL-2.0,Cilium,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/hashicorp/go-hclog,MPL-2.0,Cilium,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/hashicorp/go-immutable-radix,MPL-2.0,Cilium,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/hashicorp/go-plugin,MPL-2.0,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/hashicorp/go-rootcerts,MPL-2.0,Cilium,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/hashicorp/go-secure-stdlib,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/hashicorp/go-sockaddr,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/hashicorp/go-uuid,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/hashicorp/serf,MPL-2.0,Cilium,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/hashicorp/vault,MPL-2.0,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/veraison/go-cose,MPL-2.0,Notary,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/consul/api,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/go-hclog,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/go-immutable-radix,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/go-plugin,MPL-2.0,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/go-rootcerts,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/go-secure-stdlib,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/go-sockaddr,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/go-uuid,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/go-version,MPL-2.0,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/raft,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/serf,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/vault,MPL-2.0,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +hashicorp/yamux,MPL-2.0,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +veraison/go-cose,MPL-2.0,Notary,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27,2023-06-27, +github.com/eclipse/paho.mqtt.golang,EPL-2.0,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +github.com/hashicorp/go-version,MPL-2.0,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +github.com/hashicorp/raft,MPL-2.0,Dapr,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +github.com/hashicorp/raft-boltdb,MPL-2.0,Dapr,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +github.com/Microsoft/tslib,0BSD,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +go-version,MPL-2.0,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +paho.mqtt.golang,EPL-2.0,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +raft,MPL-2.0,Dapr,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +raft-boltdb,MPL-2.0,Dapr,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +tslib,0BSD,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +webpki-roots,MPL-2.0,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12,2022-04-12, +github.com/hashicorp/go-retryablehttp,MPL-2.0,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19,2021-07-19, +go-retryablehttp,MPL-2.0,,"build-time dependency, unmodified",approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19,2021-07-19, +Chart.js,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +cloud.google.com/go,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +code.cloudfoundry.org/clock,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +colors,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +defusedxml,Python-2.0,,build-time dependency,allowlisted,allowlisted,2019-11-01, +ejs,(Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/abbot/go-http-auth,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/aclements/go-moremath,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/andygrunwald/go-gerrit,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/aokoli/goutils,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/appc/spec,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/armon/circbuf,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/armon/go-proxyproto,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/armon/go-radix,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/asaskevich/govalidator,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/aws/aws-k8s-tester,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/aws/aws-sdk-go,((MIT OR GPL-3.0) AND BSD-3-Clause AND Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/Azure/azure-sdk-for-go,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/Azure/azure-storage-blob-go,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/Azure/go-ansiterm,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/Azure/go-autorest,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/bazelbuild/bazel-gazelle,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/bazelbuild/buildtools,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/beorn7/perks,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/blang/semver,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/bluebreezecf/opentsdb-goclient,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/boltdb/bolt,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/bwmarrin/snowflake,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/chai2010/gettext-go,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/cloudflare/cfssl,(BSD-2-Clause AND BSD-3-Clause AND ISC),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/cloudfoundry-incubator/candiedyaml,(Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/clusterhq/flocker-go,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/cockroachdb/cmux,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/codedellemc/goscaleio,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/container-storage-interface/spec,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/containerd/console,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/containerd/containerd,(CC-BY-4.0 AND Apache-2.0),,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/containernetworking/cni,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/containernetworking/plugins,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/coredns/coredns,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/coreos/bbolt,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/coreos/etcd,(BSD-3-Clause AND Apache-2.0),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/coreos/go-etcd,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/coreos/go-oidc,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/coreos/go-semver,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/coreos/go-systemd,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/coreos/pkg,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/coreos/rkt,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/cpuguy83/go-md2man,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/cyphar/filepath-securejoin,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/daaku/go.zipexe,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/davecgh/go-spew,ISC,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/daviddengcn/go-colortext,(BSD-3-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/dchest/safefile,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/deckarep/golang-set,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/denverdino/aliyungo,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/dgrijalva/jwt-go,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/digitalocean/godo,(BSD-3-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/djherbis/atime,(BSD-3-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/docker/cli,(Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/docker/distribution,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/docker/docker,(Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/docker/engine-api,(BSD-3-Clause AND Apache-2.0),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/docker/go-connections,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/docker/libcompose,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/docker/libnetwork,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/docker/libtrust,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/docker/machine,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/dustin/go-humanize,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/eapache/channels,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/eapache/go-resiliency,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/eapache/go-xerial-snappy,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/eapache/queue,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/elazarl/go-bindata-assetfs,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/elazarl/goproxy,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/emicklei/go-restful,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/emicklei/go-restful-swagger12,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/emirpasic/gods,(BSD-2-Clause AND ISC),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/euank/go-kmsg-parser,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/evanphx/json-patch,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/exponent-io/jsonpath,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/fatih/camelcase,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/fatih/structs,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/flynn/go-shlex,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/fsnotify/fsnotify,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/fsouza/fake-gcs-server,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/fsouza/go-dockerclient,(BSD-2-Clause AND Apache-2.0),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/fullsailor/pkcs7,(BSD-3-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/GeertJohan/go.rice,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/ghodss/yaml,(BSD-3-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/globalsign/mgo,(BSD-2-Clause AND BSD-3-Clause),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/go-ini/ini,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/go-openapi/analysis,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/go-openapi/errors,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/go-openapi/jsonpointer,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/go-openapi/jsonreference,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/go-openapi/loads,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/go-openapi/runtime,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/go-openapi/spec,(CC-BY-4.0 AND Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/go-openapi/strfmt,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/go-openapi/swag,(Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/go-openapi/validate,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/go-ozzo/ozzo-validation,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/go-yaml/yaml,(Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/gobuffalo/envy,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/godbus/dbus,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/gogo/protobuf,(BSD-2-Clause AND BSD-3-Clause),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/golang/dep,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/golang/glog,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/golang/groupcache,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/golang/lint,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/golang/mock,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/golang/protobuf,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/golang/snappy,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/google/btree,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/google/cadvisor,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/google/certificate-transparency-go,(BSD-3-Clause AND Apache-2.0),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/google/go-containerregistry,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/google/go-querystring,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/google/go-tpm,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/google/gofuzz,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/google/uuid,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/googleapis/gax-go,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/googleapis/gnostic,(BSD-3-Clause AND Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/GoogleCloudPlatform/gke-managed-certs,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/gophercloud/gophercloud,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/gorilla/context,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/gorilla/mux,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/gorilla/securecookie,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/gorilla/sessions,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/gorilla/websocket,(BSD-2-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/gregjones/httpcache,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/grpc-ecosystem/go-grpc-middleware,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/grpc-ecosystem/go-grpc-prometheus,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/grpc-ecosystem/grpc-gateway,(BSD-3-Clause AND Apache-2.0),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/hawkular/hawkular-client-go,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/heketi/heketi REST API,(Apache-2.0 OR LGPL-3.0-or-later),,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/hpcloud/tail,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/huandu/xstrings,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/imdario/mergo,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/inconshreveable/mousetrap,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/influxdata/influxdb,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/jimmidyson/go-download,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/jinzhu/gorm,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/jinzhu/inflection,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/jmespath/go-jmespath,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/jmhodges/clock,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/jmoiron/sqlx,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/joho/godotenv,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/jonboulle/clockwork,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/jpillora/backoff,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/json-iterator/go,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/kardianos/osext,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/karrick/godirwalk,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/kevinburke/ssh_config,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/kisielk/sqlstruct,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/knative/build,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/kr/fs,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/kr/pretty,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/kr/pty,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/kr/text,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/kubernetes-incubator/apiserver-builder,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/kubernetes-incubator/reference-docs,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/kubernetes-sigs/application,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/kubernetes/repo-infra,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/kylelemons/godebug,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/lib/pq,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/libopenstorage/openstorage,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/libvirt/libvirt-go,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/libvirt/libvirt-go-xml,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/lpabon/godbc,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/lxn/win,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/magiconair/properties,(BSD-2-Clause AND BSD-3-Clause),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/mailru/easyjson,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/MakeNowJust/heredoc,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/markbates/inflect,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/marpaia/graphite-golang,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/Masterminds/semver,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/Masterminds/sprig,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/Masterminds/vcs,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/mattn/go-runewidth,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/mattn/go-shellwords,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/mattn/go-zglob,(BSD-3-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/matttproud/golang_protobuf_extensions,(BSD-3-Clause AND Apache-2.0),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/mesos/mesos-go,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/mholt/caddy,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/Microsoft/go-winio,(BSD-3-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/Microsoft/hcsshim,(BSD-3-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/miekg/coredns,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/miekg/dns,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/mindprince/gonvml,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/mistifyio/go-zfs,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/mitchellh/go-homedir,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/mitchellh/go-ps,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/mitchellh/go-wordwrap,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/mitchellh/hashstructure,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/mitchellh/mapstructure,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/moby/hyperkit,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/modern-go/concurrent,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/modern-go/reflect2,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/mohae/deepcopy,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/moul/http2curl,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/mrunalp/fileutils,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/mvdan/xurls,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/mxk/go-flowrate,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/ncabatoff/process-exporter,(Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/nightlyone/lockfile,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/novln/docker-parser,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/NYTimes/gziphandler,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/olekukonko/tablewriter,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/onsi/ginkgo,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/onsi/gomega,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/opencontainers/image-spec,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/opencontainers/runtime-spec,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/opencontainers/selinux,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/openshift/origin,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/opentracing/opentracing-go,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/parnurzeal/gorequest,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/patrickmn/go-cache,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/paultag/sniff,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/pborman/uuid,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/pelletier/go-buffruneio,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/pelletier/go-toml,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/petar/GoLLRB,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/peterbourgon/diskv,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/pierrec/lz4,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/pierrec/xxHash,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/pkg/browser,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/pkg/errors,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/pkg/profile,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/pkg/sftp,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/pmezard/go-difflib,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/pquerna/cachecontrol,(BSD-3-Clause AND Apache-2.0),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/pquerna/ffjson,(BSD-3-Clause AND Apache-2.0 AND ISC),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/prometheus/client_golang,(BSD-3-Clause AND Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/prometheus/client_model,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/prometheus/common,(BSD-3-Clause AND Apache-2.0),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/prometheus/procfs,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/PuerkitoBio/purell,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/PuerkitoBio/urlesc,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/r2d4/external-storage,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/rackspace/gophercloud,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/rancher/go-rancher,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/rcrowley/go-metrics,BSD-2-Clause-FreeBSD,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/renstrom/dedent,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/Rican7/retry,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/riemann/riemann-go-client,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/robfig/cron,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/russross/blackfriday,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/samalba/dockerclient,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/satori/go.uuid,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/scalingdata/gcfg,(BSD-2-Clause AND BSD-3-Clause),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/sdboyer/constext,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/seccomp/libseccomp-golang,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/sergi/go-diff,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/Shopify/sarama,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/shurcooL/githubv4,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/shurcooL/go,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/shurcooL/graphql,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/shurcooL/sanitized_anchor_name,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/sirupsen/logrus,(BSD-2-Clause AND BSD-3-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/skynetservices/skydns,(Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/smartystreets/go-aws-auth,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/soheilhy/cmux,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/spf13/afero,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/spf13/cast,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/spf13/cobra,(Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/spf13/jwalterweatherman,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/spf13/pflag,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/spf13/viper,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/storageos/go-api,(BSD-2-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/streadway/quantile,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/stretchr/objx,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/stretchr/testify,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/syndtr/gocapability,BSD-2-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/tchap/go-patricia,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/thockin/glogr,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/thockin/logr,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/tmc/grpc-websocket-proxy,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/tsenart/vegeta,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/ugorji/go,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/Unknwon/goconfig,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/urfave/cli,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/vishvananda/netlink,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/vishvananda/netns,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/vmware/govmomi,(BSD-3-Clause AND Apache-2.0),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/vmware/photon-controller-go-sdk,(BSD-3-Clause AND Apache-2.0),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/weaveworks/mesh,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/xanzy/go-cloudstack,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/xeipuuv/gojsonpointer,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/xeipuuv/gojsonreference,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +github.com/xeipuuv/gojsonschema,(Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/xiang90/probing,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/zakjan/cert-chain-resolver,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +github.com/ziutek/syslog,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +go.opencensus.io,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +go.uber.org/atomic,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +go.uber.org/multierr,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +go.uber.org/zap,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +go4.org/errorutil,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +golang.org/x/build,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),,build-time dependency,allowlisted,allowlisted,2019-11-01, +golang.org/x/exp,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),,build-time dependency,allowlisted,allowlisted,2019-11-01, +golang.org/x/lint,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +golang.org/x/oauth2,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +golang.org/x/sync,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),,build-time dependency,allowlisted,allowlisted,2019-11-01, +golang.org/x/sys,(LicenseRef-Google-Patents-Notice-Golang AND BSD-2-Clause AND BSD-3-Clause),,build-time dependency,allowlisted,allowlisted,2019-11-01, +golang.org/x/text,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),,build-time dependency,allowlisted,allowlisted,2019-11-01, +golang.org/x/time,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),,build-time dependency,allowlisted,allowlisted,2019-11-01, +golang.org/x/tools,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause AND Apache-2.0 AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +golang/archive/tar,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +gonum.org/v1/gonum,((BSD-3-Clause OR CC0-1.0) AND BSD-3-Clause),,build-time dependency,allowlisted,allowlisted,2019-11-01, +google.golang.org/cloud,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +google.golang.org/genproto,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +gopkg.in/check.v1,(BSD-2-Clause AND BSD-3-Clause),,build-time dependency,allowlisted,allowlisted,2019-11-01, +gopkg.in/cheggaaa/pb.v1,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +gopkg.in/fsnotify,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +gopkg.in/gcfg.v1,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +gopkg.in/go-playground/pool.v3,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +gopkg.in/igm/sockjs-go.v2,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +gopkg.in/inf.v0,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +gopkg.in/natefinch/lumberjack.v2,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +gopkg.in/olivere/elastic.v3,(BSD-3-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +gopkg.in/olivere/elastic.v5,(BSD-3-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +gopkg.in/robfig/cron.v2,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +gopkg.in/square/go-jose.v2,(BSD-3-Clause AND Apache-2.0),,build-time dependency,allowlisted,allowlisted,2019-11-01, +gopkg.in/src-d,Apache-2.0,,build-time dependency,apache-2.0,"Apache-2.0, no approval needed",2019-11-01, +gopkg.in/tomb.v1,BSD-3-Clause,,build-time dependency,allowlisted,allowlisted,2019-11-01, +jquery.scrollto,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +marked,(BSD-3-Clause AND MIT),,build-time dependency,allowlisted,allowlisted,2019-11-01, +mime,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +minimist,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +node-static,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +optimist,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +ui-router for Angular,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +vbom.ml/util,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +wordwrap,MIT,,build-time dependency,allowlisted,allowlisted,2019-11-01, +VirtualBox Linux Guest Drivers Makefile,GPL-2.0-only,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-05-20,2019-05-20, +Angular,MIT,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +Asciidoctor,MIT,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +Azure acr-docker-credential-helper,MIT,,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +Backbone,MIT,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +bitbucket.org/bertimus9/systemstat,MIT,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +bitbucket.org/ww/goautoneg,BSD-3-Clause,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +bootstrap,(CC-BY-3.0 AND MIT),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +dialog-polyfill.css,BSD-3-Clause,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +font-awesome,(CC-BY-3.0 AND MIT AND OFL-1.1),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +Gingko,MIT,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +github.com/Azure/azure-pipeline-go,MIT,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/bungle/lua-resty-template,BSD-3-Clause,,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +github.com/c4milo/gotoolkit,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/client9/misspell,(Unlicense AND BSD-3-Clause AND MIT),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/d2g/dhcp4,BSD-3-Clause,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/d2g/dhcp4client,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/dgryski/go-onlinestats,(MIT AND LicenseRef-Public-domain-statement),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/docker/go-units,(CC-BY-SA-4.0 AND CC-BY-4.0 AND Apache-2.0),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/docker/spdystream,(CC-BY-SA-4.0 AND CC-BY-4.0 AND BSD-3-Clause AND Apache-2.0),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/go-sql-driver/mysql,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/gonum/graph,BSD-3-Clause,,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +github.com/google/go-github,(BSD-3-Clause AND CC-BY-3.0),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/grpc-ecosystem/grpc-opentracing,(BSD-3-Clause AND LicenseRef-Google-Patents-Notice-GRPC),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/hashicorp/errwrap,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/hashicorp/go-cleanhttp,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/hashicorp/go-multierror,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/hashicorp/golang-lru,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/hashicorp/hcl,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/hooklift/iso9660,MPL-2.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/howeyc/gopass,(ISC AND CDDL-1.0),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/jbenet/go-context,MIT,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/JeffAshton/win_pdh,BSD-3-Clause,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/jmank88/nuts,MIT,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/johanneswuerbach/nfsexports,MIT,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/joshdk/go-junit,MIT,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/jteeuwen/go-bindata,CC0-1.0,,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/konsorten/go-windows-terminal-sequences,MIT,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/marstr/guid,MIT,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/mattn/go-sqlite3,(MIT AND LicenseRef-Public-domain-statement),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/multiarch/qemu-user-static,MIT,,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +github.com/Nvveen/Gotty,BSD-2-Clause-FreeBSD,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/opencontainers/go-digest,(CC-BY-SA-4.0 AND CC-BY-4.0 AND Apache-2.0),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/opencontainers/runc,(LicenseRef-CC-unspecified AND Apache-2.0),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +github.com/quobyte/api,BSD-3-Clause,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/rubiojr/go-vhd,MIT,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/sigma/go-inotify,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/spotinst/spotinst-sdk-go,(BSD-3-Clause AND Apache-2.0 AND MIT),,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/src-d/gcfg,BSD-3-Clause,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/tent/http-link-go,BSD-3-Clause,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/xanzy/ssh-agent,(Apache-2.0 AND MIT),,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +github.com/zchee/go-vmnet,(BSD-2-Clause AND BSD-3-Clause),,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +go-srcimporter,BSD-3-Clause,,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +go9p,BSD-3-Clause,,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +godep,BSD-3-Clause,,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +golang.org/x/crypto,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause AND MIT AND LicenseRef-Public-domain-statement),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +golang.org/x/net,(LicenseRef-Google-Patents-Notice-Golang AND BSD-2-Clause AND BSD-3-Clause AND CC-BY-3.0 AND (BSD-3-Clause OR LicenseRef-W3C-Test-Suite-License-1)),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +golang/expansion,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +golang/go/types,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +golang/internal/srcimporter,BSD-3-Clause,,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +golang/json,BSD-3-Clause,,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +golang/netutil,BSD-3-Clause,,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +golang/reflect,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +golang/template,(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause),,,approved,modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +Google Protocol Buffers,BSD-3-Clause,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +google.golang.org/api,(BSD-3-Clause AND Apache-2.0 AND MIT),,,approved,not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-03-11, +google.golang.org/appengine,(BSD-3-Clause AND Apache-2.0),,,approved,not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-03-11, +google.golang.org/grpc,(BSD-3-Clause AND Apache-2.0 AND LicenseRef-Google-Patents-Notice-GRPC),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +gopkg.in/warnings.v0,BSD-2-Clause,,,approved,not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11,2019-03-11, +Handlebars,MIT,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +Highlight,BSD-3-Clause,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +highlight.js,(BSD-3-Clause AND MIT AND CC0-1.0 AND LicenseRef-Public-domain-statement),,,approved,not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11,2019-03-11, +htpasswd,BSD-3-Clause,,,approved,not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-03-11, +jQuery,MIT,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +jQuery BBQ,(MIT OR GPL-2.0+),,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +jQuery hashchange event,(GPL-2.0+ OR MIT),,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +jQuery Slideto,MIT,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +jQuery Wiggle,MIT,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +moment.js,MIT,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +normalize.css,MIT,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +Octicons,MIT,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +parseUri,MIT,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +Pause,MIT,,,approved,not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-03-11, +Pure CSS,BSD-3-Clause,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +shred,ISC,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +sigs.k8s.io/yaml,(BSD-3-Clause AND MIT),,,approved,fork of github.com/ghodss/yaml; not auto-allowlist because: Modified; approved by GB exception 2019-03-11,2019-03-11, +speter.net/go/exp,(BSD-2-Clause AND BSD-3-Clause),,,approved,not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11,2019-03-11, +sprintf() for JavaScript,BSD-3-Clause,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, +Underscore.js,MIT,,,approved,contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11,2019-03-11, diff --git a/license-exceptions/README.md b/license-exceptions/README.md index 3d3cf98b..dcc770c5 100644 --- a/license-exceptions/README.md +++ b/license-exceptions/README.md @@ -10,8 +10,8 @@ This directory contains license exceptions approved by the CNCF Governing Board. The web interface allows you to: - Search by package name -- Filter by license type, approval status, or year -- Sort by date or name +- Filter by license type, approval status, project, or year +- Sort by date, name, or project - Download data in JSON, CSV, or SPDX formats ## Data Files @@ -27,7 +27,9 @@ The web interface allows you to: ## Blanket Exceptions -### GPL for in-kernel eBPF programs +Blanket exceptions apply to **all CNCF projects** and are tracked in the main exceptions database with `project: "All CNCF Projects"`. + +### GPL Exceptions for In-Kernel eBPF Programs By email vote concluded on August 31, 2023, the Governing Board approved a blanket exception for in-kernel eBPF programs licensed under: @@ -38,6 +40,14 @@ This applies only to in-kernel eBPF programs, either standalone or dual-licensed [Background documentation](https://docs.google.com/document/d/10CY8V1w8aQ6CrJ_US_Gnz8cx2SoOtOBqpUKX4cWl_4w/edit) +### Secure Path Resolution Libraries (November 2025) + +By [GB decision in issue #1154](https://github.com/cncf/foundation/issues/1154), the following are approved for all CNCF projects: + +- **libpathrs** (MPL-2.0 OR LGPL-3.0-or-later) - Projects using libpathrs statically linked MUST elect MPL-2.0 +- **go-pathrs** (MPL-2.0) - Go bindings for libpathrs +- **cyphar/filepath-securejoin** (BSD-3-Clause AND MPL-2.0) - Secure path construction + ## Request an Exception If your CNCF project needs to use a component with a non-allowlisted license, [submit an exception request](https://github.com/cncf/foundation/issues/new?template=license-exception-request.yaml). @@ -64,18 +74,39 @@ All exception entries follow this structure: "package": "github.com/example/package", "packageUrl": "https://github.com/example/package", "license": "MPL-2.0", - "requestingProject": "ProjectName", + "project": "ProjectName", + "scope": "build-time dependency, unmodified", "approvedDate": "2023-08-31", - "issueUrl": "https://github.com/cncf/foundation/issues/123", + "results": "https://github.com/cncf/foundation/issues/123", "status": "approved", "comment": "Optional notes" } ``` +| Field | Required | Description | +|-------|----------|-------------| +| `id` | Yes | Unique identifier (format: `exc-YYYY-MM-DD-NNN`) | +| `package` | Yes | Package name or category | +| `license` | Yes | SPDX license identifier(s) | +| `status` | Yes | Approval status (see below) | +| `approvedDate` | Yes | Date of decision (YYYY-MM-DD) | +| `project` | No | Requesting CNCF project, or "All CNCF Projects" for blanket exceptions | +| `scope` | No | How the dependency is used (e.g., "build-time dependency, unmodified") | +| `results` | No | URL to GitHub issue or documentation | +| `comment` | No | Additional context or notes | + ### Status Values | Status | Description | |--------|-------------| | `approved` | Approved by Governing Board vote | +| `denied` | Denied by Governing Board (e.g., non-OSS license) | | `allowlisted` | Meets allowlist criteria automatically | | `apache-2.0` | Apache-2.0 licensed (no exception needed) | + +### Blanket Exceptions + +Blanket exceptions apply to all CNCF projects and have `project: "All CNCF Projects"`. Current blanket exceptions: +- **GPL for in-kernel eBPF programs** - GPL-2.0 licensed code for in-kernel eBPF programs +- **libpathrs / go-pathrs** - MPL-2.0 licensed secure path resolution libraries +- **cyphar/filepath-securejoin** - MPL-2.0 licensed secure path construction diff --git a/license-exceptions/cncf-exceptions-current.spdx b/license-exceptions/cncf-exceptions-current.spdx index b286aaab..9faa3882 100644 --- a/license-exceptions/cncf-exceptions-current.spdx +++ b/license-exceptions/cncf-exceptions-current.spdx @@ -1,5144 +1,5364 @@ SPDXVersion: SPDX-2.1 DataLicense: CC0-1.0 SPDXID: SPDXRef-DOCUMENT -DocumentName: cncf-exceptions-2026-02-02 -DocumentNamespace: https://github.com/cncf/foundation/license-exceptions-2026-02-02 +DocumentName: cncf-exceptions-2026-02-04 +DocumentNamespace: https://github.com/cncf/foundation/license-exceptions-2026-02-04 Creator: Organization: CNCF -Created: 2026-02-02T12:00:00Z +Created: 2026-02-04T12:00:00Z + +##### Package: eclipse-ee4j/expressly + +PackageName: eclipse-ee4j/expressly +SPDXID: SPDXRef-Package1 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: EPL-2.0 OR GPL-2.0-only WITH Classpath-exception-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Keycloak. Scope: required upstream dependency, dynamically linked, unmodified. Status: approved. Default implementation of Jakarta Expression Language 6.0, transitive dependency for Hibernate Validator + +##### Package: libpathrs + +PackageName: libpathrs +SPDXID: SPDXRef-Package2 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 OR LGPL-3.0-or-later +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: All CNCF Projects. Scope: vendored component, build-time dependency, or install-time dependency; statically or dynamically linked. Status: approved. Blanket exception: Projects using libpathrs statically linked MUST elect MPL-2.0 and document this. Provides secure path resolution APIs. + +##### Package: go-pathrs + +PackageName: go-pathrs +SPDXID: SPDXRef-Package3 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: All CNCF Projects. Scope: vendored component, build-time dependency, or install-time dependency; statically or dynamically linked. Status: approved. Blanket exception: Go bindings for libpathrs. Provides secure path resolution APIs. + +##### Package: cyphar/filepath-securejoin + +PackageName: cyphar/filepath-securejoin +SPDXID: SPDXRef-Package4 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 AND BSD-3-Clause +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: All CNCF Projects. Scope: vendored component, build-time dependency, or install-time dependency; statically or dynamically linked. Status: approved. Blanket exception: Provides secure path resolution APIs on Linux. Used by Kubernetes, containerd, Podman, buildah, cri-o, nerdctl. + +##### Package: Liquibase + +PackageName: Liquibase +SPDXID: SPDXRef-Package5 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: FSL (Functional Source License) +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Keycloak. Scope: incorporated code, dynamically linked. Status: denied. Denied: FSL is not an open source license. GB does not approve exceptions for non-OSS licenses. + +##### Package: paramiko + +PackageName: paramiko +SPDXID: SPDXRef-Package6 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: LGPL-2.1 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: oscal-compass. Scope: build-time dependency, dynamically linked. Status: approved. Pure-Python SSHv2 protocol implementation, used for fetching files + +##### Package: certifi + +PackageName: certifi +SPDXID: SPDXRef-Package7 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: oscal-compass. Scope: install-time dependency, dynamically linked. Status: approved. Dependency for requests library + +##### Package: pathspec + +PackageName: pathspec +SPDXID: SPDXRef-Package8 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: oscal-compass. Scope: build-time dependency, separate process. Status: approved. Dependency for black, mkdocs, mypy + +##### Package: cyphar/filepath-securejoin + +PackageName: cyphar/filepath-securejoin +SPDXID: SPDXRef-Package9 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: BSD-3-Clause AND MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Kubernetes. Scope: vendored component, build-time dependency, statically linked. Status: approved. Provides secure path construction functions. Superseded by blanket exception in issue #1154. + +##### Package: hashicorp/terraform-provider-aws + +PackageName: hashicorp/terraform-provider-aws +SPDXID: SPDXRef-Package10 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Crossplane. Scope: build-time dependency, modified fork. Status: approved. Fork maintained for Crossplane providers, changes contributed upstream + +##### Package: hashicorp/terraform-provider-azurerm + +PackageName: hashicorp/terraform-provider-azurerm +SPDXID: SPDXRef-Package11 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Crossplane. Scope: build-time dependency, modified fork. Status: approved. Fork maintained for Crossplane providers, changes contributed upstream + +##### Package: hashicorp/terraform-provider-azuread + +PackageName: hashicorp/terraform-provider-azuread +SPDXID: SPDXRef-Package12 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Crossplane. Scope: build-time dependency, modified fork. Status: approved. Fork maintained for Crossplane providers, changes contributed upstream + +##### Package: apple/swift-nio-ssl + +PackageName: apple/swift-nio-ssl +SPDXID: SPDXRef-Package13 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: OpenSSL +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Connect. Scope: build-time dependency, unmodified. Status: approved. Required for HTTP/2 + TLS with HTTP trailers on iOS. Also used by gRPC Swift. + +##### Package: Crossplane Upjet MPL dependencies + +PackageName: Crossplane Upjet MPL dependencies +SPDXID: SPDXRef-Package14 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Crossplane. Scope: build-time dependency, unmodified, linked at build time. Status: approved. Various hashicorp terraform dependencies for Upjet: hcl, terraform-json, terraform-plugin-framework, terraform-plugin-go, terraform-plugin-sdk, go-plugin, go-uuid, go-version, logutils, terraform-plugin-log, terraform-registry-address, terraform-svchost, yamux + +##### Package: Linux kernel uapi headers (btrfs) + +PackageName: Linux kernel uapi headers (btrfs) +SPDXID: SPDXRef-Package15 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: GPL-2.0-only WITH Linux-syscall-note +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: containerd. Scope: kernel headers included via #include, no inline functions compiled in. Status: approved. Used by containerd/btrfs for btrfs-related ioctl syscalls. Headers from linux/btrfs.h and linux/btrfs_tree.h. + +##### Package: hashicorp/go-set/v2 + +PackageName: hashicorp/go-set/v2 +SPDXID: SPDXRef-Package16 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: OpenFGA. Scope: build-time dependency, linked at build time. Status: approved. Unmodified code + +##### Package: Keycloak Java dependencies + +PackageName: Keycloak Java dependencies +SPDXID: SPDXRef-Package17 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: 0BSD, CDDL-1.1, EPL-1.0, EPL-2.0, GPL-2.0-only, GPL-2.0-with-classpath-exception, LGPL-2.1, LGPL-2.1-only, MIT-0, MPL-2.0, UPL-1.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Keycloak. Scope: transitive dependencies from Quarkus framework, unmodified. Status: approved. Multiple Java dependencies including: tslib, h2, mysql-connector-j, jakarta.* APIs, parsson, graalvm SDK, hibernate-*, mariadb-java-client, nashorn-core, reactive-streams + +##### Package: hashicorp/memberlist + +PackageName: hashicorp/memberlist +SPDXID: SPDXRef-Package18 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: MPL-2.0 +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: kubernetes/kops. Scope: build-time dependency, unmodified. Status: approved. Main component of Gossip DNS feature for peer-to-peer network K8s API address propagation + +##### Package: Falco kernel module + +PackageName: Falco kernel module +SPDXID: SPDXRef-Package19 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: GPL-2.0-only OR MIT +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: Falco. Scope: kernel module, dual-licensed. Status: approved. Falco's kernel module is dual-licensed GPL-2.0-only OR MIT + +##### Package: In-kernel eBPF programs + +PackageName: In-kernel eBPF programs +SPDXID: SPDXRef-Package20 +PackageDownloadLocation: NOASSERTION +FilesAnalyzed: false +PackageLicenseConcluded: GPL-2.0-only, GPL-2.0-or-later +PackageLicenseDeclared: NOASSERTION +PackageCopyrightText: NOASSERTION +PackageComment: Project: All CNCF Projects. Scope: in-kernel eBPF programs only. Status: approved. Blanket exception: GPL-2.0 licensed code is permitted for in-kernel eBPF programs only, as this is required by the Linux kernel BPF subsystem. ##### Package: docker/go-metrics PackageName: docker/go-metrics -SPDXID: SPDXRef-Package1 +SPDXID: SPDXRef-Package21 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: CC-BY-SA 4.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31 +PackageComment: Scope: runtime dependency, statically linked. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31 ##### Package: hashicorp/go-memdb PackageName: hashicorp/go-memdb -SPDXID: SPDXRef-Package2 +SPDXID: SPDXRef-Package22 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31 +PackageComment: Project: Cilium. Scope: runtime dependency, dynamically linked. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31 ##### Package: shoenig/go-m1cpu PackageName: shoenig/go-m1cpu -SPDXID: SPDXRef-Package3 +SPDXID: SPDXRef-Package23 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31 +PackageComment: Scope: build dependency. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31 ##### Package: hashicorp/packer-plugin-sdk PackageName: hashicorp/packer-plugin-sdk -SPDXID: SPDXRef-Package4 +SPDXID: SPDXRef-Package24 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31 ##### Package: hashicorp/consul/api PackageName: hashicorp/consul/api -SPDXID: SPDXRef-Package5 +SPDXID: SPDXRef-Package25 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 +PackageComment: Project: Cilium. Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 ##### Package: hashicorp/go-hclog PackageName: hashicorp/go-hclog -SPDXID: SPDXRef-Package6 +SPDXID: SPDXRef-Package26 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 +PackageComment: Project: Cilium. Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 ##### Package: hashicorp/go-immutable-radix PackageName: hashicorp/go-immutable-radix -SPDXID: SPDXRef-Package7 +SPDXID: SPDXRef-Package27 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 +PackageComment: Project: Cilium. Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 ##### Package: hashicorp/go-plugin PackageName: hashicorp/go-plugin -SPDXID: SPDXRef-Package8 +SPDXID: SPDXRef-Package28 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 ##### Package: hashicorp/go-rootcerts PackageName: hashicorp/go-rootcerts -SPDXID: SPDXRef-Package9 +SPDXID: SPDXRef-Package29 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 +PackageComment: Project: Cilium. Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 ##### Package: hashicorp/go-secure-stdlib PackageName: hashicorp/go-secure-stdlib -SPDXID: SPDXRef-Package10 +SPDXID: SPDXRef-Package30 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 ##### Package: hashicorp/go-sockaddr PackageName: hashicorp/go-sockaddr -SPDXID: SPDXRef-Package11 +SPDXID: SPDXRef-Package31 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 ##### Package: hashicorp/go-uuid PackageName: hashicorp/go-uuid -SPDXID: SPDXRef-Package12 +SPDXID: SPDXRef-Package32 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 ##### Package: hashicorp/serf PackageName: hashicorp/serf -SPDXID: SPDXRef-Package13 +SPDXID: SPDXRef-Package33 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 +PackageComment: Project: Cilium. Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 ##### Package: hashicorp/vault PackageName: hashicorp/vault -SPDXID: SPDXRef-Package14 +SPDXID: SPDXRef-Package34 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 ##### Package: veraison/go-cose PackageName: veraison/go-cose -SPDXID: SPDXRef-Package15 +SPDXID: SPDXRef-Package35 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 +PackageComment: Project: Notary. Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 ##### Package: hashicorp/consul/api PackageName: hashicorp/consul/api -SPDXID: SPDXRef-Package16 +SPDXID: SPDXRef-Package36 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 ##### Package: hashicorp/go-hclog PackageName: hashicorp/go-hclog -SPDXID: SPDXRef-Package17 +SPDXID: SPDXRef-Package37 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 ##### Package: hashicorp/go-immutable-radix PackageName: hashicorp/go-immutable-radix -SPDXID: SPDXRef-Package18 +SPDXID: SPDXRef-Package38 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 ##### Package: hashicorp/go-plugin PackageName: hashicorp/go-plugin -SPDXID: SPDXRef-Package19 +SPDXID: SPDXRef-Package39 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 ##### Package: hashicorp/go-rootcerts PackageName: hashicorp/go-rootcerts -SPDXID: SPDXRef-Package20 +SPDXID: SPDXRef-Package40 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 ##### Package: hashicorp/go-secure-stdlib PackageName: hashicorp/go-secure-stdlib -SPDXID: SPDXRef-Package21 +SPDXID: SPDXRef-Package41 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 ##### Package: hashicorp/go-sockaddr PackageName: hashicorp/go-sockaddr -SPDXID: SPDXRef-Package22 +SPDXID: SPDXRef-Package42 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 ##### Package: hashicorp/go-uuid PackageName: hashicorp/go-uuid -SPDXID: SPDXRef-Package23 +SPDXID: SPDXRef-Package43 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 ##### Package: hashicorp/go-version PackageName: hashicorp/go-version -SPDXID: SPDXRef-Package24 +SPDXID: SPDXRef-Package44 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 ##### Package: hashicorp/raft PackageName: hashicorp/raft -SPDXID: SPDXRef-Package25 +SPDXID: SPDXRef-Package45 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 ##### Package: hashicorp/serf PackageName: hashicorp/serf -SPDXID: SPDXRef-Package26 +SPDXID: SPDXRef-Package46 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 ##### Package: hashicorp/vault PackageName: hashicorp/vault -SPDXID: SPDXRef-Package27 +SPDXID: SPDXRef-Package47 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 ##### Package: hashicorp/yamux PackageName: hashicorp/yamux -SPDXID: SPDXRef-Package28 +SPDXID: SPDXRef-Package48 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 ##### Package: veraison/go-cose PackageName: veraison/go-cose -SPDXID: SPDXRef-Package29 +SPDXID: SPDXRef-Package49 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 +PackageComment: Project: Notary. Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27 ##### Package: eclipse/paho.mqtt.golang PackageName: eclipse/paho.mqtt.golang -SPDXID: SPDXRef-Package30 +SPDXID: SPDXRef-Package50 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: EPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 ##### Package: hashicorp/go-version PackageName: hashicorp/go-version -SPDXID: SPDXRef-Package31 +SPDXID: SPDXRef-Package51 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 ##### Package: hashicorp/raft PackageName: hashicorp/raft -SPDXID: SPDXRef-Package32 +SPDXID: SPDXRef-Package52 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 +PackageComment: Project: Dapr. Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 ##### Package: hashicorp/raft-boltdb PackageName: hashicorp/raft-boltdb -SPDXID: SPDXRef-Package33 +SPDXID: SPDXRef-Package53 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 +PackageComment: Project: Dapr. Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 ##### Package: Microsoft/tslib PackageName: Microsoft/tslib -SPDXID: SPDXRef-Package34 +SPDXID: SPDXRef-Package54 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: 0BSD PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 ##### Package: go-version PackageName: go-version -SPDXID: SPDXRef-Package35 +SPDXID: SPDXRef-Package55 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 ##### Package: paho.mqtt.golang PackageName: paho.mqtt.golang -SPDXID: SPDXRef-Package36 +SPDXID: SPDXRef-Package56 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: EPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 ##### Package: raft PackageName: raft -SPDXID: SPDXRef-Package37 +SPDXID: SPDXRef-Package57 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 +PackageComment: Project: Dapr. Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 ##### Package: raft-boltdb PackageName: raft-boltdb -SPDXID: SPDXRef-Package38 +SPDXID: SPDXRef-Package58 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 +PackageComment: Project: Dapr. Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 ##### Package: tslib PackageName: tslib -SPDXID: SPDXRef-Package39 +SPDXID: SPDXRef-Package59 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: 0BSD PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 ##### Package: webpki-roots PackageName: webpki-roots -SPDXID: SPDXRef-Package40 +SPDXID: SPDXRef-Package60 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12 ##### Package: hashicorp/go-retryablehttp PackageName: hashicorp/go-retryablehttp -SPDXID: SPDXRef-Package41 +SPDXID: SPDXRef-Package61 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19 +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19 ##### Package: go-retryablehttp PackageName: go-retryablehttp -SPDXID: SPDXRef-Package42 +SPDXID: SPDXRef-Package62 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19 +PackageComment: Scope: build-time dependency, unmodified. Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19 ##### Package: Chart.js PackageName: Chart.js -SPDXID: SPDXRef-Package43 +SPDXID: SPDXRef-Package63 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: cloud.google.com/go PackageName: cloud.google.com/go -SPDXID: SPDXRef-Package44 +SPDXID: SPDXRef-Package64 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: code.cloudfoundry.org/clock PackageName: code.cloudfoundry.org/clock -SPDXID: SPDXRef-Package45 +SPDXID: SPDXRef-Package65 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: colors PackageName: colors -SPDXID: SPDXRef-Package46 +SPDXID: SPDXRef-Package66 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: defusedxml PackageName: defusedxml -SPDXID: SPDXRef-Package47 +SPDXID: SPDXRef-Package67 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Python-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: ejs PackageName: ejs -SPDXID: SPDXRef-Package48 +SPDXID: SPDXRef-Package68 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (Apache-2.0 AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: abbot/go-http-auth PackageName: abbot/go-http-auth -SPDXID: SPDXRef-Package49 +SPDXID: SPDXRef-Package69 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: aclements/go-moremath PackageName: aclements/go-moremath -SPDXID: SPDXRef-Package50 +SPDXID: SPDXRef-Package70 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: andygrunwald/go-gerrit PackageName: andygrunwald/go-gerrit -SPDXID: SPDXRef-Package51 +SPDXID: SPDXRef-Package71 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: aokoli/goutils PackageName: aokoli/goutils -SPDXID: SPDXRef-Package52 +SPDXID: SPDXRef-Package72 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: appc/spec PackageName: appc/spec -SPDXID: SPDXRef-Package53 +SPDXID: SPDXRef-Package73 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: armon/circbuf PackageName: armon/circbuf -SPDXID: SPDXRef-Package54 +SPDXID: SPDXRef-Package74 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: armon/go-proxyproto PackageName: armon/go-proxyproto -SPDXID: SPDXRef-Package55 +SPDXID: SPDXRef-Package75 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: armon/go-radix PackageName: armon/go-radix -SPDXID: SPDXRef-Package56 +SPDXID: SPDXRef-Package76 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: asaskevich/govalidator PackageName: asaskevich/govalidator -SPDXID: SPDXRef-Package57 +SPDXID: SPDXRef-Package77 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: aws/aws-k8s-tester PackageName: aws/aws-k8s-tester -SPDXID: SPDXRef-Package58 +SPDXID: SPDXRef-Package78 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: aws/aws-sdk-go PackageName: aws/aws-sdk-go -SPDXID: SPDXRef-Package59 +SPDXID: SPDXRef-Package79 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: ((MIT OR GPL-3.0) AND BSD-3-Clause AND Apache-2.0 AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: Azure/azure-sdk-for-go PackageName: Azure/azure-sdk-for-go -SPDXID: SPDXRef-Package60 +SPDXID: SPDXRef-Package80 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: Azure/azure-storage-blob-go PackageName: Azure/azure-storage-blob-go -SPDXID: SPDXRef-Package61 +SPDXID: SPDXRef-Package81 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: Azure/go-ansiterm PackageName: Azure/go-ansiterm -SPDXID: SPDXRef-Package62 +SPDXID: SPDXRef-Package82 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: Azure/go-autorest PackageName: Azure/go-autorest -SPDXID: SPDXRef-Package63 +SPDXID: SPDXRef-Package83 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: bazelbuild/bazel-gazelle PackageName: bazelbuild/bazel-gazelle -SPDXID: SPDXRef-Package64 +SPDXID: SPDXRef-Package84 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: bazelbuild/buildtools PackageName: bazelbuild/buildtools -SPDXID: SPDXRef-Package65 +SPDXID: SPDXRef-Package85 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: beorn7/perks PackageName: beorn7/perks -SPDXID: SPDXRef-Package66 +SPDXID: SPDXRef-Package86 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: blang/semver PackageName: blang/semver -SPDXID: SPDXRef-Package67 +SPDXID: SPDXRef-Package87 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: bluebreezecf/opentsdb-goclient PackageName: bluebreezecf/opentsdb-goclient -SPDXID: SPDXRef-Package68 +SPDXID: SPDXRef-Package88 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: boltdb/bolt PackageName: boltdb/bolt -SPDXID: SPDXRef-Package69 +SPDXID: SPDXRef-Package89 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: bwmarrin/snowflake PackageName: bwmarrin/snowflake -SPDXID: SPDXRef-Package70 +SPDXID: SPDXRef-Package90 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-2-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: chai2010/gettext-go PackageName: chai2010/gettext-go -SPDXID: SPDXRef-Package71 +SPDXID: SPDXRef-Package91 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: cloudflare/cfssl PackageName: cloudflare/cfssl -SPDXID: SPDXRef-Package72 +SPDXID: SPDXRef-Package92 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-2-Clause AND BSD-3-Clause AND ISC) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: cloudfoundry-incubator/candiedyaml PackageName: cloudfoundry-incubator/candiedyaml -SPDXID: SPDXRef-Package73 +SPDXID: SPDXRef-Package93 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (Apache-2.0 AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: clusterhq/flocker-go PackageName: clusterhq/flocker-go -SPDXID: SPDXRef-Package74 +SPDXID: SPDXRef-Package94 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: cockroachdb/cmux PackageName: cockroachdb/cmux -SPDXID: SPDXRef-Package75 +SPDXID: SPDXRef-Package95 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: codedellemc/goscaleio PackageName: codedellemc/goscaleio -SPDXID: SPDXRef-Package76 +SPDXID: SPDXRef-Package96 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: container-storage-interface/spec PackageName: container-storage-interface/spec -SPDXID: SPDXRef-Package77 +SPDXID: SPDXRef-Package97 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: containerd/console PackageName: containerd/console -SPDXID: SPDXRef-Package78 +SPDXID: SPDXRef-Package98 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: containerd/containerd PackageName: containerd/containerd -SPDXID: SPDXRef-Package79 +SPDXID: SPDXRef-Package99 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (CC-BY-4.0 AND Apache-2.0) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: containernetworking/cni PackageName: containernetworking/cni -SPDXID: SPDXRef-Package80 +SPDXID: SPDXRef-Package100 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: containernetworking/plugins PackageName: containernetworking/plugins -SPDXID: SPDXRef-Package81 +SPDXID: SPDXRef-Package101 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: coredns/coredns PackageName: coredns/coredns -SPDXID: SPDXRef-Package82 +SPDXID: SPDXRef-Package102 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: coreos/bbolt PackageName: coreos/bbolt -SPDXID: SPDXRef-Package83 +SPDXID: SPDXRef-Package103 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: coreos/etcd PackageName: coreos/etcd -SPDXID: SPDXRef-Package84 +SPDXID: SPDXRef-Package104 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: coreos/go-etcd PackageName: coreos/go-etcd -SPDXID: SPDXRef-Package85 +SPDXID: SPDXRef-Package105 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: coreos/go-oidc PackageName: coreos/go-oidc -SPDXID: SPDXRef-Package86 +SPDXID: SPDXRef-Package106 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: coreos/go-semver PackageName: coreos/go-semver -SPDXID: SPDXRef-Package87 +SPDXID: SPDXRef-Package107 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: coreos/go-systemd PackageName: coreos/go-systemd -SPDXID: SPDXRef-Package88 +SPDXID: SPDXRef-Package108 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: coreos/pkg PackageName: coreos/pkg -SPDXID: SPDXRef-Package89 +SPDXID: SPDXRef-Package109 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: coreos/rkt PackageName: coreos/rkt -SPDXID: SPDXRef-Package90 +SPDXID: SPDXRef-Package110 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: cpuguy83/go-md2man PackageName: cpuguy83/go-md2man -SPDXID: SPDXRef-Package91 +SPDXID: SPDXRef-Package111 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: cyphar/filepath-securejoin PackageName: cyphar/filepath-securejoin -SPDXID: SPDXRef-Package92 +SPDXID: SPDXRef-Package112 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: daaku/go.zipexe PackageName: daaku/go.zipexe -SPDXID: SPDXRef-Package93 +SPDXID: SPDXRef-Package113 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: davecgh/go-spew PackageName: davecgh/go-spew -SPDXID: SPDXRef-Package94 +SPDXID: SPDXRef-Package114 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: ISC PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: daviddengcn/go-colortext PackageName: daviddengcn/go-colortext -SPDXID: SPDXRef-Package95 +SPDXID: SPDXRef-Package115 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: dchest/safefile PackageName: dchest/safefile -SPDXID: SPDXRef-Package96 +SPDXID: SPDXRef-Package116 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-2-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: deckarep/golang-set PackageName: deckarep/golang-set -SPDXID: SPDXRef-Package97 +SPDXID: SPDXRef-Package117 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: denverdino/aliyungo PackageName: denverdino/aliyungo -SPDXID: SPDXRef-Package98 +SPDXID: SPDXRef-Package118 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: dgrijalva/jwt-go PackageName: dgrijalva/jwt-go -SPDXID: SPDXRef-Package99 +SPDXID: SPDXRef-Package119 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: digitalocean/godo PackageName: digitalocean/godo -SPDXID: SPDXRef-Package100 +SPDXID: SPDXRef-Package120 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: djherbis/atime PackageName: djherbis/atime -SPDXID: SPDXRef-Package101 +SPDXID: SPDXRef-Package121 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: docker/cli PackageName: docker/cli -SPDXID: SPDXRef-Package102 +SPDXID: SPDXRef-Package122 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (Apache-2.0 AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: docker/distribution PackageName: docker/distribution -SPDXID: SPDXRef-Package103 +SPDXID: SPDXRef-Package123 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: docker/docker PackageName: docker/docker -SPDXID: SPDXRef-Package104 +SPDXID: SPDXRef-Package124 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (Apache-2.0 AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: docker/engine-api PackageName: docker/engine-api -SPDXID: SPDXRef-Package105 +SPDXID: SPDXRef-Package125 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: docker/go-connections PackageName: docker/go-connections -SPDXID: SPDXRef-Package106 +SPDXID: SPDXRef-Package126 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: docker/libcompose PackageName: docker/libcompose -SPDXID: SPDXRef-Package107 +SPDXID: SPDXRef-Package127 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: docker/libnetwork PackageName: docker/libnetwork -SPDXID: SPDXRef-Package108 +SPDXID: SPDXRef-Package128 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: docker/libtrust PackageName: docker/libtrust -SPDXID: SPDXRef-Package109 +SPDXID: SPDXRef-Package129 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: docker/machine PackageName: docker/machine -SPDXID: SPDXRef-Package110 +SPDXID: SPDXRef-Package130 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: dustin/go-humanize PackageName: dustin/go-humanize -SPDXID: SPDXRef-Package111 +SPDXID: SPDXRef-Package131 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: eapache/channels PackageName: eapache/channels -SPDXID: SPDXRef-Package112 +SPDXID: SPDXRef-Package132 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: eapache/go-resiliency PackageName: eapache/go-resiliency -SPDXID: SPDXRef-Package113 +SPDXID: SPDXRef-Package133 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: eapache/go-xerial-snappy PackageName: eapache/go-xerial-snappy -SPDXID: SPDXRef-Package114 +SPDXID: SPDXRef-Package134 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: eapache/queue PackageName: eapache/queue -SPDXID: SPDXRef-Package115 +SPDXID: SPDXRef-Package135 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: elazarl/go-bindata-assetfs PackageName: elazarl/go-bindata-assetfs -SPDXID: SPDXRef-Package116 +SPDXID: SPDXRef-Package136 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-2-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: elazarl/goproxy PackageName: elazarl/goproxy -SPDXID: SPDXRef-Package117 +SPDXID: SPDXRef-Package137 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: emicklei/go-restful PackageName: emicklei/go-restful -SPDXID: SPDXRef-Package118 +SPDXID: SPDXRef-Package138 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: emicklei/go-restful-swagger12 PackageName: emicklei/go-restful-swagger12 -SPDXID: SPDXRef-Package119 +SPDXID: SPDXRef-Package139 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: emirpasic/gods PackageName: emirpasic/gods -SPDXID: SPDXRef-Package120 +SPDXID: SPDXRef-Package140 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-2-Clause AND ISC) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: euank/go-kmsg-parser PackageName: euank/go-kmsg-parser -SPDXID: SPDXRef-Package121 +SPDXID: SPDXRef-Package141 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: evanphx/json-patch PackageName: evanphx/json-patch -SPDXID: SPDXRef-Package122 +SPDXID: SPDXRef-Package142 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: exponent-io/jsonpath PackageName: exponent-io/jsonpath -SPDXID: SPDXRef-Package123 +SPDXID: SPDXRef-Package143 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: fatih/camelcase PackageName: fatih/camelcase -SPDXID: SPDXRef-Package124 +SPDXID: SPDXRef-Package144 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: fatih/structs PackageName: fatih/structs -SPDXID: SPDXRef-Package125 +SPDXID: SPDXRef-Package145 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: flynn/go-shlex PackageName: flynn/go-shlex -SPDXID: SPDXRef-Package126 +SPDXID: SPDXRef-Package146 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: fsnotify/fsnotify PackageName: fsnotify/fsnotify -SPDXID: SPDXRef-Package127 +SPDXID: SPDXRef-Package147 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: fsouza/fake-gcs-server PackageName: fsouza/fake-gcs-server -SPDXID: SPDXRef-Package128 +SPDXID: SPDXRef-Package148 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-2-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: fsouza/go-dockerclient PackageName: fsouza/go-dockerclient -SPDXID: SPDXRef-Package129 +SPDXID: SPDXRef-Package149 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-2-Clause AND Apache-2.0) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: fullsailor/pkcs7 PackageName: fullsailor/pkcs7 -SPDXID: SPDXRef-Package130 +SPDXID: SPDXRef-Package150 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: GeertJohan/go.rice PackageName: GeertJohan/go.rice -SPDXID: SPDXRef-Package131 +SPDXID: SPDXRef-Package151 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-2-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: ghodss/yaml PackageName: ghodss/yaml -SPDXID: SPDXRef-Package132 +SPDXID: SPDXRef-Package152 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: globalsign/mgo PackageName: globalsign/mgo -SPDXID: SPDXRef-Package133 +SPDXID: SPDXRef-Package153 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-2-Clause AND BSD-3-Clause) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: go-ini/ini PackageName: go-ini/ini -SPDXID: SPDXRef-Package134 +SPDXID: SPDXRef-Package154 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: go-openapi/analysis PackageName: go-openapi/analysis -SPDXID: SPDXRef-Package135 +SPDXID: SPDXRef-Package155 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: go-openapi/errors PackageName: go-openapi/errors -SPDXID: SPDXRef-Package136 +SPDXID: SPDXRef-Package156 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: go-openapi/jsonpointer PackageName: go-openapi/jsonpointer -SPDXID: SPDXRef-Package137 +SPDXID: SPDXRef-Package157 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: go-openapi/jsonreference PackageName: go-openapi/jsonreference -SPDXID: SPDXRef-Package138 +SPDXID: SPDXRef-Package158 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: go-openapi/loads PackageName: go-openapi/loads -SPDXID: SPDXRef-Package139 +SPDXID: SPDXRef-Package159 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: go-openapi/runtime PackageName: go-openapi/runtime -SPDXID: SPDXRef-Package140 +SPDXID: SPDXRef-Package160 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: go-openapi/spec PackageName: go-openapi/spec -SPDXID: SPDXRef-Package141 +SPDXID: SPDXRef-Package161 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (CC-BY-4.0 AND Apache-2.0 AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: go-openapi/strfmt PackageName: go-openapi/strfmt -SPDXID: SPDXRef-Package142 +SPDXID: SPDXRef-Package162 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: go-openapi/swag PackageName: go-openapi/swag -SPDXID: SPDXRef-Package143 +SPDXID: SPDXRef-Package163 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (Apache-2.0 AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: go-openapi/validate PackageName: go-openapi/validate -SPDXID: SPDXRef-Package144 +SPDXID: SPDXRef-Package164 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: go-ozzo/ozzo-validation PackageName: go-ozzo/ozzo-validation -SPDXID: SPDXRef-Package145 +SPDXID: SPDXRef-Package165 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: go-yaml/yaml PackageName: go-yaml/yaml -SPDXID: SPDXRef-Package146 +SPDXID: SPDXRef-Package166 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (Apache-2.0 AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: gobuffalo/envy PackageName: gobuffalo/envy -SPDXID: SPDXRef-Package147 +SPDXID: SPDXRef-Package167 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: godbus/dbus PackageName: godbus/dbus -SPDXID: SPDXRef-Package148 +SPDXID: SPDXRef-Package168 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-2-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: gogo/protobuf PackageName: gogo/protobuf -SPDXID: SPDXRef-Package149 +SPDXID: SPDXRef-Package169 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-2-Clause AND BSD-3-Clause) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: golang/dep PackageName: golang/dep -SPDXID: SPDXRef-Package150 +SPDXID: SPDXRef-Package170 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: golang/glog PackageName: golang/glog -SPDXID: SPDXRef-Package151 +SPDXID: SPDXRef-Package171 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: golang/groupcache PackageName: golang/groupcache -SPDXID: SPDXRef-Package152 +SPDXID: SPDXRef-Package172 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: golang/lint PackageName: golang/lint -SPDXID: SPDXRef-Package153 +SPDXID: SPDXRef-Package173 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: golang/mock PackageName: golang/mock -SPDXID: SPDXRef-Package154 +SPDXID: SPDXRef-Package174 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: golang/protobuf PackageName: golang/protobuf -SPDXID: SPDXRef-Package155 +SPDXID: SPDXRef-Package175 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: golang/snappy PackageName: golang/snappy -SPDXID: SPDXRef-Package156 +SPDXID: SPDXRef-Package176 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: google/btree PackageName: google/btree -SPDXID: SPDXRef-Package157 +SPDXID: SPDXRef-Package177 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: google/cadvisor PackageName: google/cadvisor -SPDXID: SPDXRef-Package158 +SPDXID: SPDXRef-Package178 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: google/certificate-transparency-go PackageName: google/certificate-transparency-go -SPDXID: SPDXRef-Package159 +SPDXID: SPDXRef-Package179 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: google/go-containerregistry PackageName: google/go-containerregistry -SPDXID: SPDXRef-Package160 +SPDXID: SPDXRef-Package180 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: google/go-querystring PackageName: google/go-querystring -SPDXID: SPDXRef-Package161 +SPDXID: SPDXRef-Package181 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: google/go-tpm PackageName: google/go-tpm -SPDXID: SPDXRef-Package162 +SPDXID: SPDXRef-Package182 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: google/gofuzz PackageName: google/gofuzz -SPDXID: SPDXRef-Package163 +SPDXID: SPDXRef-Package183 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: google/uuid PackageName: google/uuid -SPDXID: SPDXRef-Package164 +SPDXID: SPDXRef-Package184 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: googleapis/gax-go PackageName: googleapis/gax-go -SPDXID: SPDXRef-Package165 +SPDXID: SPDXRef-Package185 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: googleapis/gnostic PackageName: googleapis/gnostic -SPDXID: SPDXRef-Package166 +SPDXID: SPDXRef-Package186 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0 AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: GoogleCloudPlatform/gke-managed-certs PackageName: GoogleCloudPlatform/gke-managed-certs -SPDXID: SPDXRef-Package167 +SPDXID: SPDXRef-Package187 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: gophercloud/gophercloud PackageName: gophercloud/gophercloud -SPDXID: SPDXRef-Package168 +SPDXID: SPDXRef-Package188 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: gorilla/context PackageName: gorilla/context -SPDXID: SPDXRef-Package169 +SPDXID: SPDXRef-Package189 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: gorilla/mux PackageName: gorilla/mux -SPDXID: SPDXRef-Package170 +SPDXID: SPDXRef-Package190 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: gorilla/securecookie PackageName: gorilla/securecookie -SPDXID: SPDXRef-Package171 +SPDXID: SPDXRef-Package191 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: gorilla/sessions PackageName: gorilla/sessions -SPDXID: SPDXRef-Package172 +SPDXID: SPDXRef-Package192 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: gorilla/websocket PackageName: gorilla/websocket -SPDXID: SPDXRef-Package173 +SPDXID: SPDXRef-Package193 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-2-Clause AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: gregjones/httpcache PackageName: gregjones/httpcache -SPDXID: SPDXRef-Package174 +SPDXID: SPDXRef-Package194 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: grpc-ecosystem/go-grpc-middleware PackageName: grpc-ecosystem/go-grpc-middleware -SPDXID: SPDXRef-Package175 +SPDXID: SPDXRef-Package195 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: grpc-ecosystem/go-grpc-prometheus PackageName: grpc-ecosystem/go-grpc-prometheus -SPDXID: SPDXRef-Package176 +SPDXID: SPDXRef-Package196 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: grpc-ecosystem/grpc-gateway PackageName: grpc-ecosystem/grpc-gateway -SPDXID: SPDXRef-Package177 +SPDXID: SPDXRef-Package197 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: hawkular/hawkular-client-go PackageName: hawkular/hawkular-client-go -SPDXID: SPDXRef-Package178 +SPDXID: SPDXRef-Package198 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: heketi/heketi REST API PackageName: heketi/heketi REST API -SPDXID: SPDXRef-Package179 +SPDXID: SPDXRef-Package199 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (Apache-2.0 OR LGPL-3.0-or-later) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: hpcloud/tail PackageName: hpcloud/tail -SPDXID: SPDXRef-Package180 +SPDXID: SPDXRef-Package200 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: huandu/xstrings PackageName: huandu/xstrings -SPDXID: SPDXRef-Package181 +SPDXID: SPDXRef-Package201 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: imdario/mergo PackageName: imdario/mergo -SPDXID: SPDXRef-Package182 +SPDXID: SPDXRef-Package202 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: inconshreveable/mousetrap PackageName: inconshreveable/mousetrap -SPDXID: SPDXRef-Package183 +SPDXID: SPDXRef-Package203 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: influxdata/influxdb PackageName: influxdata/influxdb -SPDXID: SPDXRef-Package184 +SPDXID: SPDXRef-Package204 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: jimmidyson/go-download PackageName: jimmidyson/go-download -SPDXID: SPDXRef-Package185 +SPDXID: SPDXRef-Package205 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: jinzhu/gorm PackageName: jinzhu/gorm -SPDXID: SPDXRef-Package186 +SPDXID: SPDXRef-Package206 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: jinzhu/inflection PackageName: jinzhu/inflection -SPDXID: SPDXRef-Package187 +SPDXID: SPDXRef-Package207 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: jmespath/go-jmespath PackageName: jmespath/go-jmespath -SPDXID: SPDXRef-Package188 +SPDXID: SPDXRef-Package208 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: jmhodges/clock PackageName: jmhodges/clock -SPDXID: SPDXRef-Package189 +SPDXID: SPDXRef-Package209 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: jmoiron/sqlx PackageName: jmoiron/sqlx -SPDXID: SPDXRef-Package190 +SPDXID: SPDXRef-Package210 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: joho/godotenv PackageName: joho/godotenv -SPDXID: SPDXRef-Package191 +SPDXID: SPDXRef-Package211 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: jonboulle/clockwork PackageName: jonboulle/clockwork -SPDXID: SPDXRef-Package192 +SPDXID: SPDXRef-Package212 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: jpillora/backoff PackageName: jpillora/backoff -SPDXID: SPDXRef-Package193 +SPDXID: SPDXRef-Package213 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: json-iterator/go PackageName: json-iterator/go -SPDXID: SPDXRef-Package194 +SPDXID: SPDXRef-Package214 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: kardianos/osext PackageName: kardianos/osext -SPDXID: SPDXRef-Package195 +SPDXID: SPDXRef-Package215 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: karrick/godirwalk PackageName: karrick/godirwalk -SPDXID: SPDXRef-Package196 +SPDXID: SPDXRef-Package216 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-2-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: kevinburke/ssh_config PackageName: kevinburke/ssh_config -SPDXID: SPDXRef-Package197 +SPDXID: SPDXRef-Package217 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: kisielk/sqlstruct PackageName: kisielk/sqlstruct -SPDXID: SPDXRef-Package198 +SPDXID: SPDXRef-Package218 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: knative/build PackageName: knative/build -SPDXID: SPDXRef-Package199 +SPDXID: SPDXRef-Package219 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: kr/fs PackageName: kr/fs -SPDXID: SPDXRef-Package200 +SPDXID: SPDXRef-Package220 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: kr/pretty PackageName: kr/pretty -SPDXID: SPDXRef-Package201 +SPDXID: SPDXRef-Package221 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: kr/pty PackageName: kr/pty -SPDXID: SPDXRef-Package202 +SPDXID: SPDXRef-Package222 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: kr/text PackageName: kr/text -SPDXID: SPDXRef-Package203 +SPDXID: SPDXRef-Package223 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: kubernetes-incubator/apiserver-builder PackageName: kubernetes-incubator/apiserver-builder -SPDXID: SPDXRef-Package204 +SPDXID: SPDXRef-Package224 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: kubernetes-incubator/reference-docs PackageName: kubernetes-incubator/reference-docs -SPDXID: SPDXRef-Package205 +SPDXID: SPDXRef-Package225 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: kubernetes-sigs/application PackageName: kubernetes-sigs/application -SPDXID: SPDXRef-Package206 +SPDXID: SPDXRef-Package226 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: kubernetes/repo-infra PackageName: kubernetes/repo-infra -SPDXID: SPDXRef-Package207 +SPDXID: SPDXRef-Package227 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: kylelemons/godebug PackageName: kylelemons/godebug -SPDXID: SPDXRef-Package208 +SPDXID: SPDXRef-Package228 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: lib/pq PackageName: lib/pq -SPDXID: SPDXRef-Package209 +SPDXID: SPDXRef-Package229 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: libopenstorage/openstorage PackageName: libopenstorage/openstorage -SPDXID: SPDXRef-Package210 +SPDXID: SPDXRef-Package230 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: libvirt/libvirt-go PackageName: libvirt/libvirt-go -SPDXID: SPDXRef-Package211 +SPDXID: SPDXRef-Package231 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: libvirt/libvirt-go-xml PackageName: libvirt/libvirt-go-xml -SPDXID: SPDXRef-Package212 +SPDXID: SPDXRef-Package232 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: lpabon/godbc PackageName: lpabon/godbc -SPDXID: SPDXRef-Package213 +SPDXID: SPDXRef-Package233 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: lxn/win PackageName: lxn/win -SPDXID: SPDXRef-Package214 +SPDXID: SPDXRef-Package234 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: magiconair/properties PackageName: magiconair/properties -SPDXID: SPDXRef-Package215 +SPDXID: SPDXRef-Package235 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-2-Clause AND BSD-3-Clause) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: mailru/easyjson PackageName: mailru/easyjson -SPDXID: SPDXRef-Package216 +SPDXID: SPDXRef-Package236 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: MakeNowJust/heredoc PackageName: MakeNowJust/heredoc -SPDXID: SPDXRef-Package217 +SPDXID: SPDXRef-Package237 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: markbates/inflect PackageName: markbates/inflect -SPDXID: SPDXRef-Package218 +SPDXID: SPDXRef-Package238 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: marpaia/graphite-golang PackageName: marpaia/graphite-golang -SPDXID: SPDXRef-Package219 +SPDXID: SPDXRef-Package239 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: Masterminds/semver PackageName: Masterminds/semver -SPDXID: SPDXRef-Package220 +SPDXID: SPDXRef-Package240 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: Masterminds/sprig PackageName: Masterminds/sprig -SPDXID: SPDXRef-Package221 +SPDXID: SPDXRef-Package241 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: Masterminds/vcs PackageName: Masterminds/vcs -SPDXID: SPDXRef-Package222 +SPDXID: SPDXRef-Package242 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: mattn/go-runewidth PackageName: mattn/go-runewidth -SPDXID: SPDXRef-Package223 +SPDXID: SPDXRef-Package243 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: mattn/go-shellwords PackageName: mattn/go-shellwords -SPDXID: SPDXRef-Package224 +SPDXID: SPDXRef-Package244 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: mattn/go-zglob PackageName: mattn/go-zglob -SPDXID: SPDXRef-Package225 +SPDXID: SPDXRef-Package245 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: matttproud/golang_protobuf_extensions PackageName: matttproud/golang_protobuf_extensions -SPDXID: SPDXRef-Package226 +SPDXID: SPDXRef-Package246 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: mesos/mesos-go PackageName: mesos/mesos-go -SPDXID: SPDXRef-Package227 +SPDXID: SPDXRef-Package247 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: mholt/caddy PackageName: mholt/caddy -SPDXID: SPDXRef-Package228 +SPDXID: SPDXRef-Package248 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: Microsoft/go-winio PackageName: Microsoft/go-winio -SPDXID: SPDXRef-Package229 +SPDXID: SPDXRef-Package249 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: Microsoft/hcsshim PackageName: Microsoft/hcsshim -SPDXID: SPDXRef-Package230 +SPDXID: SPDXRef-Package250 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: miekg/coredns PackageName: miekg/coredns -SPDXID: SPDXRef-Package231 +SPDXID: SPDXRef-Package251 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: miekg/dns PackageName: miekg/dns -SPDXID: SPDXRef-Package232 +SPDXID: SPDXRef-Package252 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: mindprince/gonvml PackageName: mindprince/gonvml -SPDXID: SPDXRef-Package233 +SPDXID: SPDXRef-Package253 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: mistifyio/go-zfs PackageName: mistifyio/go-zfs -SPDXID: SPDXRef-Package234 +SPDXID: SPDXRef-Package254 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: mitchellh/go-homedir PackageName: mitchellh/go-homedir -SPDXID: SPDXRef-Package235 +SPDXID: SPDXRef-Package255 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: mitchellh/go-ps PackageName: mitchellh/go-ps -SPDXID: SPDXRef-Package236 +SPDXID: SPDXRef-Package256 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: mitchellh/go-wordwrap PackageName: mitchellh/go-wordwrap -SPDXID: SPDXRef-Package237 +SPDXID: SPDXRef-Package257 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: mitchellh/hashstructure PackageName: mitchellh/hashstructure -SPDXID: SPDXRef-Package238 +SPDXID: SPDXRef-Package258 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: mitchellh/mapstructure PackageName: mitchellh/mapstructure -SPDXID: SPDXRef-Package239 +SPDXID: SPDXRef-Package259 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: moby/hyperkit PackageName: moby/hyperkit -SPDXID: SPDXRef-Package240 +SPDXID: SPDXRef-Package260 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: modern-go/concurrent PackageName: modern-go/concurrent -SPDXID: SPDXRef-Package241 +SPDXID: SPDXRef-Package261 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: modern-go/reflect2 PackageName: modern-go/reflect2 -SPDXID: SPDXRef-Package242 +SPDXID: SPDXRef-Package262 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: mohae/deepcopy PackageName: mohae/deepcopy -SPDXID: SPDXRef-Package243 +SPDXID: SPDXRef-Package263 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: moul/http2curl PackageName: moul/http2curl -SPDXID: SPDXRef-Package244 +SPDXID: SPDXRef-Package264 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: mrunalp/fileutils PackageName: mrunalp/fileutils -SPDXID: SPDXRef-Package245 +SPDXID: SPDXRef-Package265 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: mvdan/xurls PackageName: mvdan/xurls -SPDXID: SPDXRef-Package246 +SPDXID: SPDXRef-Package266 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: mxk/go-flowrate PackageName: mxk/go-flowrate -SPDXID: SPDXRef-Package247 +SPDXID: SPDXRef-Package267 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: ncabatoff/process-exporter PackageName: ncabatoff/process-exporter -SPDXID: SPDXRef-Package248 +SPDXID: SPDXRef-Package268 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (Apache-2.0 AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: nightlyone/lockfile PackageName: nightlyone/lockfile -SPDXID: SPDXRef-Package249 +SPDXID: SPDXRef-Package269 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: novln/docker-parser PackageName: novln/docker-parser -SPDXID: SPDXRef-Package250 +SPDXID: SPDXRef-Package270 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: NYTimes/gziphandler PackageName: NYTimes/gziphandler -SPDXID: SPDXRef-Package251 +SPDXID: SPDXRef-Package271 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: olekukonko/tablewriter PackageName: olekukonko/tablewriter -SPDXID: SPDXRef-Package252 +SPDXID: SPDXRef-Package272 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: onsi/ginkgo PackageName: onsi/ginkgo -SPDXID: SPDXRef-Package253 +SPDXID: SPDXRef-Package273 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: onsi/gomega PackageName: onsi/gomega -SPDXID: SPDXRef-Package254 +SPDXID: SPDXRef-Package274 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: opencontainers/image-spec PackageName: opencontainers/image-spec -SPDXID: SPDXRef-Package255 +SPDXID: SPDXRef-Package275 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: opencontainers/runtime-spec PackageName: opencontainers/runtime-spec -SPDXID: SPDXRef-Package256 +SPDXID: SPDXRef-Package276 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: opencontainers/selinux PackageName: opencontainers/selinux -SPDXID: SPDXRef-Package257 +SPDXID: SPDXRef-Package277 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: openshift/origin PackageName: openshift/origin -SPDXID: SPDXRef-Package258 +SPDXID: SPDXRef-Package278 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: opentracing/opentracing-go PackageName: opentracing/opentracing-go -SPDXID: SPDXRef-Package259 +SPDXID: SPDXRef-Package279 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: parnurzeal/gorequest PackageName: parnurzeal/gorequest -SPDXID: SPDXRef-Package260 +SPDXID: SPDXRef-Package280 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: patrickmn/go-cache PackageName: patrickmn/go-cache -SPDXID: SPDXRef-Package261 +SPDXID: SPDXRef-Package281 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: paultag/sniff PackageName: paultag/sniff -SPDXID: SPDXRef-Package262 +SPDXID: SPDXRef-Package282 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: pborman/uuid PackageName: pborman/uuid -SPDXID: SPDXRef-Package263 +SPDXID: SPDXRef-Package283 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: pelletier/go-buffruneio PackageName: pelletier/go-buffruneio -SPDXID: SPDXRef-Package264 +SPDXID: SPDXRef-Package284 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: pelletier/go-toml PackageName: pelletier/go-toml -SPDXID: SPDXRef-Package265 +SPDXID: SPDXRef-Package285 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: petar/GoLLRB PackageName: petar/GoLLRB -SPDXID: SPDXRef-Package266 +SPDXID: SPDXRef-Package286 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: peterbourgon/diskv PackageName: peterbourgon/diskv -SPDXID: SPDXRef-Package267 +SPDXID: SPDXRef-Package287 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: pierrec/lz4 PackageName: pierrec/lz4 -SPDXID: SPDXRef-Package268 +SPDXID: SPDXRef-Package288 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: pierrec/xxHash PackageName: pierrec/xxHash -SPDXID: SPDXRef-Package269 +SPDXID: SPDXRef-Package289 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: pkg/browser PackageName: pkg/browser -SPDXID: SPDXRef-Package270 +SPDXID: SPDXRef-Package290 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-2-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: pkg/errors PackageName: pkg/errors -SPDXID: SPDXRef-Package271 +SPDXID: SPDXRef-Package291 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-2-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: pkg/profile PackageName: pkg/profile -SPDXID: SPDXRef-Package272 +SPDXID: SPDXRef-Package292 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-2-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: pkg/sftp PackageName: pkg/sftp -SPDXID: SPDXRef-Package273 +SPDXID: SPDXRef-Package293 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-2-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: pmezard/go-difflib PackageName: pmezard/go-difflib -SPDXID: SPDXRef-Package274 +SPDXID: SPDXRef-Package294 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: pquerna/cachecontrol PackageName: pquerna/cachecontrol -SPDXID: SPDXRef-Package275 +SPDXID: SPDXRef-Package295 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: pquerna/ffjson PackageName: pquerna/ffjson -SPDXID: SPDXRef-Package276 +SPDXID: SPDXRef-Package296 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0 AND ISC) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: prometheus/client_golang PackageName: prometheus/client_golang -SPDXID: SPDXRef-Package277 +SPDXID: SPDXRef-Package297 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0 AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: prometheus/client_model PackageName: prometheus/client_model -SPDXID: SPDXRef-Package278 +SPDXID: SPDXRef-Package298 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: prometheus/common PackageName: prometheus/common -SPDXID: SPDXRef-Package279 +SPDXID: SPDXRef-Package299 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: prometheus/procfs PackageName: prometheus/procfs -SPDXID: SPDXRef-Package280 +SPDXID: SPDXRef-Package300 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: PuerkitoBio/purell PackageName: PuerkitoBio/purell -SPDXID: SPDXRef-Package281 +SPDXID: SPDXRef-Package301 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: PuerkitoBio/urlesc PackageName: PuerkitoBio/urlesc -SPDXID: SPDXRef-Package282 +SPDXID: SPDXRef-Package302 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: r2d4/external-storage PackageName: r2d4/external-storage -SPDXID: SPDXRef-Package283 +SPDXID: SPDXRef-Package303 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: rackspace/gophercloud PackageName: rackspace/gophercloud -SPDXID: SPDXRef-Package284 +SPDXID: SPDXRef-Package304 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: rancher/go-rancher PackageName: rancher/go-rancher -SPDXID: SPDXRef-Package285 +SPDXID: SPDXRef-Package305 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: rcrowley/go-metrics PackageName: rcrowley/go-metrics -SPDXID: SPDXRef-Package286 +SPDXID: SPDXRef-Package306 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-2-Clause-FreeBSD PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: renstrom/dedent PackageName: renstrom/dedent -SPDXID: SPDXRef-Package287 +SPDXID: SPDXRef-Package307 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: Rican7/retry PackageName: Rican7/retry -SPDXID: SPDXRef-Package288 +SPDXID: SPDXRef-Package308 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: riemann/riemann-go-client PackageName: riemann/riemann-go-client -SPDXID: SPDXRef-Package289 +SPDXID: SPDXRef-Package309 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: robfig/cron PackageName: robfig/cron -SPDXID: SPDXRef-Package290 +SPDXID: SPDXRef-Package310 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: russross/blackfriday PackageName: russross/blackfriday -SPDXID: SPDXRef-Package291 +SPDXID: SPDXRef-Package311 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-2-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: samalba/dockerclient PackageName: samalba/dockerclient -SPDXID: SPDXRef-Package292 +SPDXID: SPDXRef-Package312 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: satori/go.uuid PackageName: satori/go.uuid -SPDXID: SPDXRef-Package293 +SPDXID: SPDXRef-Package313 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: scalingdata/gcfg PackageName: scalingdata/gcfg -SPDXID: SPDXRef-Package294 +SPDXID: SPDXRef-Package314 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-2-Clause AND BSD-3-Clause) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: sdboyer/constext PackageName: sdboyer/constext -SPDXID: SPDXRef-Package295 +SPDXID: SPDXRef-Package315 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: seccomp/libseccomp-golang PackageName: seccomp/libseccomp-golang -SPDXID: SPDXRef-Package296 +SPDXID: SPDXRef-Package316 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-2-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: sergi/go-diff PackageName: sergi/go-diff -SPDXID: SPDXRef-Package297 +SPDXID: SPDXRef-Package317 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: Shopify/sarama PackageName: Shopify/sarama -SPDXID: SPDXRef-Package298 +SPDXID: SPDXRef-Package318 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: shurcooL/githubv4 PackageName: shurcooL/githubv4 -SPDXID: SPDXRef-Package299 +SPDXID: SPDXRef-Package319 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: shurcooL/go PackageName: shurcooL/go -SPDXID: SPDXRef-Package300 +SPDXID: SPDXRef-Package320 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: shurcooL/graphql PackageName: shurcooL/graphql -SPDXID: SPDXRef-Package301 +SPDXID: SPDXRef-Package321 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: shurcooL/sanitized_anchor_name PackageName: shurcooL/sanitized_anchor_name -SPDXID: SPDXRef-Package302 +SPDXID: SPDXRef-Package322 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: sirupsen/logrus PackageName: sirupsen/logrus -SPDXID: SPDXRef-Package303 +SPDXID: SPDXRef-Package323 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-2-Clause AND BSD-3-Clause AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: skynetservices/skydns PackageName: skynetservices/skydns -SPDXID: SPDXRef-Package304 +SPDXID: SPDXRef-Package324 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (Apache-2.0 AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: smartystreets/go-aws-auth PackageName: smartystreets/go-aws-auth -SPDXID: SPDXRef-Package305 +SPDXID: SPDXRef-Package325 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: soheilhy/cmux PackageName: soheilhy/cmux -SPDXID: SPDXRef-Package306 +SPDXID: SPDXRef-Package326 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: spf13/afero PackageName: spf13/afero -SPDXID: SPDXRef-Package307 +SPDXID: SPDXRef-Package327 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: spf13/cast PackageName: spf13/cast -SPDXID: SPDXRef-Package308 +SPDXID: SPDXRef-Package328 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: spf13/cobra PackageName: spf13/cobra -SPDXID: SPDXRef-Package309 +SPDXID: SPDXRef-Package329 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (Apache-2.0 AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: spf13/jwalterweatherman PackageName: spf13/jwalterweatherman -SPDXID: SPDXRef-Package310 +SPDXID: SPDXRef-Package330 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: spf13/pflag PackageName: spf13/pflag -SPDXID: SPDXRef-Package311 +SPDXID: SPDXRef-Package331 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: spf13/viper PackageName: spf13/viper -SPDXID: SPDXRef-Package312 +SPDXID: SPDXRef-Package332 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: storageos/go-api PackageName: storageos/go-api -SPDXID: SPDXRef-Package313 +SPDXID: SPDXRef-Package333 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-2-Clause AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: streadway/quantile PackageName: streadway/quantile -SPDXID: SPDXRef-Package314 +SPDXID: SPDXRef-Package334 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-2-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: stretchr/objx PackageName: stretchr/objx -SPDXID: SPDXRef-Package315 +SPDXID: SPDXRef-Package335 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: stretchr/testify PackageName: stretchr/testify -SPDXID: SPDXRef-Package316 +SPDXID: SPDXRef-Package336 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: syndtr/gocapability PackageName: syndtr/gocapability -SPDXID: SPDXRef-Package317 +SPDXID: SPDXRef-Package337 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-2-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: tchap/go-patricia PackageName: tchap/go-patricia -SPDXID: SPDXRef-Package318 +SPDXID: SPDXRef-Package338 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: thockin/glogr PackageName: thockin/glogr -SPDXID: SPDXRef-Package319 +SPDXID: SPDXRef-Package339 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: thockin/logr PackageName: thockin/logr -SPDXID: SPDXRef-Package320 +SPDXID: SPDXRef-Package340 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: tmc/grpc-websocket-proxy PackageName: tmc/grpc-websocket-proxy -SPDXID: SPDXRef-Package321 +SPDXID: SPDXRef-Package341 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: tsenart/vegeta PackageName: tsenart/vegeta -SPDXID: SPDXRef-Package322 +SPDXID: SPDXRef-Package342 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: ugorji/go PackageName: ugorji/go -SPDXID: SPDXRef-Package323 +SPDXID: SPDXRef-Package343 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: Unknwon/goconfig PackageName: Unknwon/goconfig -SPDXID: SPDXRef-Package324 +SPDXID: SPDXRef-Package344 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: urfave/cli PackageName: urfave/cli -SPDXID: SPDXRef-Package325 +SPDXID: SPDXRef-Package345 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: vishvananda/netlink PackageName: vishvananda/netlink -SPDXID: SPDXRef-Package326 +SPDXID: SPDXRef-Package346 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: vishvananda/netns PackageName: vishvananda/netns -SPDXID: SPDXRef-Package327 +SPDXID: SPDXRef-Package347 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: vmware/govmomi PackageName: vmware/govmomi -SPDXID: SPDXRef-Package328 +SPDXID: SPDXRef-Package348 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: vmware/photon-controller-go-sdk PackageName: vmware/photon-controller-go-sdk -SPDXID: SPDXRef-Package329 +SPDXID: SPDXRef-Package349 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: weaveworks/mesh PackageName: weaveworks/mesh -SPDXID: SPDXRef-Package330 +SPDXID: SPDXRef-Package350 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: xanzy/go-cloudstack PackageName: xanzy/go-cloudstack -SPDXID: SPDXRef-Package331 +SPDXID: SPDXRef-Package351 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: xeipuuv/gojsonpointer PackageName: xeipuuv/gojsonpointer -SPDXID: SPDXRef-Package332 +SPDXID: SPDXRef-Package352 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: xeipuuv/gojsonreference PackageName: xeipuuv/gojsonreference -SPDXID: SPDXRef-Package333 +SPDXID: SPDXRef-Package353 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: xeipuuv/gojsonschema PackageName: xeipuuv/gojsonschema -SPDXID: SPDXRef-Package334 +SPDXID: SPDXRef-Package354 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (Apache-2.0 AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: xiang90/probing PackageName: xiang90/probing -SPDXID: SPDXRef-Package335 +SPDXID: SPDXRef-Package355 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: zakjan/cert-chain-resolver PackageName: zakjan/cert-chain-resolver -SPDXID: SPDXRef-Package336 +SPDXID: SPDXRef-Package356 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: ziutek/syslog PackageName: ziutek/syslog -SPDXID: SPDXRef-Package337 +SPDXID: SPDXRef-Package357 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: go.opencensus.io PackageName: go.opencensus.io -SPDXID: SPDXRef-Package338 +SPDXID: SPDXRef-Package358 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: go.uber.org/atomic PackageName: go.uber.org/atomic -SPDXID: SPDXRef-Package339 +SPDXID: SPDXRef-Package359 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: go.uber.org/multierr PackageName: go.uber.org/multierr -SPDXID: SPDXRef-Package340 +SPDXID: SPDXRef-Package360 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: go.uber.org/zap PackageName: go.uber.org/zap -SPDXID: SPDXRef-Package341 +SPDXID: SPDXRef-Package361 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: go4.org/errorutil PackageName: go4.org/errorutil -SPDXID: SPDXRef-Package342 +SPDXID: SPDXRef-Package362 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: x/build PackageName: x/build -SPDXID: SPDXRef-Package343 +SPDXID: SPDXRef-Package363 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: x/exp PackageName: x/exp -SPDXID: SPDXRef-Package344 +SPDXID: SPDXRef-Package364 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: x/lint PackageName: x/lint -SPDXID: SPDXRef-Package345 +SPDXID: SPDXRef-Package365 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: x/oauth2 PackageName: x/oauth2 -SPDXID: SPDXRef-Package346 +SPDXID: SPDXRef-Package366 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: x/sync PackageName: x/sync -SPDXID: SPDXRef-Package347 +SPDXID: SPDXRef-Package367 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: x/sys PackageName: x/sys -SPDXID: SPDXRef-Package348 +SPDXID: SPDXRef-Package368 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-2-Clause AND BSD-3-Clause) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: x/text PackageName: x/text -SPDXID: SPDXRef-Package349 +SPDXID: SPDXRef-Package369 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: x/time PackageName: x/time -SPDXID: SPDXRef-Package350 +SPDXID: SPDXRef-Package370 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: x/tools PackageName: x/tools -SPDXID: SPDXRef-Package351 +SPDXID: SPDXRef-Package371 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause AND Apache-2.0 AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: golang/archive/tar PackageName: golang/archive/tar -SPDXID: SPDXRef-Package352 +SPDXID: SPDXRef-Package372 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: gonum.org/v1/gonum PackageName: gonum.org/v1/gonum -SPDXID: SPDXRef-Package353 +SPDXID: SPDXRef-Package373 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: ((BSD-3-Clause OR CC0-1.0) AND BSD-3-Clause) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: google.golang.org/cloud PackageName: google.golang.org/cloud -SPDXID: SPDXRef-Package354 +SPDXID: SPDXRef-Package374 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: google.golang.org/genproto PackageName: google.golang.org/genproto -SPDXID: SPDXRef-Package355 +SPDXID: SPDXRef-Package375 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: gopkg.in/check.v1 PackageName: gopkg.in/check.v1 -SPDXID: SPDXRef-Package356 +SPDXID: SPDXRef-Package376 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-2-Clause AND BSD-3-Clause) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: gopkg.in/cheggaaa/pb.v1 PackageName: gopkg.in/cheggaaa/pb.v1 -SPDXID: SPDXRef-Package357 +SPDXID: SPDXRef-Package377 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: gopkg.in/fsnotify PackageName: gopkg.in/fsnotify -SPDXID: SPDXRef-Package358 +SPDXID: SPDXRef-Package378 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: gopkg.in/gcfg.v1 PackageName: gopkg.in/gcfg.v1 -SPDXID: SPDXRef-Package359 +SPDXID: SPDXRef-Package379 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: gopkg.in/go-playground/pool.v3 PackageName: gopkg.in/go-playground/pool.v3 -SPDXID: SPDXRef-Package360 +SPDXID: SPDXRef-Package380 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: gopkg.in/igm/sockjs-go.v2 PackageName: gopkg.in/igm/sockjs-go.v2 -SPDXID: SPDXRef-Package361 +SPDXID: SPDXRef-Package381 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: gopkg.in/inf.v0 PackageName: gopkg.in/inf.v0 -SPDXID: SPDXRef-Package362 +SPDXID: SPDXRef-Package382 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: gopkg.in/natefinch/lumberjack.v2 PackageName: gopkg.in/natefinch/lumberjack.v2 -SPDXID: SPDXRef-Package363 +SPDXID: SPDXRef-Package383 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: gopkg.in/olivere/elastic.v3 PackageName: gopkg.in/olivere/elastic.v3 -SPDXID: SPDXRef-Package364 +SPDXID: SPDXRef-Package384 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: gopkg.in/olivere/elastic.v5 PackageName: gopkg.in/olivere/elastic.v5 -SPDXID: SPDXRef-Package365 +SPDXID: SPDXRef-Package385 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: gopkg.in/robfig/cron.v2 PackageName: gopkg.in/robfig/cron.v2 -SPDXID: SPDXRef-Package366 +SPDXID: SPDXRef-Package386 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: gopkg.in/square/go-jose.v2 PackageName: gopkg.in/square/go-jose.v2 -SPDXID: SPDXRef-Package367 +SPDXID: SPDXRef-Package387 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: gopkg.in/src-d PackageName: gopkg.in/src-d -SPDXID: SPDXRef-Package368 +SPDXID: SPDXRef-Package388 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: Apache-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: Apache-2.0, no approval needed +PackageComment: Scope: build-time dependency. Status: apache-2.0. Apache-2.0, no approval needed ##### Package: gopkg.in/tomb.v1 PackageName: gopkg.in/tomb.v1 -SPDXID: SPDXRef-Package369 +SPDXID: SPDXRef-Package389 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: jquery.scrollto PackageName: jquery.scrollto -SPDXID: SPDXRef-Package370 +SPDXID: SPDXRef-Package390 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: marked PackageName: marked -SPDXID: SPDXRef-Package371 +SPDXID: SPDXRef-Package391 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: mime PackageName: mime -SPDXID: SPDXRef-Package372 +SPDXID: SPDXRef-Package392 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: minimist PackageName: minimist -SPDXID: SPDXRef-Package373 +SPDXID: SPDXRef-Package393 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: node-static PackageName: node-static -SPDXID: SPDXRef-Package374 +SPDXID: SPDXRef-Package394 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: optimist PackageName: optimist -SPDXID: SPDXRef-Package375 +SPDXID: SPDXRef-Package395 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: ui-router for Angular PackageName: ui-router for Angular -SPDXID: SPDXRef-Package376 +SPDXID: SPDXRef-Package396 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: vbom.ml/util PackageName: vbom.ml/util -SPDXID: SPDXRef-Package377 +SPDXID: SPDXRef-Package397 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: wordwrap PackageName: wordwrap -SPDXID: SPDXRef-Package378 +SPDXID: SPDXRef-Package398 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: allowlisted +PackageComment: Scope: build-time dependency. Status: allowlisted. allowlisted ##### Package: VirtualBox Linux Guest Drivers Makefile PackageName: VirtualBox Linux Guest Drivers Makefile -SPDXID: SPDXRef-Package379 +SPDXID: SPDXRef-Package399 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: GPL-2.0-only PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-05-20 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-05-20 ##### Package: Angular PackageName: Angular -SPDXID: SPDXRef-Package380 +SPDXID: SPDXRef-Package400 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 ##### Package: Asciidoctor PackageName: Asciidoctor -SPDXID: SPDXRef-Package381 +SPDXID: SPDXRef-Package401 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 ##### Package: Azure acr-docker-credential-helper PackageName: Azure acr-docker-credential-helper -SPDXID: SPDXRef-Package382 +SPDXID: SPDXRef-Package402 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 ##### Package: Backbone PackageName: Backbone -SPDXID: SPDXRef-Package383 +SPDXID: SPDXRef-Package403 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 ##### Package: bitbucket.org/bertimus9/systemstat PackageName: bitbucket.org/bertimus9/systemstat -SPDXID: SPDXRef-Package384 +SPDXID: SPDXRef-Package404 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 ##### Package: bitbucket.org/ww/goautoneg PackageName: bitbucket.org/ww/goautoneg -SPDXID: SPDXRef-Package385 +SPDXID: SPDXRef-Package405 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 ##### Package: bootstrap PackageName: bootstrap -SPDXID: SPDXRef-Package386 +SPDXID: SPDXRef-Package406 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (CC-BY-3.0 AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 ##### Package: dialog-polyfill.css PackageName: dialog-polyfill.css -SPDXID: SPDXRef-Package387 +SPDXID: SPDXRef-Package407 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 ##### Package: font-awesome PackageName: font-awesome -SPDXID: SPDXRef-Package388 +SPDXID: SPDXRef-Package408 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (CC-BY-3.0 AND MIT AND OFL-1.1) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 ##### Package: Gingko PackageName: Gingko -SPDXID: SPDXRef-Package389 +SPDXID: SPDXRef-Package409 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 ##### Package: Azure/azure-pipeline-go PackageName: Azure/azure-pipeline-go -SPDXID: SPDXRef-Package390 +SPDXID: SPDXRef-Package410 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 ##### Package: bungle/lua-resty-template PackageName: bungle/lua-resty-template -SPDXID: SPDXRef-Package391 +SPDXID: SPDXRef-Package411 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 ##### Package: c4milo/gotoolkit PackageName: c4milo/gotoolkit -SPDXID: SPDXRef-Package392 +SPDXID: SPDXRef-Package412 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 ##### Package: client9/misspell PackageName: client9/misspell -SPDXID: SPDXRef-Package393 +SPDXID: SPDXRef-Package413 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (Unlicense AND BSD-3-Clause AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 ##### Package: d2g/dhcp4 PackageName: d2g/dhcp4 -SPDXID: SPDXRef-Package394 +SPDXID: SPDXRef-Package414 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 ##### Package: d2g/dhcp4client PackageName: d2g/dhcp4client -SPDXID: SPDXRef-Package395 +SPDXID: SPDXRef-Package415 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 ##### Package: dgryski/go-onlinestats PackageName: dgryski/go-onlinestats -SPDXID: SPDXRef-Package396 +SPDXID: SPDXRef-Package416 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (MIT AND LicenseRef-Public-domain-statement) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 ##### Package: docker/go-units PackageName: docker/go-units -SPDXID: SPDXRef-Package397 +SPDXID: SPDXRef-Package417 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (CC-BY-SA-4.0 AND CC-BY-4.0 AND Apache-2.0) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 ##### Package: docker/spdystream PackageName: docker/spdystream -SPDXID: SPDXRef-Package398 +SPDXID: SPDXRef-Package418 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (CC-BY-SA-4.0 AND CC-BY-4.0 AND BSD-3-Clause AND Apache-2.0) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 ##### Package: go-sql-driver/mysql PackageName: go-sql-driver/mysql -SPDXID: SPDXRef-Package399 +SPDXID: SPDXRef-Package419 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 ##### Package: gonum/graph PackageName: gonum/graph -SPDXID: SPDXRef-Package400 +SPDXID: SPDXRef-Package420 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 ##### Package: google/go-github PackageName: google/go-github -SPDXID: SPDXRef-Package401 +SPDXID: SPDXRef-Package421 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND CC-BY-3.0) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 ##### Package: grpc-ecosystem/grpc-opentracing PackageName: grpc-ecosystem/grpc-opentracing -SPDXID: SPDXRef-Package402 +SPDXID: SPDXRef-Package422 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND LicenseRef-Google-Patents-Notice-GRPC) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 ##### Package: hashicorp/errwrap PackageName: hashicorp/errwrap -SPDXID: SPDXRef-Package403 +SPDXID: SPDXRef-Package423 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 ##### Package: hashicorp/go-cleanhttp PackageName: hashicorp/go-cleanhttp -SPDXID: SPDXRef-Package404 +SPDXID: SPDXRef-Package424 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 ##### Package: hashicorp/go-multierror PackageName: hashicorp/go-multierror -SPDXID: SPDXRef-Package405 +SPDXID: SPDXRef-Package425 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 ##### Package: hashicorp/golang-lru PackageName: hashicorp/golang-lru -SPDXID: SPDXRef-Package406 +SPDXID: SPDXRef-Package426 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 ##### Package: hashicorp/hcl PackageName: hashicorp/hcl -SPDXID: SPDXRef-Package407 +SPDXID: SPDXRef-Package427 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 ##### Package: hooklift/iso9660 PackageName: hooklift/iso9660 -SPDXID: SPDXRef-Package408 +SPDXID: SPDXRef-Package428 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MPL-2.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 ##### Package: howeyc/gopass PackageName: howeyc/gopass -SPDXID: SPDXRef-Package409 +SPDXID: SPDXRef-Package429 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (ISC AND CDDL-1.0) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 ##### Package: jbenet/go-context PackageName: jbenet/go-context -SPDXID: SPDXRef-Package410 +SPDXID: SPDXRef-Package430 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 ##### Package: JeffAshton/win_pdh PackageName: JeffAshton/win_pdh -SPDXID: SPDXRef-Package411 +SPDXID: SPDXRef-Package431 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 ##### Package: jmank88/nuts PackageName: jmank88/nuts -SPDXID: SPDXRef-Package412 +SPDXID: SPDXRef-Package432 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 ##### Package: johanneswuerbach/nfsexports PackageName: johanneswuerbach/nfsexports -SPDXID: SPDXRef-Package413 +SPDXID: SPDXRef-Package433 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 ##### Package: joshdk/go-junit PackageName: joshdk/go-junit -SPDXID: SPDXRef-Package414 +SPDXID: SPDXRef-Package434 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 ##### Package: jteeuwen/go-bindata PackageName: jteeuwen/go-bindata -SPDXID: SPDXRef-Package415 +SPDXID: SPDXRef-Package435 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: CC0-1.0 PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 ##### Package: konsorten/go-windows-terminal-sequences PackageName: konsorten/go-windows-terminal-sequences -SPDXID: SPDXRef-Package416 +SPDXID: SPDXRef-Package436 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 ##### Package: marstr/guid PackageName: marstr/guid -SPDXID: SPDXRef-Package417 +SPDXID: SPDXRef-Package437 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 ##### Package: mattn/go-sqlite3 PackageName: mattn/go-sqlite3 -SPDXID: SPDXRef-Package418 +SPDXID: SPDXRef-Package438 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (MIT AND LicenseRef-Public-domain-statement) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 ##### Package: multiarch/qemu-user-static PackageName: multiarch/qemu-user-static -SPDXID: SPDXRef-Package419 +SPDXID: SPDXRef-Package439 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 ##### Package: Nvveen/Gotty PackageName: Nvveen/Gotty -SPDXID: SPDXRef-Package420 +SPDXID: SPDXRef-Package440 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-2-Clause-FreeBSD PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 ##### Package: opencontainers/go-digest PackageName: opencontainers/go-digest -SPDXID: SPDXRef-Package421 +SPDXID: SPDXRef-Package441 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (CC-BY-SA-4.0 AND CC-BY-4.0 AND Apache-2.0) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 ##### Package: opencontainers/runc PackageName: opencontainers/runc -SPDXID: SPDXRef-Package422 +SPDXID: SPDXRef-Package442 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (LicenseRef-CC-unspecified AND Apache-2.0) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 ##### Package: quobyte/api PackageName: quobyte/api -SPDXID: SPDXRef-Package423 +SPDXID: SPDXRef-Package443 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 ##### Package: rubiojr/go-vhd PackageName: rubiojr/go-vhd -SPDXID: SPDXRef-Package424 +SPDXID: SPDXRef-Package444 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 ##### Package: sigma/go-inotify PackageName: sigma/go-inotify -SPDXID: SPDXRef-Package425 +SPDXID: SPDXRef-Package445 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 ##### Package: spotinst/spotinst-sdk-go PackageName: spotinst/spotinst-sdk-go -SPDXID: SPDXRef-Package426 +SPDXID: SPDXRef-Package446 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0 AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 ##### Package: src-d/gcfg PackageName: src-d/gcfg -SPDXID: SPDXRef-Package427 +SPDXID: SPDXRef-Package447 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 ##### Package: tent/http-link-go PackageName: tent/http-link-go -SPDXID: SPDXRef-Package428 +SPDXID: SPDXRef-Package448 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 ##### Package: xanzy/ssh-agent PackageName: xanzy/ssh-agent -SPDXID: SPDXRef-Package429 +SPDXID: SPDXRef-Package449 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (Apache-2.0 AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 ##### Package: zchee/go-vmnet PackageName: zchee/go-vmnet -SPDXID: SPDXRef-Package430 +SPDXID: SPDXRef-Package450 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-2-Clause AND BSD-3-Clause) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 ##### Package: go-srcimporter PackageName: go-srcimporter -SPDXID: SPDXRef-Package431 +SPDXID: SPDXRef-Package451 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 ##### Package: go9p PackageName: go9p -SPDXID: SPDXRef-Package432 +SPDXID: SPDXRef-Package452 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 ##### Package: godep PackageName: godep -SPDXID: SPDXRef-Package433 +SPDXID: SPDXRef-Package453 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 ##### Package: x/crypto PackageName: x/crypto -SPDXID: SPDXRef-Package434 +SPDXID: SPDXRef-Package454 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause AND MIT AND LicenseRef-Public-domain-statement) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 ##### Package: x/net PackageName: x/net -SPDXID: SPDXRef-Package435 +SPDXID: SPDXRef-Package455 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-2-Clause AND BSD-3-Clause AND CC-BY-3.0 AND (BSD-3-Clause OR LicenseRef-W3C-Test-Suite-License-1)) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 ##### Package: golang/expansion PackageName: golang/expansion -SPDXID: SPDXRef-Package436 +SPDXID: SPDXRef-Package456 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 ##### Package: golang/go/types PackageName: golang/go/types -SPDXID: SPDXRef-Package437 +SPDXID: SPDXRef-Package457 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 ##### Package: golang/internal/srcimporter PackageName: golang/internal/srcimporter -SPDXID: SPDXRef-Package438 +SPDXID: SPDXRef-Package458 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 ##### Package: golang/json PackageName: golang/json -SPDXID: SPDXRef-Package439 +SPDXID: SPDXRef-Package459 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 ##### Package: golang/netutil PackageName: golang/netutil -SPDXID: SPDXRef-Package440 +SPDXID: SPDXRef-Package460 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 ##### Package: golang/reflect PackageName: golang/reflect -SPDXID: SPDXRef-Package441 +SPDXID: SPDXRef-Package461 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 ##### Package: golang/template PackageName: golang/template -SPDXID: SPDXRef-Package442 +SPDXID: SPDXRef-Package462 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 +PackageComment: Status: approved. modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 ##### Package: Google Protocol Buffers PackageName: Google Protocol Buffers -SPDXID: SPDXRef-Package443 +SPDXID: SPDXRef-Package463 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 ##### Package: google.golang.org/api PackageName: google.golang.org/api -SPDXID: SPDXRef-Package444 +SPDXID: SPDXRef-Package464 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0 AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11 ##### Package: google.golang.org/appengine PackageName: google.golang.org/appengine -SPDXID: SPDXRef-Package445 +SPDXID: SPDXRef-Package465 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11 ##### Package: google.golang.org/grpc PackageName: google.golang.org/grpc -SPDXID: SPDXRef-Package446 +SPDXID: SPDXRef-Package466 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND Apache-2.0 AND LicenseRef-Google-Patents-Notice-GRPC) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 ##### Package: gopkg.in/warnings.v0 PackageName: gopkg.in/warnings.v0 -SPDXID: SPDXRef-Package447 +SPDXID: SPDXRef-Package467 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-2-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11 ##### Package: Handlebars PackageName: Handlebars -SPDXID: SPDXRef-Package448 +SPDXID: SPDXRef-Package468 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 ##### Package: Highlight PackageName: Highlight -SPDXID: SPDXRef-Package449 +SPDXID: SPDXRef-Package469 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 ##### Package: highlight.js PackageName: highlight.js -SPDXID: SPDXRef-Package450 +SPDXID: SPDXRef-Package470 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND MIT AND CC0-1.0 AND LicenseRef-Public-domain-statement) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11 ##### Package: htpasswd PackageName: htpasswd -SPDXID: SPDXRef-Package451 +SPDXID: SPDXRef-Package471 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11 ##### Package: jQuery PackageName: jQuery -SPDXID: SPDXRef-Package452 +SPDXID: SPDXRef-Package472 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 ##### Package: jQuery BBQ PackageName: jQuery BBQ -SPDXID: SPDXRef-Package453 +SPDXID: SPDXRef-Package473 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (MIT OR GPL-2.0+) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 ##### Package: jQuery hashchange event PackageName: jQuery hashchange event -SPDXID: SPDXRef-Package454 +SPDXID: SPDXRef-Package474 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (GPL-2.0+ OR MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 ##### Package: jQuery Slideto PackageName: jQuery Slideto -SPDXID: SPDXRef-Package455 +SPDXID: SPDXRef-Package475 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 ##### Package: jQuery Wiggle PackageName: jQuery Wiggle -SPDXID: SPDXRef-Package456 +SPDXID: SPDXRef-Package476 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 ##### Package: moment.js PackageName: moment.js -SPDXID: SPDXRef-Package457 +SPDXID: SPDXRef-Package477 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 ##### Package: normalize.css PackageName: normalize.css -SPDXID: SPDXRef-Package458 +SPDXID: SPDXRef-Package478 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 ##### Package: Octicons PackageName: Octicons -SPDXID: SPDXRef-Package459 +SPDXID: SPDXRef-Package479 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 ##### Package: parseUri PackageName: parseUri -SPDXID: SPDXRef-Package460 +SPDXID: SPDXRef-Package480 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 ##### Package: Pause PackageName: Pause -SPDXID: SPDXRef-Package461 +SPDXID: SPDXRef-Package481 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11 ##### Package: Pure CSS PackageName: Pure CSS -SPDXID: SPDXRef-Package462 +SPDXID: SPDXRef-Package482 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 ##### Package: shred PackageName: shred -SPDXID: SPDXRef-Package463 +SPDXID: SPDXRef-Package483 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: ISC PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 ##### Package: sigs.k8s.io/yaml PackageName: sigs.k8s.io/yaml -SPDXID: SPDXRef-Package464 +SPDXID: SPDXRef-Package484 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-3-Clause AND MIT) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: fork of github.com/ghodss/yaml; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 +PackageComment: Status: approved. fork of github.com/ghodss/yaml; not auto-allowlist because: Modified; approved by GB exception 2019-03-11 ##### Package: speter.net/go/exp PackageName: speter.net/go/exp -SPDXID: SPDXRef-Package465 +SPDXID: SPDXRef-Package485 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: (BSD-2-Clause AND BSD-3-Clause) PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11 +PackageComment: Status: approved. not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11 ##### Package: sprintf() for JavaScript PackageName: sprintf() for JavaScript -SPDXID: SPDXRef-Package466 +SPDXID: SPDXRef-Package486 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: BSD-3-Clause PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 ##### Package: Underscore.js PackageName: Underscore.js -SPDXID: SPDXRef-Package467 +SPDXID: SPDXRef-Package487 PackageDownloadLocation: NOASSERTION FilesAnalyzed: false PackageLicenseConcluded: MIT PackageLicenseDeclared: NOASSERTION PackageCopyrightText: NOASSERTION -PackageComment: contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 +PackageComment: Status: approved. contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11 diff --git a/license-exceptions/exceptions.json b/license-exceptions/exceptions.json index b5f55b89..d7ea5fb3 100644 --- a/license-exceptions/exceptions.json +++ b/license-exceptions/exceptions.json @@ -1,21 +1,228 @@ { - "version": "1.0.0", - "lastUpdated": "2026-02-02", - "blanketExceptions": [ + "version": "1.1.0", + "lastUpdated": "2026-02-04", + "blanketExceptions": [], + "exceptions": [ + { + "id": "exc-2026-02-05-001", + "package": "eclipse-ee4j/expressly", + "license": "EPL-2.0 OR GPL-2.0-only WITH Classpath-exception-2.0", + "project": "Keycloak", + "approvedDate": "2026-02-05", + "status": "approved", + "scope": "required upstream dependency, dynamically linked, unmodified", + "results": "https://github.com/cncf/foundation/issues/1177", + "comment": "Default implementation of Jakarta Expression Language 6.0, transitive dependency for Hibernate Validator" + }, + { + "id": "exc-2026-02-05-002", + "package": "libpathrs", + "license": "MPL-2.0 OR LGPL-3.0-or-later", + "project": "All CNCF Projects", + "approvedDate": "2026-02-05", + "status": "approved", + "scope": "vendored component, build-time dependency, or install-time dependency; statically or dynamically linked", + "results": "https://github.com/cncf/foundation/issues/1154", + "comment": "Blanket exception: Projects using libpathrs statically linked MUST elect MPL-2.0 and document this. Provides secure path resolution APIs." + }, + { + "id": "exc-2026-02-05-003", + "package": "go-pathrs", + "license": "MPL-2.0", + "project": "All CNCF Projects", + "approvedDate": "2026-02-05", + "status": "approved", + "scope": "vendored component, build-time dependency, or install-time dependency; statically or dynamically linked", + "results": "https://github.com/cncf/foundation/issues/1154", + "comment": "Blanket exception: Go bindings for libpathrs. Provides secure path resolution APIs." + }, + { + "id": "exc-2025-11-21-001", + "package": "cyphar/filepath-securejoin", + "license": "MPL-2.0 AND BSD-3-Clause", + "project": "All CNCF Projects", + "approvedDate": "2025-11-21", + "status": "approved", + "scope": "vendored component, build-time dependency, or install-time dependency; statically or dynamically linked", + "results": "https://github.com/cncf/foundation/issues/1154", + "comment": "Blanket exception: Provides secure path resolution APIs on Linux. Used by Kubernetes, containerd, Podman, buildah, cri-o, nerdctl." + }, + { + "id": "exc-2025-11-21-002", + "package": "Liquibase", + "license": "FSL (Functional Source License)", + "project": "Keycloak", + "approvedDate": "2025-11-21", + "status": "denied", + "scope": "incorporated code, dynamically linked", + "results": "https://github.com/cncf/foundation/issues/1147", + "comment": "Denied: FSL is not an open source license. GB does not approve exceptions for non-OSS licenses." + }, + { + "id": "exc-2025-10-17-001", + "package": "paramiko", + "license": "LGPL-2.1", + "project": "oscal-compass", + "approvedDate": "2025-10-17", + "status": "approved", + "scope": "build-time dependency, dynamically linked", + "results": "https://github.com/cncf/foundation/issues/1108", + "comment": "Pure-Python SSHv2 protocol implementation, used for fetching files" + }, + { + "id": "exc-2025-10-17-002", + "package": "certifi", + "license": "MPL-2.0", + "project": "oscal-compass", + "approvedDate": "2025-10-17", + "status": "approved", + "scope": "install-time dependency, dynamically linked", + "results": "https://github.com/cncf/foundation/issues/1091", + "comment": "Dependency for requests library" + }, + { + "id": "exc-2025-10-17-003", + "package": "pathspec", + "license": "MPL-2.0", + "project": "oscal-compass", + "approvedDate": "2025-10-17", + "status": "approved", + "scope": "build-time dependency, separate process", + "results": "https://github.com/cncf/foundation/issues/1090", + "comment": "Dependency for black, mkdocs, mypy" + }, + { + "id": "exc-2025-10-17-004", + "package": "cyphar/filepath-securejoin", + "license": "BSD-3-Clause AND MPL-2.0", + "project": "Kubernetes", + "approvedDate": "2025-10-17", + "status": "approved", + "scope": "vendored component, build-time dependency, statically linked", + "results": "https://github.com/cncf/foundation/issues/1074", + "comment": "Provides secure path construction functions. Superseded by blanket exception in issue #1154." + }, + { + "id": "exc-2024-10-23-001", + "package": "hashicorp/terraform-provider-aws", + "license": "MPL-2.0", + "project": "Crossplane", + "approvedDate": "2024-10-23", + "status": "approved", + "scope": "build-time dependency, modified fork", + "results": "https://github.com/cncf/foundation/issues/818", + "comment": "Fork maintained for Crossplane providers, changes contributed upstream" + }, + { + "id": "exc-2024-10-23-002", + "package": "hashicorp/terraform-provider-azurerm", + "license": "MPL-2.0", + "project": "Crossplane", + "approvedDate": "2024-10-23", + "status": "approved", + "scope": "build-time dependency, modified fork", + "results": "https://github.com/cncf/foundation/issues/818", + "comment": "Fork maintained for Crossplane providers, changes contributed upstream" + }, + { + "id": "exc-2024-10-23-003", + "package": "hashicorp/terraform-provider-azuread", + "license": "MPL-2.0", + "project": "Crossplane", + "approvedDate": "2024-10-23", + "status": "approved", + "scope": "build-time dependency, modified fork", + "results": "https://github.com/cncf/foundation/issues/818", + "comment": "Fork maintained for Crossplane providers, changes contributed upstream" + }, + { + "id": "exc-2024-10-23-004", + "package": "apple/swift-nio-ssl", + "license": "OpenSSL", + "project": "Connect", + "approvedDate": "2024-10-23", + "status": "approved", + "scope": "build-time dependency, unmodified", + "results": "https://github.com/cncf/foundation/issues/823", + "comment": "Required for HTTP/2 + TLS with HTTP trailers on iOS. Also used by gRPC Swift." + }, + { + "id": "exc-2024-10-23-005", + "package": "Crossplane Upjet MPL dependencies", + "license": "MPL-2.0", + "project": "Crossplane", + "approvedDate": "2024-10-23", + "status": "approved", + "scope": "build-time dependency, unmodified, linked at build time", + "results": "https://github.com/cncf/foundation/issues/787", + "comment": "Various hashicorp terraform dependencies for Upjet: hcl, terraform-json, terraform-plugin-framework, terraform-plugin-go, terraform-plugin-sdk, go-plugin, go-uuid, go-version, logutils, terraform-plugin-log, terraform-registry-address, terraform-svchost, yamux" + }, + { + "id": "exc-2024-10-23-006", + "package": "Linux kernel uapi headers (btrfs)", + "license": "GPL-2.0-only WITH Linux-syscall-note", + "project": "containerd", + "approvedDate": "2024-10-23", + "status": "approved", + "scope": "kernel headers included via #include, no inline functions compiled in", + "results": "https://github.com/cncf/foundation/issues/174", + "comment": "Used by containerd/btrfs for btrfs-related ioctl syscalls. Headers from linux/btrfs.h and linux/btrfs_tree.h." + }, + { + "id": "exc-2024-10-22-001", + "package": "github.com/hashicorp/go-set/v2", + "license": "MPL-2.0", + "project": "OpenFGA", + "approvedDate": "2024-10-22", + "status": "approved", + "scope": "build-time dependency, linked at build time", + "results": "https://github.com/cncf/foundation/issues/830", + "comment": "Unmodified code" + }, + { + "id": "exc-2024-10-22-002", + "package": "Keycloak Java dependencies", + "license": "0BSD, CDDL-1.1, EPL-1.0, EPL-2.0, GPL-2.0-only, GPL-2.0-with-classpath-exception, LGPL-2.1, LGPL-2.1-only, MIT-0, MPL-2.0, UPL-1.0", + "project": "Keycloak", + "approvedDate": "2024-10-22", + "status": "approved", + "scope": "transitive dependencies from Quarkus framework, unmodified", + "results": "https://github.com/cncf/foundation/issues/817", + "comment": "Multiple Java dependencies including: tslib, h2, mysql-connector-j, jakarta.* APIs, parsson, graalvm SDK, hibernate-*, mariadb-java-client, nashorn-core, reactive-streams" + }, + { + "id": "exc-2024-12-17-001", + "package": "github.com/hashicorp/memberlist", + "license": "MPL-2.0", + "project": "kubernetes/kops", + "approvedDate": "2024-07-16", + "status": "approved", + "scope": "build-time dependency, unmodified", + "results": "https://github.com/cncf/foundation/issues/741", + "comment": "Main component of Gossip DNS feature for peer-to-peer network K8s API address propagation" + }, + { + "id": "exc-2024-02-27-001", + "package": "Falco kernel module", + "license": "GPL-2.0-only OR MIT", + "project": "Falco", + "approvedDate": "2024-02-27", + "status": "approved", + "scope": "kernel module, dual-licensed", + "results": "https://github.com/cncf/foundation/issues/645", + "comment": "Falco's kernel module is dual-licensed GPL-2.0-only OR MIT" + }, { "id": "blanket-ebpf-gpl", - "name": "GPL for in-kernel eBPF programs", - "description": "GPL-2.0 licensed code is permitted for in-kernel eBPF programs only, as this is required by the Linux kernel BPF subsystem.", - "licenses": [ - "GPL-2.0-only", - "GPL-2.0-or-later" - ], - "scope": "in-kernel eBPF programs only", + "package": "In-kernel eBPF programs", + "license": "GPL-2.0-only, GPL-2.0-or-later", + "project": "All CNCF Projects", "approvedDate": "2023-08-31", - "documentUrl": "https://github.com/cncf/foundation/blob/main/license-exceptions/README.md" - } - ], - "exceptions": [ + "status": "approved", + "scope": "in-kernel eBPF programs only", + "results": "https://github.com/cncf/foundation/blob/main/license-exceptions/README.md#gpl-exceptions-for-in-kernel-ebpf-programs", + "comment": "Blanket exception: GPL-2.0 licensed code is permitted for in-kernel eBPF programs only, as this is required by the Linux kernel BPF subsystem." + }, { "id": "exc-2023-08-31-001", "package": "github.com/docker/go-metrics", @@ -32,7 +239,9 @@ "approvedDate": "2023-08-31", "status": "approved", "scope": "runtime dependency, dynamically linked", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31", + "results": "https://github.com/cncf/foundation/issues/400", + "project": "Cilium" }, { "id": "exc-2023-08-31-003", @@ -57,7 +266,10 @@ "license": "MPL-2.0", "approvedDate": "2023-06-27", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/400", + "scope": "build-time dependency, unmodified", + "project": "Cilium" }, { "id": "exc-2023-06-27-002", @@ -65,7 +277,10 @@ "license": "MPL-2.0", "approvedDate": "2023-06-27", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/400", + "scope": "build-time dependency, unmodified", + "project": "Cilium" }, { "id": "exc-2023-06-27-003", @@ -73,7 +288,10 @@ "license": "MPL-2.0", "approvedDate": "2023-06-27", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/400", + "scope": "build-time dependency, unmodified", + "project": "Cilium" }, { "id": "exc-2023-06-27-004", @@ -81,7 +299,9 @@ "license": "MPL-2.0", "approvedDate": "2023-06-27", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/300", + "scope": "build-time dependency, unmodified" }, { "id": "exc-2023-06-27-005", @@ -89,7 +309,10 @@ "license": "MPL-2.0", "approvedDate": "2023-06-27", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/400", + "scope": "build-time dependency, unmodified", + "project": "Cilium" }, { "id": "exc-2023-06-27-006", @@ -121,7 +344,10 @@ "license": "MPL-2.0", "approvedDate": "2023-06-27", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/400", + "scope": "build-time dependency, unmodified", + "project": "Cilium" }, { "id": "exc-2023-06-27-010", @@ -129,7 +355,9 @@ "license": "MPL-2.0", "approvedDate": "2023-06-27", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/485", + "scope": "build-time dependency, unmodified" }, { "id": "exc-2023-06-27-011", @@ -137,7 +365,10 @@ "license": "MPL-2.0", "approvedDate": "2023-06-27", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/526", + "scope": "build-time dependency, unmodified", + "project": "Notary" }, { "id": "exc-2023-06-27-012", @@ -169,7 +400,9 @@ "license": "MPL-2.0", "approvedDate": "2023-06-27", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/300", + "scope": "build-time dependency, unmodified" }, { "id": "exc-2023-06-27-016", @@ -209,7 +442,9 @@ "license": "MPL-2.0", "approvedDate": "2023-06-27", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified" }, { "id": "exc-2023-06-27-021", @@ -233,7 +468,9 @@ "license": "MPL-2.0", "approvedDate": "2023-06-27", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/485", + "scope": "build-time dependency, unmodified" }, { "id": "exc-2023-06-27-024", @@ -241,7 +478,9 @@ "license": "MPL-2.0", "approvedDate": "2023-06-27", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/400", + "scope": "build-time dependency, unmodified" }, { "id": "exc-2023-06-27-025", @@ -249,7 +488,10 @@ "license": "MPL-2.0", "approvedDate": "2023-06-27", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/526", + "scope": "build-time dependency, unmodified", + "project": "Notary" }, { "id": "exc-2022-04-12-001", @@ -257,7 +499,8 @@ "license": "EPL-2.0", "approvedDate": "2022-04-12", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "scope": "build-time dependency, unmodified" }, { "id": "exc-2022-04-12-002", @@ -265,7 +508,9 @@ "license": "MPL-2.0", "approvedDate": "2022-04-12", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified" }, { "id": "exc-2022-04-12-003", @@ -273,7 +518,10 @@ "license": "MPL-2.0", "approvedDate": "2022-04-12", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified", + "project": "Dapr" }, { "id": "exc-2022-04-12-004", @@ -281,7 +529,10 @@ "license": "MPL-2.0", "approvedDate": "2022-04-12", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified", + "project": "Dapr" }, { "id": "exc-2022-04-12-005", @@ -289,7 +540,8 @@ "license": "0BSD", "approvedDate": "2022-04-12", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "scope": "build-time dependency, unmodified" }, { "id": "exc-2022-04-12-006", @@ -297,7 +549,9 @@ "license": "MPL-2.0", "approvedDate": "2022-04-12", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified" }, { "id": "exc-2022-04-12-007", @@ -305,7 +559,8 @@ "license": "EPL-2.0", "approvedDate": "2022-04-12", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "scope": "build-time dependency, unmodified" }, { "id": "exc-2022-04-12-008", @@ -313,7 +568,10 @@ "license": "MPL-2.0", "approvedDate": "2022-04-12", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified", + "project": "Dapr" }, { "id": "exc-2022-04-12-009", @@ -321,7 +579,10 @@ "license": "MPL-2.0", "approvedDate": "2022-04-12", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified", + "project": "Dapr" }, { "id": "exc-2022-04-12-010", @@ -329,7 +590,8 @@ "license": "0BSD", "approvedDate": "2022-04-12", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "scope": "build-time dependency, unmodified" }, { "id": "exc-2022-04-12-011", @@ -337,7 +599,9 @@ "license": "MPL-2.0", "approvedDate": "2022-04-12", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/172", + "scope": "build-time dependency, unmodified" }, { "id": "exc-2021-07-19-001", @@ -345,7 +609,9 @@ "license": "MPL-2.0", "approvedDate": "2021-07-19", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19", + "results": "https://github.com/cncf/foundation/issues/138", + "scope": "build-time dependency, unmodified" }, { "id": "exc-2021-07-19-002", @@ -353,7 +619,9 @@ "license": "MPL-2.0", "approvedDate": "2021-07-19", "status": "approved", - "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19" + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19", + "results": "https://github.com/cncf/foundation/issues/138", + "scope": "build-time dependency, unmodified" }, { "id": "exc-2019-11-01-001", @@ -361,7 +629,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-002", @@ -369,7 +638,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-003", @@ -377,7 +647,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-004", @@ -385,7 +656,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-005", @@ -393,7 +665,8 @@ "license": "Python-2.0", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-006", @@ -401,7 +674,8 @@ "license": "(Apache-2.0 AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-007", @@ -409,7 +683,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-008", @@ -417,7 +692,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-009", @@ -425,7 +701,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-010", @@ -433,7 +710,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-011", @@ -441,7 +719,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-012", @@ -449,7 +728,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-013", @@ -457,7 +737,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-014", @@ -465,7 +746,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-015", @@ -473,7 +755,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-016", @@ -481,7 +764,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-017", @@ -489,7 +773,8 @@ "license": "((MIT OR GPL-3.0) AND BSD-3-Clause AND Apache-2.0 AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-018", @@ -497,7 +782,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-019", @@ -505,7 +791,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-020", @@ -513,7 +800,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-021", @@ -521,7 +809,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-022", @@ -529,7 +818,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-023", @@ -537,7 +827,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-024", @@ -545,7 +836,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-025", @@ -553,7 +845,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-026", @@ -561,7 +854,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-027", @@ -569,7 +863,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-028", @@ -577,7 +872,8 @@ "license": "BSD-2-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-029", @@ -585,7 +881,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-030", @@ -593,7 +890,8 @@ "license": "(BSD-2-Clause AND BSD-3-Clause AND ISC)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-031", @@ -601,7 +899,8 @@ "license": "(Apache-2.0 AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-032", @@ -609,7 +908,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-033", @@ -617,7 +917,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-034", @@ -625,7 +926,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-035", @@ -633,7 +935,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-036", @@ -641,7 +944,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-037", @@ -649,7 +953,8 @@ "license": "(CC-BY-4.0 AND Apache-2.0)", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-038", @@ -657,7 +962,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-039", @@ -665,7 +971,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-040", @@ -673,7 +980,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-041", @@ -681,7 +989,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-042", @@ -689,7 +998,8 @@ "license": "(BSD-3-Clause AND Apache-2.0)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-043", @@ -697,7 +1007,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-044", @@ -705,7 +1016,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-045", @@ -713,7 +1025,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-046", @@ -721,7 +1034,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-047", @@ -729,7 +1043,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-048", @@ -737,7 +1052,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-049", @@ -745,7 +1061,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-050", @@ -753,7 +1070,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-051", @@ -761,7 +1079,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-052", @@ -769,7 +1088,8 @@ "license": "ISC", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-053", @@ -777,7 +1097,8 @@ "license": "(BSD-3-Clause AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-054", @@ -785,7 +1106,8 @@ "license": "BSD-2-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-055", @@ -793,7 +1115,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-056", @@ -801,7 +1124,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-057", @@ -809,7 +1133,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-058", @@ -817,7 +1142,8 @@ "license": "(BSD-3-Clause AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-059", @@ -825,7 +1151,8 @@ "license": "(BSD-3-Clause AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-060", @@ -833,7 +1160,8 @@ "license": "(Apache-2.0 AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-061", @@ -841,7 +1169,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-062", @@ -849,7 +1178,8 @@ "license": "(Apache-2.0 AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-063", @@ -857,7 +1187,8 @@ "license": "(BSD-3-Clause AND Apache-2.0)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-064", @@ -865,7 +1196,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-065", @@ -873,7 +1205,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-066", @@ -881,7 +1214,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-067", @@ -889,7 +1223,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-068", @@ -897,7 +1232,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-069", @@ -905,7 +1241,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-070", @@ -913,7 +1250,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-071", @@ -921,7 +1259,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-072", @@ -929,7 +1268,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-073", @@ -937,7 +1277,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-074", @@ -945,7 +1286,8 @@ "license": "BSD-2-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-075", @@ -953,7 +1295,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-076", @@ -961,7 +1304,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-077", @@ -969,7 +1313,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-078", @@ -977,7 +1322,8 @@ "license": "(BSD-2-Clause AND ISC)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-079", @@ -985,7 +1331,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-080", @@ -993,7 +1340,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-081", @@ -1001,7 +1349,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-082", @@ -1009,7 +1358,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-083", @@ -1017,7 +1367,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-084", @@ -1025,7 +1376,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-085", @@ -1033,7 +1385,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-086", @@ -1041,7 +1394,8 @@ "license": "BSD-2-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-087", @@ -1049,7 +1403,8 @@ "license": "(BSD-2-Clause AND Apache-2.0)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-088", @@ -1057,7 +1412,8 @@ "license": "(BSD-3-Clause AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-089", @@ -1065,7 +1421,8 @@ "license": "BSD-2-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-090", @@ -1073,7 +1430,8 @@ "license": "(BSD-3-Clause AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-091", @@ -1081,7 +1439,8 @@ "license": "(BSD-2-Clause AND BSD-3-Clause)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-092", @@ -1089,7 +1448,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-093", @@ -1097,7 +1457,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-094", @@ -1105,7 +1466,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-095", @@ -1113,7 +1475,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-096", @@ -1121,7 +1484,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-097", @@ -1129,7 +1493,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-098", @@ -1137,7 +1502,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-099", @@ -1145,7 +1511,8 @@ "license": "(CC-BY-4.0 AND Apache-2.0 AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-100", @@ -1153,7 +1520,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-101", @@ -1161,7 +1529,8 @@ "license": "(Apache-2.0 AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-102", @@ -1169,7 +1538,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-103", @@ -1177,7 +1547,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-104", @@ -1185,7 +1556,8 @@ "license": "(Apache-2.0 AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-105", @@ -1193,7 +1565,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-106", @@ -1201,7 +1574,8 @@ "license": "BSD-2-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-107", @@ -1209,7 +1583,8 @@ "license": "(BSD-2-Clause AND BSD-3-Clause)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-108", @@ -1217,7 +1592,8 @@ "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-109", @@ -1225,7 +1601,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-110", @@ -1233,7 +1610,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-111", @@ -1241,7 +1619,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-112", @@ -1249,7 +1628,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-113", @@ -1257,7 +1637,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-114", @@ -1265,7 +1646,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-115", @@ -1273,7 +1655,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-116", @@ -1281,7 +1664,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-117", @@ -1289,7 +1673,8 @@ "license": "(BSD-3-Clause AND Apache-2.0)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-118", @@ -1297,7 +1682,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-119", @@ -1305,7 +1691,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-120", @@ -1313,7 +1700,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-121", @@ -1321,7 +1709,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-122", @@ -1329,7 +1718,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-123", @@ -1337,7 +1727,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-124", @@ -1345,7 +1736,8 @@ "license": "(BSD-3-Clause AND Apache-2.0 AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-125", @@ -1353,7 +1745,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-126", @@ -1361,7 +1754,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-127", @@ -1369,7 +1763,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-128", @@ -1377,7 +1772,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-129", @@ -1385,7 +1781,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-130", @@ -1393,7 +1790,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-131", @@ -1401,7 +1799,8 @@ "license": "(BSD-2-Clause AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-132", @@ -1409,7 +1808,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-133", @@ -1417,7 +1817,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-134", @@ -1425,7 +1826,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-135", @@ -1433,7 +1835,8 @@ "license": "(BSD-3-Clause AND Apache-2.0)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-136", @@ -1441,7 +1844,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-137", @@ -1449,7 +1853,8 @@ "license": "(Apache-2.0 OR LGPL-3.0-or-later)", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-138", @@ -1457,7 +1862,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-139", @@ -1465,7 +1871,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-140", @@ -1473,7 +1880,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-141", @@ -1481,7 +1889,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-142", @@ -1489,7 +1898,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-143", @@ -1497,7 +1907,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-144", @@ -1505,7 +1916,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-145", @@ -1513,7 +1925,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-146", @@ -1521,7 +1934,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-147", @@ -1529,7 +1943,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-148", @@ -1537,7 +1952,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-149", @@ -1545,7 +1961,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-150", @@ -1553,7 +1970,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-151", @@ -1561,7 +1979,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-152", @@ -1569,7 +1988,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-153", @@ -1577,7 +1997,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-154", @@ -1585,7 +2006,8 @@ "license": "BSD-2-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-155", @@ -1593,7 +2015,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-156", @@ -1601,7 +2024,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-157", @@ -1609,7 +2033,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-158", @@ -1617,7 +2042,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-159", @@ -1625,7 +2051,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-160", @@ -1633,7 +2060,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-161", @@ -1641,7 +2069,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-162", @@ -1649,7 +2078,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-163", @@ -1657,7 +2087,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-164", @@ -1665,7 +2096,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-165", @@ -1673,7 +2105,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-166", @@ -1681,7 +2114,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-167", @@ -1689,7 +2123,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-168", @@ -1697,7 +2132,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-169", @@ -1705,7 +2141,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-170", @@ -1713,7 +2150,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-171", @@ -1721,7 +2159,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-172", @@ -1729,7 +2168,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-173", @@ -1737,7 +2177,8 @@ "license": "(BSD-2-Clause AND BSD-3-Clause)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-174", @@ -1745,7 +2186,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-175", @@ -1753,7 +2195,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-176", @@ -1761,7 +2204,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-177", @@ -1769,7 +2213,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-178", @@ -1777,7 +2222,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-179", @@ -1785,7 +2231,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-180", @@ -1793,7 +2240,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-181", @@ -1801,7 +2249,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-182", @@ -1809,7 +2258,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-183", @@ -1817,7 +2267,8 @@ "license": "(BSD-3-Clause AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-184", @@ -1825,7 +2276,8 @@ "license": "(BSD-3-Clause AND Apache-2.0)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-185", @@ -1833,7 +2285,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-186", @@ -1841,7 +2294,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-187", @@ -1849,7 +2303,8 @@ "license": "(BSD-3-Clause AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-188", @@ -1857,7 +2312,8 @@ "license": "(BSD-3-Clause AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-189", @@ -1865,7 +2321,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-190", @@ -1873,7 +2330,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-191", @@ -1881,7 +2339,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-192", @@ -1889,7 +2348,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-193", @@ -1897,7 +2357,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-194", @@ -1905,7 +2366,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-195", @@ -1913,7 +2375,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-196", @@ -1921,7 +2384,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-197", @@ -1929,7 +2393,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-198", @@ -1937,7 +2402,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-199", @@ -1945,7 +2411,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-200", @@ -1953,7 +2420,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-201", @@ -1961,7 +2429,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-202", @@ -1969,7 +2438,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-203", @@ -1977,7 +2447,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-204", @@ -1985,7 +2456,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-205", @@ -1993,7 +2465,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-206", @@ -2001,7 +2474,8 @@ "license": "(Apache-2.0 AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-207", @@ -2009,7 +2483,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-208", @@ -2017,7 +2492,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-209", @@ -2025,7 +2501,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-210", @@ -2033,7 +2510,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-211", @@ -2041,7 +2519,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-212", @@ -2049,7 +2528,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-213", @@ -2057,7 +2537,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-214", @@ -2065,7 +2546,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-215", @@ -2073,7 +2555,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-216", @@ -2081,7 +2564,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-217", @@ -2089,7 +2573,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-218", @@ -2097,7 +2582,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-219", @@ -2105,7 +2591,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-220", @@ -2113,7 +2600,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-221", @@ -2121,7 +2609,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-222", @@ -2129,7 +2618,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-223", @@ -2137,7 +2627,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-224", @@ -2145,7 +2636,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-225", @@ -2153,7 +2645,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-226", @@ -2161,7 +2654,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-227", @@ -2169,7 +2663,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-228", @@ -2177,7 +2672,8 @@ "license": "BSD-2-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-229", @@ -2185,7 +2681,8 @@ "license": "BSD-2-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-230", @@ -2193,7 +2690,8 @@ "license": "BSD-2-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-231", @@ -2201,7 +2699,8 @@ "license": "BSD-2-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-232", @@ -2209,7 +2708,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-233", @@ -2217,7 +2717,8 @@ "license": "(BSD-3-Clause AND Apache-2.0)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-234", @@ -2225,7 +2726,8 @@ "license": "(BSD-3-Clause AND Apache-2.0 AND ISC)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-235", @@ -2233,7 +2735,8 @@ "license": "(BSD-3-Clause AND Apache-2.0 AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-236", @@ -2241,7 +2744,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-237", @@ -2249,7 +2753,8 @@ "license": "(BSD-3-Clause AND Apache-2.0)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-238", @@ -2257,7 +2762,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-239", @@ -2265,7 +2771,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-240", @@ -2273,7 +2780,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-241", @@ -2281,7 +2789,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-242", @@ -2289,7 +2798,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-243", @@ -2297,7 +2807,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-244", @@ -2305,7 +2816,8 @@ "license": "BSD-2-Clause-FreeBSD", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-245", @@ -2313,7 +2825,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-246", @@ -2321,7 +2834,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-247", @@ -2329,7 +2843,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-248", @@ -2337,7 +2852,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-249", @@ -2345,7 +2861,8 @@ "license": "BSD-2-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-250", @@ -2353,7 +2870,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-251", @@ -2361,7 +2879,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-252", @@ -2369,7 +2888,8 @@ "license": "(BSD-2-Clause AND BSD-3-Clause)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-253", @@ -2377,7 +2897,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-254", @@ -2385,7 +2906,8 @@ "license": "BSD-2-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-255", @@ -2393,7 +2915,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-256", @@ -2401,7 +2924,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-257", @@ -2409,7 +2933,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-258", @@ -2417,7 +2942,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-259", @@ -2425,7 +2951,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-260", @@ -2433,7 +2960,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-261", @@ -2441,7 +2969,8 @@ "license": "(BSD-2-Clause AND BSD-3-Clause AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-262", @@ -2449,7 +2978,8 @@ "license": "(Apache-2.0 AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-263", @@ -2457,7 +2987,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-264", @@ -2465,7 +2996,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-265", @@ -2473,7 +3005,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-266", @@ -2481,7 +3014,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-267", @@ -2489,7 +3023,8 @@ "license": "(Apache-2.0 AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-268", @@ -2497,7 +3032,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-269", @@ -2505,7 +3041,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-270", @@ -2513,7 +3050,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-271", @@ -2521,7 +3059,8 @@ "license": "(BSD-2-Clause AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-272", @@ -2529,7 +3068,8 @@ "license": "BSD-2-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-273", @@ -2537,7 +3077,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-274", @@ -2545,7 +3086,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-275", @@ -2553,7 +3095,8 @@ "license": "BSD-2-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-276", @@ -2561,7 +3104,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-277", @@ -2569,7 +3113,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-278", @@ -2577,7 +3122,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-279", @@ -2585,7 +3131,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-280", @@ -2593,7 +3140,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-281", @@ -2601,7 +3149,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-282", @@ -2609,7 +3158,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-283", @@ -2617,7 +3167,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-284", @@ -2625,7 +3176,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-285", @@ -2633,7 +3185,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-286", @@ -2641,7 +3194,8 @@ "license": "(BSD-3-Clause AND Apache-2.0)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-287", @@ -2649,7 +3203,8 @@ "license": "(BSD-3-Clause AND Apache-2.0)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-288", @@ -2657,7 +3212,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-289", @@ -2665,7 +3221,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-290", @@ -2673,7 +3230,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-291", @@ -2681,7 +3239,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-292", @@ -2689,7 +3248,8 @@ "license": "(Apache-2.0 AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-293", @@ -2697,7 +3257,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-294", @@ -2705,7 +3266,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-295", @@ -2713,7 +3275,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-296", @@ -2721,7 +3284,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-297", @@ -2729,7 +3293,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-298", @@ -2737,7 +3302,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-299", @@ -2745,7 +3311,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-300", @@ -2753,7 +3320,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-301", @@ -2761,7 +3329,8 @@ "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-302", @@ -2769,7 +3338,8 @@ "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-303", @@ -2777,7 +3347,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-304", @@ -2785,7 +3356,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-305", @@ -2793,7 +3365,8 @@ "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-306", @@ -2801,7 +3374,8 @@ "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-2-Clause AND BSD-3-Clause)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-307", @@ -2809,7 +3383,8 @@ "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-308", @@ -2817,7 +3392,8 @@ "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-309", @@ -2825,7 +3401,8 @@ "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause AND Apache-2.0 AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-310", @@ -2833,7 +3410,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-311", @@ -2841,7 +3419,8 @@ "license": "((BSD-3-Clause OR CC0-1.0) AND BSD-3-Clause)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-312", @@ -2849,7 +3428,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-313", @@ -2857,7 +3437,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-314", @@ -2865,7 +3446,8 @@ "license": "(BSD-2-Clause AND BSD-3-Clause)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-315", @@ -2873,7 +3455,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-316", @@ -2881,7 +3464,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-317", @@ -2889,7 +3473,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-318", @@ -2897,7 +3482,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-319", @@ -2905,7 +3491,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-320", @@ -2913,7 +3500,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-321", @@ -2921,7 +3509,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-322", @@ -2929,7 +3518,8 @@ "license": "(BSD-3-Clause AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-323", @@ -2937,7 +3527,8 @@ "license": "(BSD-3-Clause AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-324", @@ -2945,7 +3536,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-325", @@ -2953,7 +3545,8 @@ "license": "(BSD-3-Clause AND Apache-2.0)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-326", @@ -2961,7 +3554,8 @@ "license": "Apache-2.0", "approvedDate": "2019-11-01", "status": "apache-2.0", - "comment": "Apache-2.0, no approval needed" + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-327", @@ -2969,7 +3563,8 @@ "license": "BSD-3-Clause", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-328", @@ -2977,7 +3572,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-329", @@ -2985,7 +3581,8 @@ "license": "(BSD-3-Clause AND MIT)", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-330", @@ -2993,7 +3590,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-331", @@ -3001,7 +3599,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-332", @@ -3009,7 +3608,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-333", @@ -3017,7 +3617,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-334", @@ -3025,7 +3626,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-335", @@ -3033,7 +3635,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-11-01-336", @@ -3041,7 +3644,8 @@ "license": "MIT", "approvedDate": "2019-11-01", "status": "allowlisted", - "comment": "allowlisted" + "comment": "allowlisted", + "scope": "build-time dependency" }, { "id": "exc-2019-05-20-001", @@ -3756,4 +4360,4 @@ "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" } ] -} +} \ No newline at end of file diff --git a/license-exceptions/package.json b/license-exceptions/package.json index 25cbd6ec..e82d3892 100644 --- a/license-exceptions/package.json +++ b/license-exceptions/package.json @@ -4,10 +4,12 @@ "description": "CNCF License Exceptions site and tooling", "private": true, "scripts": { + "pretest": "cp exceptions.json site/exceptions.json", "test": "playwright test", - "test:headed": "playwright test --headed", - "test:debug": "playwright test --debug", - "serve": "serve -l 3000 .", + "posttest": "rm -f site/exceptions.json", + "test:headed": "cp exceptions.json site/exceptions.json && playwright test --headed; rm -f site/exceptions.json", + "test:debug": "cp exceptions.json site/exceptions.json && playwright test --debug; rm -f site/exceptions.json", + "serve": "cp exceptions.json site/exceptions.json && serve -l 3000 .", "generate": "node scripts/generate-all.js" }, "keywords": [], diff --git a/license-exceptions/playwright.config.js b/license-exceptions/playwright.config.js index f4f6f7b7..c7b6f30b 100644 --- a/license-exceptions/playwright.config.js +++ b/license-exceptions/playwright.config.js @@ -50,7 +50,7 @@ module.exports = defineConfig({ webServer: { command: 'python3 -m http.server 3000', url: 'http://localhost:3000', - reuseExistingServer: !process.env.CI, + reuseExistingServer: false, timeout: 30000, }, }); diff --git a/license-exceptions/schema/exception.schema.json b/license-exceptions/schema/exception.schema.json index 3e0add44..2a17c9ec 100644 --- a/license-exceptions/schema/exception.schema.json +++ b/license-exceptions/schema/exception.schema.json @@ -5,7 +5,7 @@ "description": "Schema for CNCF license exception records", "type": "object", "properties": { - "version": { "type": "string", "const": "1.0.0" }, + "version": { "type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$" }, "lastUpdated": { "type": "string", "format": "date" }, "blanketExceptions": { "type": "array", @@ -35,7 +35,14 @@ "requestingProject": { "type": "string" }, "approvedDate": { "type": "string", "format": "date" }, "issueUrl": { "type": "string", "format": "uri" }, - "status": { "type": "string", "enum": ["approved", "allowlisted", "apache-2.0"] }, + "status": { "type": "string", "enum": ["approved", "denied", "allowlisted", "apache-2.0"] }, + "project": { + "oneOf": [ + { "type": "string" }, + { "type": "array", "items": { "type": "string" } } + ], + "description": "Requesting project(s) or 'All CNCF Projects' for blanket exceptions" + }, "scope": { "type": "string", "description": "Usage context and codebase area, e.g., 'build dependency, dynamically linked'" }, "results": { "type": "string", "format": "uri", "description": "Link to results documentation (Google Doc or GitHub issue)" }, "comment": { "type": "string" } diff --git a/license-exceptions/scripts/generate-csv.js b/license-exceptions/scripts/generate-csv.js index beaa8c95..565d67a5 100644 --- a/license-exceptions/scripts/generate-csv.js +++ b/license-exceptions/scripts/generate-csv.js @@ -36,6 +36,15 @@ function formatDate(dateStr) { return dateStr || ''; } +/** + * Format project field (can be string or array) + */ +function formatProject(project) { + if (!project) return ''; + if (Array.isArray(project)) return project.join('; '); + return project; +} + function main() { // Read exceptions.json const data = JSON.parse(fs.readFileSync(EXCEPTIONS_FILE, 'utf8')); @@ -46,8 +55,11 @@ function main() { // Header row - note "Last updated" column includes the date in the header const header = [ - 'Package Name', + 'Package or Category', 'License Concluded', + 'Project', + 'Scope', + 'Status', 'Comments', 'Date Published', `Last updated: ${lastUpdated}` @@ -59,6 +71,9 @@ function main() { const row = [ exc.package, exc.license, + formatProject(exc.project), + exc.scope || '', + exc.status || '', exc.comment || '', formatDate(exc.approvedDate), '' // Last updated column is empty for data rows diff --git a/license-exceptions/scripts/generate-spdx.js b/license-exceptions/scripts/generate-spdx.js index 237d5d75..f428b6e1 100644 --- a/license-exceptions/scripts/generate-spdx.js +++ b/license-exceptions/scripts/generate-spdx.js @@ -50,7 +50,12 @@ function main() { let packageNum = 1; for (const exc of exceptions) { const strippedName = stripPackagePrefix(exc.package); - const comment = exc.comment || `approved ${exc.approvedDate}`; + const project = Array.isArray(exc.project) ? exc.project.join(', ') : (exc.project || ''); + const projectInfo = project ? `Project: ${project}. ` : ''; + const scopeInfo = exc.scope ? `Scope: ${exc.scope}. ` : ''; + const statusInfo = exc.status ? `Status: ${exc.status}. ` : ''; + const baseComment = exc.comment || `${exc.status || 'approved'} ${exc.approvedDate}`; + const comment = `${projectInfo}${scopeInfo}${statusInfo}${baseComment}`; lines.push(`##### Package: ${strippedName}`); lines.push(''); diff --git a/license-exceptions/site/app.js b/license-exceptions/site/app.js index 62bf1319..257d6b37 100644 --- a/license-exceptions/site/app.js +++ b/license-exceptions/site/app.js @@ -15,6 +15,7 @@ search: document.getElementById('search'), licenseFilter: document.getElementById('license-filter'), statusFilter: document.getElementById('status-filter'), + projectFilter: document.getElementById('project-filter'), yearFilter: document.getElementById('year-filter'), sortBy: document.getElementById('sort-by'), clearFilters: document.getElementById('clear-filters'), @@ -73,6 +74,20 @@ } } + // Helper to normalize project field to array + function normalizeProject(project) { + if (!project) return []; + if (Array.isArray(project)) return project; + return [project]; + } + + // Helper to format project for display + function formatProject(project) { + const projects = normalizeProject(project); + if (projects.length === 0) return '-'; + return projects.join(', '); + } + // Populate filter dropdowns from data function populateFilters() { // Get unique licenses @@ -84,6 +99,19 @@ elements.licenseFilter.appendChild(option); }); + // Get unique projects (flatten arrays) + const projectSet = new Set(); + data.exceptions.forEach(e => { + normalizeProject(e.project).forEach(p => projectSet.add(p)); + }); + const projects = [...projectSet].sort(); + projects.forEach(project => { + const option = document.createElement('option'); + option.value = project; + option.textContent = project; + elements.projectFilter.appendChild(option); + }); + // Get unique years from approvedDate const years = [...new Set( data.exceptions @@ -104,17 +132,20 @@ const searchTerm = elements.search.value.toLowerCase().trim(); const licenseFilter = elements.licenseFilter.value; const statusFilter = elements.statusFilter.value; + const projectFilter = elements.projectFilter.value; const yearFilter = elements.yearFilter.value; // Filter filteredExceptions = data.exceptions.filter(exc => { // Search filter - search across all fields if (searchTerm) { + const projectText = normalizeProject(exc.project).join(' '); const searchableText = [ exc.package, exc.license, exc.status, exc.scope || '', + projectText, exc.approvedDate || '', exc.comment || '' ].join(' ').toLowerCase(); @@ -134,6 +165,14 @@ return false; } + // Project filter + if (projectFilter) { + const projects = normalizeProject(exc.project); + if (!projects.includes(projectFilter)) { + return false; + } + } + // Year filter if (yearFilter) { const excYear = exc.approvedDate ? exc.approvedDate.split('-')[0] : ''; @@ -171,6 +210,10 @@ valA = a.license.toLowerCase(); valB = b.license.toLowerCase(); break; + case 'project': + valA = formatProject(a.project).toLowerCase(); + valB = formatProject(b.project).toLowerCase(); + break; case 'status': valA = a.status.toLowerCase(); valB = b.status.toLowerCase(); @@ -240,11 +283,13 @@ const packageHtml = formatPackage(exc.package); const statusClass = getStatusClass(exc.status); const resultsHtml = formatResults(exc.results); + const projectHtml = escapeHtml(formatProject(exc.project)); return ` + @@ -265,7 +310,7 @@ return `${escapeHtml(packageName)}`; } - // Format results link (Google Doc or GitHub issue) + // Format results link (Google Doc or GitHub) function formatResults(resultsUrl) { if (!resultsUrl) { return '-'; @@ -275,7 +320,7 @@ if (resultsUrl.includes('docs.google.com')) { linkText = 'Google Doc'; } else if (resultsUrl.includes('github.com')) { - linkText = 'GitHub Issue'; + linkText = 'GitHub'; } return `${linkText}`; @@ -286,6 +331,8 @@ switch (status) { case 'approved': return 'status-approved'; + case 'denied': + return 'status-denied'; case 'allowlisted': return 'status-allowlisted'; case 'apache-2.0': @@ -312,6 +359,7 @@ elements.search.value = ''; elements.licenseFilter.value = ''; elements.statusFilter.value = ''; + elements.projectFilter.value = ''; elements.yearFilter.value = ''; elements.sortBy.value = 'date-desc'; currentSort = { column: 'date', direction: 'desc' }; @@ -320,10 +368,11 @@ // Download CSV function downloadCsv() { - const headers = ['Package', 'License', 'Scope', 'Status', 'Approved Date', 'Results', 'Comment']; + const headers = ['Package or Category', 'License', 'Project', 'Scope', 'Status', 'Approved Date', 'Results', 'Comment']; const rows = filteredExceptions.map(exc => [ exc.package, exc.license, + formatProject(exc.project), exc.scope || '', exc.status, exc.approvedDate || '', @@ -363,6 +412,7 @@ // Filter dropdowns elements.licenseFilter.addEventListener('change', applyFiltersAndRender); elements.statusFilter.addEventListener('change', applyFiltersAndRender); + elements.projectFilter.addEventListener('change', applyFiltersAndRender); elements.yearFilter.addEventListener('change', applyFiltersAndRender); // Sort dropdown diff --git a/license-exceptions/site/index.html b/license-exceptions/site/index.html index 9f4b7830..8579cfda 100644 --- a/license-exceptions/site/index.html +++ b/license-exceptions/site/index.html @@ -14,15 +14,6 @@

CNCF License Exceptions

- -
@@ -42,10 +33,17 @@

CNCF License Exceptions

+
+ + +
PackageLicenseStatusApproved DatePackage License ScopeStatus Approved Date Results
${packageHtml} ${escapeHtml(exc.license)}${projectHtml} ${escapeHtml(exc.scope || '-')} ${escapeHtml(exc.status)} ${escapeHtml(exc.approvedDate || '-')}
- + + diff --git a/license-exceptions/site/styles.css b/license-exceptions/site/styles.css index a842f1d8..ec717937 100644 --- a/license-exceptions/site/styles.css +++ b/license-exceptions/site/styles.css @@ -542,6 +542,11 @@ body { color: #383d41; } +.status-denied { + background-color: #f8d7da; + color: #721c24; +} + /* No Results */ .no-results { padding: 3rem; diff --git a/license-exceptions/tests/blanket-exceptions.spec.js b/license-exceptions/tests/blanket-exceptions.spec.js index 03e774c2..904c8e90 100644 --- a/license-exceptions/tests/blanket-exceptions.spec.js +++ b/license-exceptions/tests/blanket-exceptions.spec.js @@ -71,19 +71,16 @@ test.describe('Blanket Exceptions Page', () => { }); test.describe('Navigation Between Pages', () => { - test('can navigate from package to blanket and back', async ({ page }) => { - // Start at package exceptions - await page.goto('/site/index.html'); - await expect(page.locator('.nav-links a.active')).toHaveText('Package Exceptions'); - - // Navigate to blanket - await page.click('a:has-text("Blanket Exceptions")'); - await expect(page).toHaveURL(/blanket-exceptions/); + test('can navigate from blanket page to main page', async ({ page }) => { + // Start at blanket exceptions page (has nav) + await page.goto('/site/blanket-exceptions.html'); await expect(page.locator('.nav-links a.active')).toHaveText('Blanket Exceptions'); - // Navigate back + // Navigate to package exceptions (main page) await page.click('a:has-text("Package Exceptions")'); await expect(page).toHaveURL(/index\.html|\/site\/?$/); - await expect(page.locator('.nav-links a.active')).toHaveText('Package Exceptions'); + + // Main page doesn't have nav since blanket exceptions are now in the main table + await expect(page.locator('h1')).toHaveText('CNCF License Exceptions'); }); }); diff --git a/license-exceptions/tests/package-exceptions.spec.js b/license-exceptions/tests/package-exceptions.spec.js index 8dba86ad..0a4066ca 100644 --- a/license-exceptions/tests/package-exceptions.spec.js +++ b/license-exceptions/tests/package-exceptions.spec.js @@ -8,7 +8,8 @@ const { test, expect } = require('@playwright/test'); // Helper to wait for data to load async function waitForDataLoad(page) { // Wait for the results count to show actual data (not "Loading...") - await expect(page.locator('#results-count')).not.toHaveText('Loading...', { timeout: 10000 }); + // Use a regex that matches either "X exceptions" or "X of Y exceptions" + await expect(page.locator('#results-count')).toHaveText(/\d+ (of \d+ )?exceptions/, { timeout: 15000 }); } test.describe('Package Exceptions Page', () => { @@ -33,20 +34,22 @@ test.describe('Package Exceptions Page', () => { expect(resultsText).toMatch(/\d+ exceptions/); }); - test('navigation links are present and correct', async ({ page }) => { - const navLinks = page.locator('.nav-links a'); - await expect(navLinks).toHaveCount(2); - - await expect(navLinks.nth(0)).toHaveText('Package Exceptions'); - await expect(navLinks.nth(0)).toHaveClass(/active/); - - await expect(navLinks.nth(1)).toHaveText('Blanket Exceptions'); + test('page has subtitle text', async ({ page }) => { + // The page should have subtitle text about license exceptions + await expect(page.locator('.subtitle')).toBeVisible(); + await expect(page.locator('.subtitle')).toContainText('Approved license exceptions'); }); - test('can navigate to blanket exceptions page', async ({ page }) => { - await page.click('a:has-text("Blanket Exceptions")'); - await expect(page).toHaveURL(/blanket-exceptions/); - await expect(page.locator('h1')).toHaveText('CNCF License Exceptions'); + test('blanket exceptions are shown in main table', async ({ page }) => { + await waitForDataLoad(page); + // Search for blanket exceptions (project = "All CNCF Projects") + await page.selectOption('#project-filter', 'All CNCF Projects'); + await page.waitForTimeout(100); + + // Should find at least one blanket exception + const rows = page.locator('#exceptions-tbody tr'); + const count = await rows.count(); + expect(count).toBeGreaterThan(0); }); }); From 9d82865de8edc980b1145e9d8525379499852707 Mon Sep 17 00:00:00 2001 From: Jeffrey Sica Date: Wed, 4 Feb 2026 20:53:27 -0600 Subject: [PATCH 18/19] fix(ci): add 'denied' status to validation workflow Signed-off-by: Jeffrey Sica --- .github/workflows/validate-exceptions.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/validate-exceptions.yml b/.github/workflows/validate-exceptions.yml index d78f78e6..aef02c62 100644 --- a/.github/workflows/validate-exceptions.yml +++ b/.github/workflows/validate-exceptions.yml @@ -94,7 +94,7 @@ jobs: if (!exc.package) throw new Error('Exception ' + i + ' missing package'); if (!exc.license) throw new Error('Exception ' + i + ' missing license'); if (!exc.status) throw new Error('Exception ' + i + ' missing status'); - if (!['approved', 'allowlisted', 'apache-2.0'].includes(exc.status)) { + if (!['approved', 'denied', 'allowlisted', 'apache-2.0'].includes(exc.status)) { throw new Error('Exception ' + i + ' has invalid status: ' + exc.status); } } From 3f50abf1ab7e3c29006c30aace9b574b6477b78f Mon Sep 17 00:00:00 2001 From: Jeffrey Sica Date: Wed, 18 Feb 2026 10:12:20 -0600 Subject: [PATCH 19/19] swap to netlify Signed-off-by: Jeffrey Sica --- .../license-exception-request.yaml | 2 +- .github/workflows/deploy-license-site.yml | 52 +- .../workflows/license-exception-approved.yml | 2 +- .../workflows/license-exception-triage.yml | 2 +- license-exceptions/README.md | 2 +- license-exceptions/site/exceptions.json | 4363 +++++++++++++++++ netlify.toml | 14 + 7 files changed, 4385 insertions(+), 52 deletions(-) create mode 100644 license-exceptions/site/exceptions.json create mode 100644 netlify.toml diff --git a/.github/ISSUE_TEMPLATE/license-exception-request.yaml b/.github/ISSUE_TEMPLATE/license-exception-request.yaml index f368f8e7..fa80f2e2 100644 --- a/.github/ISSUE_TEMPLATE/license-exception-request.yaml +++ b/.github/ISSUE_TEMPLATE/license-exception-request.yaml @@ -42,7 +42,7 @@ body: Before submitting, please check if an exception already exists for your component(s): - **[Search the exceptions database](https://cncf.github.io/foundation/license-exceptions/site/)** + **[Search the exceptions database](https://exceptions.cncf.io/)** If an exception already exists for the same package and license, you do not need to request a new one. diff --git a/.github/workflows/deploy-license-site.yml b/.github/workflows/deploy-license-site.yml index ed8911fc..112672e0 100644 --- a/.github/workflows/deploy-license-site.yml +++ b/.github/workflows/deploy-license-site.yml @@ -1,20 +1,17 @@ -name: Deploy License Exceptions Site +name: License Exceptions Site Tests on: push: branches: [main] paths: - 'license-exceptions/**' + pull_request: + paths: + - 'license-exceptions/**' workflow_dispatch: permissions: contents: read - pages: write - id-token: write - -concurrency: - group: "pages" - cancel-in-progress: false jobs: test: @@ -51,44 +48,3 @@ jobs: name: playwright-report path: license-exceptions/playwright-report/ retention-days: 7 - - build: - runs-on: ubuntu-latest - needs: test - steps: - - name: Checkout - uses: actions/checkout@v4 - - - name: Setup Node.js - uses: actions/setup-node@v4 - with: - node-version: '20' - - - name: Generate derived formats - run: | - cd license-exceptions - node scripts/generate-all.js - - - name: Prepare site - run: | - mkdir -p _site/license-exceptions - cp -r license-exceptions/site/* _site/license-exceptions/ - cp license-exceptions/exceptions.json _site/license-exceptions/ - cp license-exceptions/CNCF-licensing-exceptions.csv _site/license-exceptions/ - cp license-exceptions/cncf-exceptions-current.spdx _site/license-exceptions/ - - - name: Upload artifact - uses: actions/upload-pages-artifact@v3 - with: - path: '_site' - - deploy: - environment: - name: github-pages - url: ${{ steps.deployment.outputs.page_url }}license-exceptions/ - runs-on: ubuntu-latest - needs: build - steps: - - name: Deploy to GitHub Pages - id: deployment - uses: actions/deploy-pages@v4 diff --git a/.github/workflows/license-exception-approved.yml b/.github/workflows/license-exception-approved.yml index cd9ac345..6adc60bd 100644 --- a/.github/workflows/license-exception-approved.yml +++ b/.github/workflows/license-exception-approved.yml @@ -143,6 +143,6 @@ jobs: owner: context.repo.owner, repo: context.repo.repo, issue_number: context.issue.number, - body: `## ${emoji} ${title}\n\nA pull request has been created to ${action} to the database:\n\n${prUrl}\n\nOnce merged, the exceptions will appear in the [exceptions database](https://cncf.github.io/foundation/license-exceptions/site/).` + body: `## ${emoji} ${title}\n\nA pull request has been created to ${action} to the database:\n\n${prUrl}\n\nOnce merged, the exceptions will appear in the [exceptions database](https://exceptions.cncf.io/).` }); } diff --git a/.github/workflows/license-exception-triage.yml b/.github/workflows/license-exception-triage.yml index cd96019c..3304993c 100644 --- a/.github/workflows/license-exception-triage.yml +++ b/.github/workflows/license-exception-triage.yml @@ -99,7 +99,7 @@ jobs: for (const dup of duplicates) { comment += `- \`${dup}\`\n`; } - comment += `\nPlease check the [exceptions database](https://cncf.github.io/foundation/license-exceptions/site/) to verify.\n\n`; + comment += `\nPlease check the [exceptions database](https://exceptions.cncf.io/) to verify.\n\n`; } comment += `---\n`; diff --git a/license-exceptions/README.md b/license-exceptions/README.md index dcc770c5..b7685f5e 100644 --- a/license-exceptions/README.md +++ b/license-exceptions/README.md @@ -6,7 +6,7 @@ This directory contains license exceptions approved by the CNCF Governing Board. ## Browse Exceptions -**[View the searchable exceptions database](https://cncf.github.io/foundation/license-exceptions/site/)** +**[View the searchable exceptions database](https://exceptions.cncf.io/)** The web interface allows you to: - Search by package name diff --git a/license-exceptions/site/exceptions.json b/license-exceptions/site/exceptions.json new file mode 100644 index 00000000..d7ea5fb3 --- /dev/null +++ b/license-exceptions/site/exceptions.json @@ -0,0 +1,4363 @@ +{ + "version": "1.1.0", + "lastUpdated": "2026-02-04", + "blanketExceptions": [], + "exceptions": [ + { + "id": "exc-2026-02-05-001", + "package": "eclipse-ee4j/expressly", + "license": "EPL-2.0 OR GPL-2.0-only WITH Classpath-exception-2.0", + "project": "Keycloak", + "approvedDate": "2026-02-05", + "status": "approved", + "scope": "required upstream dependency, dynamically linked, unmodified", + "results": "https://github.com/cncf/foundation/issues/1177", + "comment": "Default implementation of Jakarta Expression Language 6.0, transitive dependency for Hibernate Validator" + }, + { + "id": "exc-2026-02-05-002", + "package": "libpathrs", + "license": "MPL-2.0 OR LGPL-3.0-or-later", + "project": "All CNCF Projects", + "approvedDate": "2026-02-05", + "status": "approved", + "scope": "vendored component, build-time dependency, or install-time dependency; statically or dynamically linked", + "results": "https://github.com/cncf/foundation/issues/1154", + "comment": "Blanket exception: Projects using libpathrs statically linked MUST elect MPL-2.0 and document this. Provides secure path resolution APIs." + }, + { + "id": "exc-2026-02-05-003", + "package": "go-pathrs", + "license": "MPL-2.0", + "project": "All CNCF Projects", + "approvedDate": "2026-02-05", + "status": "approved", + "scope": "vendored component, build-time dependency, or install-time dependency; statically or dynamically linked", + "results": "https://github.com/cncf/foundation/issues/1154", + "comment": "Blanket exception: Go bindings for libpathrs. Provides secure path resolution APIs." + }, + { + "id": "exc-2025-11-21-001", + "package": "cyphar/filepath-securejoin", + "license": "MPL-2.0 AND BSD-3-Clause", + "project": "All CNCF Projects", + "approvedDate": "2025-11-21", + "status": "approved", + "scope": "vendored component, build-time dependency, or install-time dependency; statically or dynamically linked", + "results": "https://github.com/cncf/foundation/issues/1154", + "comment": "Blanket exception: Provides secure path resolution APIs on Linux. Used by Kubernetes, containerd, Podman, buildah, cri-o, nerdctl." + }, + { + "id": "exc-2025-11-21-002", + "package": "Liquibase", + "license": "FSL (Functional Source License)", + "project": "Keycloak", + "approvedDate": "2025-11-21", + "status": "denied", + "scope": "incorporated code, dynamically linked", + "results": "https://github.com/cncf/foundation/issues/1147", + "comment": "Denied: FSL is not an open source license. GB does not approve exceptions for non-OSS licenses." + }, + { + "id": "exc-2025-10-17-001", + "package": "paramiko", + "license": "LGPL-2.1", + "project": "oscal-compass", + "approvedDate": "2025-10-17", + "status": "approved", + "scope": "build-time dependency, dynamically linked", + "results": "https://github.com/cncf/foundation/issues/1108", + "comment": "Pure-Python SSHv2 protocol implementation, used for fetching files" + }, + { + "id": "exc-2025-10-17-002", + "package": "certifi", + "license": "MPL-2.0", + "project": "oscal-compass", + "approvedDate": "2025-10-17", + "status": "approved", + "scope": "install-time dependency, dynamically linked", + "results": "https://github.com/cncf/foundation/issues/1091", + "comment": "Dependency for requests library" + }, + { + "id": "exc-2025-10-17-003", + "package": "pathspec", + "license": "MPL-2.0", + "project": "oscal-compass", + "approvedDate": "2025-10-17", + "status": "approved", + "scope": "build-time dependency, separate process", + "results": "https://github.com/cncf/foundation/issues/1090", + "comment": "Dependency for black, mkdocs, mypy" + }, + { + "id": "exc-2025-10-17-004", + "package": "cyphar/filepath-securejoin", + "license": "BSD-3-Clause AND MPL-2.0", + "project": "Kubernetes", + "approvedDate": "2025-10-17", + "status": "approved", + "scope": "vendored component, build-time dependency, statically linked", + "results": "https://github.com/cncf/foundation/issues/1074", + "comment": "Provides secure path construction functions. Superseded by blanket exception in issue #1154." + }, + { + "id": "exc-2024-10-23-001", + "package": "hashicorp/terraform-provider-aws", + "license": "MPL-2.0", + "project": "Crossplane", + "approvedDate": "2024-10-23", + "status": "approved", + "scope": "build-time dependency, modified fork", + "results": "https://github.com/cncf/foundation/issues/818", + "comment": "Fork maintained for Crossplane providers, changes contributed upstream" + }, + { + "id": "exc-2024-10-23-002", + "package": "hashicorp/terraform-provider-azurerm", + "license": "MPL-2.0", + "project": "Crossplane", + "approvedDate": "2024-10-23", + "status": "approved", + "scope": "build-time dependency, modified fork", + "results": "https://github.com/cncf/foundation/issues/818", + "comment": "Fork maintained for Crossplane providers, changes contributed upstream" + }, + { + "id": "exc-2024-10-23-003", + "package": "hashicorp/terraform-provider-azuread", + "license": "MPL-2.0", + "project": "Crossplane", + "approvedDate": "2024-10-23", + "status": "approved", + "scope": "build-time dependency, modified fork", + "results": "https://github.com/cncf/foundation/issues/818", + "comment": "Fork maintained for Crossplane providers, changes contributed upstream" + }, + { + "id": "exc-2024-10-23-004", + "package": "apple/swift-nio-ssl", + "license": "OpenSSL", + "project": "Connect", + "approvedDate": "2024-10-23", + "status": "approved", + "scope": "build-time dependency, unmodified", + "results": "https://github.com/cncf/foundation/issues/823", + "comment": "Required for HTTP/2 + TLS with HTTP trailers on iOS. Also used by gRPC Swift." + }, + { + "id": "exc-2024-10-23-005", + "package": "Crossplane Upjet MPL dependencies", + "license": "MPL-2.0", + "project": "Crossplane", + "approvedDate": "2024-10-23", + "status": "approved", + "scope": "build-time dependency, unmodified, linked at build time", + "results": "https://github.com/cncf/foundation/issues/787", + "comment": "Various hashicorp terraform dependencies for Upjet: hcl, terraform-json, terraform-plugin-framework, terraform-plugin-go, terraform-plugin-sdk, go-plugin, go-uuid, go-version, logutils, terraform-plugin-log, terraform-registry-address, terraform-svchost, yamux" + }, + { + "id": "exc-2024-10-23-006", + "package": "Linux kernel uapi headers (btrfs)", + "license": "GPL-2.0-only WITH Linux-syscall-note", + "project": "containerd", + "approvedDate": "2024-10-23", + "status": "approved", + "scope": "kernel headers included via #include, no inline functions compiled in", + "results": "https://github.com/cncf/foundation/issues/174", + "comment": "Used by containerd/btrfs for btrfs-related ioctl syscalls. Headers from linux/btrfs.h and linux/btrfs_tree.h." + }, + { + "id": "exc-2024-10-22-001", + "package": "github.com/hashicorp/go-set/v2", + "license": "MPL-2.0", + "project": "OpenFGA", + "approvedDate": "2024-10-22", + "status": "approved", + "scope": "build-time dependency, linked at build time", + "results": "https://github.com/cncf/foundation/issues/830", + "comment": "Unmodified code" + }, + { + "id": "exc-2024-10-22-002", + "package": "Keycloak Java dependencies", + "license": "0BSD, CDDL-1.1, EPL-1.0, EPL-2.0, GPL-2.0-only, GPL-2.0-with-classpath-exception, LGPL-2.1, LGPL-2.1-only, MIT-0, MPL-2.0, UPL-1.0", + "project": "Keycloak", + "approvedDate": "2024-10-22", + "status": "approved", + "scope": "transitive dependencies from Quarkus framework, unmodified", + "results": "https://github.com/cncf/foundation/issues/817", + "comment": "Multiple Java dependencies including: tslib, h2, mysql-connector-j, jakarta.* APIs, parsson, graalvm SDK, hibernate-*, mariadb-java-client, nashorn-core, reactive-streams" + }, + { + "id": "exc-2024-12-17-001", + "package": "github.com/hashicorp/memberlist", + "license": "MPL-2.0", + "project": "kubernetes/kops", + "approvedDate": "2024-07-16", + "status": "approved", + "scope": "build-time dependency, unmodified", + "results": "https://github.com/cncf/foundation/issues/741", + "comment": "Main component of Gossip DNS feature for peer-to-peer network K8s API address propagation" + }, + { + "id": "exc-2024-02-27-001", + "package": "Falco kernel module", + "license": "GPL-2.0-only OR MIT", + "project": "Falco", + "approvedDate": "2024-02-27", + "status": "approved", + "scope": "kernel module, dual-licensed", + "results": "https://github.com/cncf/foundation/issues/645", + "comment": "Falco's kernel module is dual-licensed GPL-2.0-only OR MIT" + }, + { + "id": "blanket-ebpf-gpl", + "package": "In-kernel eBPF programs", + "license": "GPL-2.0-only, GPL-2.0-or-later", + "project": "All CNCF Projects", + "approvedDate": "2023-08-31", + "status": "approved", + "scope": "in-kernel eBPF programs only", + "results": "https://github.com/cncf/foundation/blob/main/license-exceptions/README.md#gpl-exceptions-for-in-kernel-ebpf-programs", + "comment": "Blanket exception: GPL-2.0 licensed code is permitted for in-kernel eBPF programs only, as this is required by the Linux kernel BPF subsystem." + }, + { + "id": "exc-2023-08-31-001", + "package": "github.com/docker/go-metrics", + "license": "CC-BY-SA 4.0", + "approvedDate": "2023-08-31", + "status": "approved", + "scope": "runtime dependency, statically linked", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31" + }, + { + "id": "exc-2023-08-31-002", + "package": "github.com/hashicorp/go-memdb", + "license": "MPL-2.0", + "approvedDate": "2023-08-31", + "status": "approved", + "scope": "runtime dependency, dynamically linked", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31", + "results": "https://github.com/cncf/foundation/issues/400", + "project": "Cilium" + }, + { + "id": "exc-2023-08-31-003", + "package": "github.com/shoenig/go-m1cpu", + "license": "MPL-2.0", + "approvedDate": "2023-08-31", + "status": "approved", + "scope": "build dependency", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31" + }, + { + "id": "exc-2023-08-31-004", + "package": "hashicorp/packer-plugin-sdk", + "license": "MPL-2.0", + "approvedDate": "2023-08-31", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31" + }, + { + "id": "exc-2023-06-27-001", + "package": "github.com/hashicorp/consul/api", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/400", + "scope": "build-time dependency, unmodified", + "project": "Cilium" + }, + { + "id": "exc-2023-06-27-002", + "package": "github.com/hashicorp/go-hclog", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/400", + "scope": "build-time dependency, unmodified", + "project": "Cilium" + }, + { + "id": "exc-2023-06-27-003", + "package": "github.com/hashicorp/go-immutable-radix", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/400", + "scope": "build-time dependency, unmodified", + "project": "Cilium" + }, + { + "id": "exc-2023-06-27-004", + "package": "github.com/hashicorp/go-plugin", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/300", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2023-06-27-005", + "package": "github.com/hashicorp/go-rootcerts", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/400", + "scope": "build-time dependency, unmodified", + "project": "Cilium" + }, + { + "id": "exc-2023-06-27-006", + "package": "github.com/hashicorp/go-secure-stdlib", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-007", + "package": "github.com/hashicorp/go-sockaddr", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-008", + "package": "github.com/hashicorp/go-uuid", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-009", + "package": "github.com/hashicorp/serf", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/400", + "scope": "build-time dependency, unmodified", + "project": "Cilium" + }, + { + "id": "exc-2023-06-27-010", + "package": "github.com/hashicorp/vault", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/485", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2023-06-27-011", + "package": "github.com/veraison/go-cose", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/526", + "scope": "build-time dependency, unmodified", + "project": "Notary" + }, + { + "id": "exc-2023-06-27-012", + "package": "hashicorp/consul/api", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-013", + "package": "hashicorp/go-hclog", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-014", + "package": "hashicorp/go-immutable-radix", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-015", + "package": "hashicorp/go-plugin", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/300", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2023-06-27-016", + "package": "hashicorp/go-rootcerts", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-017", + "package": "hashicorp/go-secure-stdlib", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-018", + "package": "hashicorp/go-sockaddr", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-019", + "package": "hashicorp/go-uuid", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-020", + "package": "hashicorp/go-version", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2023-06-27-021", + "package": "hashicorp/raft", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-022", + "package": "hashicorp/serf", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27" + }, + { + "id": "exc-2023-06-27-023", + "package": "hashicorp/vault", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/485", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2023-06-27-024", + "package": "hashicorp/yamux", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/400", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2023-06-27-025", + "package": "veraison/go-cose", + "license": "MPL-2.0", + "approvedDate": "2023-06-27", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-06-27", + "results": "https://github.com/cncf/foundation/issues/526", + "scope": "build-time dependency, unmodified", + "project": "Notary" + }, + { + "id": "exc-2022-04-12-001", + "package": "github.com/eclipse/paho.mqtt.golang", + "license": "EPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2022-04-12-002", + "package": "github.com/hashicorp/go-version", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2022-04-12-003", + "package": "github.com/hashicorp/raft", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified", + "project": "Dapr" + }, + { + "id": "exc-2022-04-12-004", + "package": "github.com/hashicorp/raft-boltdb", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified", + "project": "Dapr" + }, + { + "id": "exc-2022-04-12-005", + "package": "github.com/Microsoft/tslib", + "license": "0BSD", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2022-04-12-006", + "package": "go-version", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2022-04-12-007", + "package": "paho.mqtt.golang", + "license": "EPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2022-04-12-008", + "package": "raft", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified", + "project": "Dapr" + }, + { + "id": "exc-2022-04-12-009", + "package": "raft-boltdb", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/297", + "scope": "build-time dependency, unmodified", + "project": "Dapr" + }, + { + "id": "exc-2022-04-12-010", + "package": "tslib", + "license": "0BSD", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2022-04-12-011", + "package": "webpki-roots", + "license": "MPL-2.0", + "approvedDate": "2022-04-12", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2022-04-12", + "results": "https://github.com/cncf/foundation/issues/172", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2021-07-19-001", + "package": "github.com/hashicorp/go-retryablehttp", + "license": "MPL-2.0", + "approvedDate": "2021-07-19", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19", + "results": "https://github.com/cncf/foundation/issues/138", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2021-07-19-002", + "package": "go-retryablehttp", + "license": "MPL-2.0", + "approvedDate": "2021-07-19", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2021-07-19", + "results": "https://github.com/cncf/foundation/issues/138", + "scope": "build-time dependency, unmodified" + }, + { + "id": "exc-2019-11-01-001", + "package": "Chart.js", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-002", + "package": "cloud.google.com/go", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-003", + "package": "code.cloudfoundry.org/clock", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-004", + "package": "colors", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-005", + "package": "defusedxml", + "license": "Python-2.0", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-006", + "package": "ejs", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-007", + "package": "github.com/abbot/go-http-auth", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-008", + "package": "github.com/aclements/go-moremath", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-009", + "package": "github.com/andygrunwald/go-gerrit", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-010", + "package": "github.com/aokoli/goutils", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-011", + "package": "github.com/appc/spec", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-012", + "package": "github.com/armon/circbuf", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-013", + "package": "github.com/armon/go-proxyproto", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-014", + "package": "github.com/armon/go-radix", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-015", + "package": "github.com/asaskevich/govalidator", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-016", + "package": "github.com/aws/aws-k8s-tester", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-017", + "package": "github.com/aws/aws-sdk-go", + "license": "((MIT OR GPL-3.0) AND BSD-3-Clause AND Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-018", + "package": "github.com/Azure/azure-sdk-for-go", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-019", + "package": "github.com/Azure/azure-storage-blob-go", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-020", + "package": "github.com/Azure/go-ansiterm", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-021", + "package": "github.com/Azure/go-autorest", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-022", + "package": "github.com/bazelbuild/bazel-gazelle", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-023", + "package": "github.com/bazelbuild/buildtools", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-024", + "package": "github.com/beorn7/perks", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-025", + "package": "github.com/blang/semver", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-026", + "package": "github.com/bluebreezecf/opentsdb-goclient", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-027", + "package": "github.com/boltdb/bolt", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-028", + "package": "github.com/bwmarrin/snowflake", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-029", + "package": "github.com/chai2010/gettext-go", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-030", + "package": "github.com/cloudflare/cfssl", + "license": "(BSD-2-Clause AND BSD-3-Clause AND ISC)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-031", + "package": "github.com/cloudfoundry-incubator/candiedyaml", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-032", + "package": "github.com/clusterhq/flocker-go", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-033", + "package": "github.com/cockroachdb/cmux", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-034", + "package": "github.com/codedellemc/goscaleio", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-035", + "package": "github.com/container-storage-interface/spec", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-036", + "package": "github.com/containerd/console", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-037", + "package": "github.com/containerd/containerd", + "license": "(CC-BY-4.0 AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-038", + "package": "github.com/containernetworking/cni", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-039", + "package": "github.com/containernetworking/plugins", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-040", + "package": "github.com/coredns/coredns", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-041", + "package": "github.com/coreos/bbolt", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-042", + "package": "github.com/coreos/etcd", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-043", + "package": "github.com/coreos/go-etcd", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-044", + "package": "github.com/coreos/go-oidc", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-045", + "package": "github.com/coreos/go-semver", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-046", + "package": "github.com/coreos/go-systemd", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-047", + "package": "github.com/coreos/pkg", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-048", + "package": "github.com/coreos/rkt", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-049", + "package": "github.com/cpuguy83/go-md2man", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-050", + "package": "github.com/cyphar/filepath-securejoin", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-051", + "package": "github.com/daaku/go.zipexe", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-052", + "package": "github.com/davecgh/go-spew", + "license": "ISC", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-053", + "package": "github.com/daviddengcn/go-colortext", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-054", + "package": "github.com/dchest/safefile", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-055", + "package": "github.com/deckarep/golang-set", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-056", + "package": "github.com/denverdino/aliyungo", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-057", + "package": "github.com/dgrijalva/jwt-go", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-058", + "package": "github.com/digitalocean/godo", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-059", + "package": "github.com/djherbis/atime", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-060", + "package": "github.com/docker/cli", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-061", + "package": "github.com/docker/distribution", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-062", + "package": "github.com/docker/docker", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-063", + "package": "github.com/docker/engine-api", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-064", + "package": "github.com/docker/go-connections", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-065", + "package": "github.com/docker/libcompose", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-066", + "package": "github.com/docker/libnetwork", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-067", + "package": "github.com/docker/libtrust", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-068", + "package": "github.com/docker/machine", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-069", + "package": "github.com/dustin/go-humanize", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-070", + "package": "github.com/eapache/channels", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-071", + "package": "github.com/eapache/go-resiliency", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-072", + "package": "github.com/eapache/go-xerial-snappy", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-073", + "package": "github.com/eapache/queue", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-074", + "package": "github.com/elazarl/go-bindata-assetfs", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-075", + "package": "github.com/elazarl/goproxy", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-076", + "package": "github.com/emicklei/go-restful", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-077", + "package": "github.com/emicklei/go-restful-swagger12", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-078", + "package": "github.com/emirpasic/gods", + "license": "(BSD-2-Clause AND ISC)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-079", + "package": "github.com/euank/go-kmsg-parser", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-080", + "package": "github.com/evanphx/json-patch", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-081", + "package": "github.com/exponent-io/jsonpath", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-082", + "package": "github.com/fatih/camelcase", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-083", + "package": "github.com/fatih/structs", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-084", + "package": "github.com/flynn/go-shlex", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-085", + "package": "github.com/fsnotify/fsnotify", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-086", + "package": "github.com/fsouza/fake-gcs-server", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-087", + "package": "github.com/fsouza/go-dockerclient", + "license": "(BSD-2-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-088", + "package": "github.com/fullsailor/pkcs7", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-089", + "package": "github.com/GeertJohan/go.rice", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-090", + "package": "github.com/ghodss/yaml", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-091", + "package": "github.com/globalsign/mgo", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-092", + "package": "github.com/go-ini/ini", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-093", + "package": "github.com/go-openapi/analysis", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-094", + "package": "github.com/go-openapi/errors", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-095", + "package": "github.com/go-openapi/jsonpointer", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-096", + "package": "github.com/go-openapi/jsonreference", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-097", + "package": "github.com/go-openapi/loads", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-098", + "package": "github.com/go-openapi/runtime", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-099", + "package": "github.com/go-openapi/spec", + "license": "(CC-BY-4.0 AND Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-100", + "package": "github.com/go-openapi/strfmt", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-101", + "package": "github.com/go-openapi/swag", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-102", + "package": "github.com/go-openapi/validate", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-103", + "package": "github.com/go-ozzo/ozzo-validation", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-104", + "package": "github.com/go-yaml/yaml", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-105", + "package": "github.com/gobuffalo/envy", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-106", + "package": "github.com/godbus/dbus", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-107", + "package": "github.com/gogo/protobuf", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-108", + "package": "github.com/golang/dep", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-109", + "package": "github.com/golang/glog", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-110", + "package": "github.com/golang/groupcache", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-111", + "package": "github.com/golang/lint", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-112", + "package": "github.com/golang/mock", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-113", + "package": "github.com/golang/protobuf", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-114", + "package": "github.com/golang/snappy", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-115", + "package": "github.com/google/btree", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-116", + "package": "github.com/google/cadvisor", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-117", + "package": "github.com/google/certificate-transparency-go", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-118", + "package": "github.com/google/go-containerregistry", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-119", + "package": "github.com/google/go-querystring", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-120", + "package": "github.com/google/go-tpm", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-121", + "package": "github.com/google/gofuzz", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-122", + "package": "github.com/google/uuid", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-123", + "package": "github.com/googleapis/gax-go", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-124", + "package": "github.com/googleapis/gnostic", + "license": "(BSD-3-Clause AND Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-125", + "package": "github.com/GoogleCloudPlatform/gke-managed-certs", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-126", + "package": "github.com/gophercloud/gophercloud", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-127", + "package": "github.com/gorilla/context", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-128", + "package": "github.com/gorilla/mux", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-129", + "package": "github.com/gorilla/securecookie", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-130", + "package": "github.com/gorilla/sessions", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-131", + "package": "github.com/gorilla/websocket", + "license": "(BSD-2-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-132", + "package": "github.com/gregjones/httpcache", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-133", + "package": "github.com/grpc-ecosystem/go-grpc-middleware", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-134", + "package": "github.com/grpc-ecosystem/go-grpc-prometheus", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-135", + "package": "github.com/grpc-ecosystem/grpc-gateway", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-136", + "package": "github.com/hawkular/hawkular-client-go", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-137", + "package": "github.com/heketi/heketi REST API", + "license": "(Apache-2.0 OR LGPL-3.0-or-later)", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-138", + "package": "github.com/hpcloud/tail", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-139", + "package": "github.com/huandu/xstrings", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-140", + "package": "github.com/imdario/mergo", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-141", + "package": "github.com/inconshreveable/mousetrap", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-142", + "package": "github.com/influxdata/influxdb", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-143", + "package": "github.com/jimmidyson/go-download", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-144", + "package": "github.com/jinzhu/gorm", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-145", + "package": "github.com/jinzhu/inflection", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-146", + "package": "github.com/jmespath/go-jmespath", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-147", + "package": "github.com/jmhodges/clock", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-148", + "package": "github.com/jmoiron/sqlx", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-149", + "package": "github.com/joho/godotenv", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-150", + "package": "github.com/jonboulle/clockwork", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-151", + "package": "github.com/jpillora/backoff", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-152", + "package": "github.com/json-iterator/go", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-153", + "package": "github.com/kardianos/osext", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-154", + "package": "github.com/karrick/godirwalk", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-155", + "package": "github.com/kevinburke/ssh_config", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-156", + "package": "github.com/kisielk/sqlstruct", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-157", + "package": "github.com/knative/build", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-158", + "package": "github.com/kr/fs", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-159", + "package": "github.com/kr/pretty", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-160", + "package": "github.com/kr/pty", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-161", + "package": "github.com/kr/text", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-162", + "package": "github.com/kubernetes-incubator/apiserver-builder", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-163", + "package": "github.com/kubernetes-incubator/reference-docs", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-164", + "package": "github.com/kubernetes-sigs/application", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-165", + "package": "github.com/kubernetes/repo-infra", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-166", + "package": "github.com/kylelemons/godebug", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-167", + "package": "github.com/lib/pq", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-168", + "package": "github.com/libopenstorage/openstorage", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-169", + "package": "github.com/libvirt/libvirt-go", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-170", + "package": "github.com/libvirt/libvirt-go-xml", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-171", + "package": "github.com/lpabon/godbc", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-172", + "package": "github.com/lxn/win", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-173", + "package": "github.com/magiconair/properties", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-174", + "package": "github.com/mailru/easyjson", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-175", + "package": "github.com/MakeNowJust/heredoc", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-176", + "package": "github.com/markbates/inflect", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-177", + "package": "github.com/marpaia/graphite-golang", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-178", + "package": "github.com/Masterminds/semver", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-179", + "package": "github.com/Masterminds/sprig", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-180", + "package": "github.com/Masterminds/vcs", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-181", + "package": "github.com/mattn/go-runewidth", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-182", + "package": "github.com/mattn/go-shellwords", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-183", + "package": "github.com/mattn/go-zglob", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-184", + "package": "github.com/matttproud/golang_protobuf_extensions", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-185", + "package": "github.com/mesos/mesos-go", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-186", + "package": "github.com/mholt/caddy", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-187", + "package": "github.com/Microsoft/go-winio", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-188", + "package": "github.com/Microsoft/hcsshim", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-189", + "package": "github.com/miekg/coredns", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-190", + "package": "github.com/miekg/dns", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-191", + "package": "github.com/mindprince/gonvml", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-192", + "package": "github.com/mistifyio/go-zfs", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-193", + "package": "github.com/mitchellh/go-homedir", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-194", + "package": "github.com/mitchellh/go-ps", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-195", + "package": "github.com/mitchellh/go-wordwrap", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-196", + "package": "github.com/mitchellh/hashstructure", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-197", + "package": "github.com/mitchellh/mapstructure", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-198", + "package": "github.com/moby/hyperkit", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-199", + "package": "github.com/modern-go/concurrent", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-200", + "package": "github.com/modern-go/reflect2", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-201", + "package": "github.com/mohae/deepcopy", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-202", + "package": "github.com/moul/http2curl", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-203", + "package": "github.com/mrunalp/fileutils", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-204", + "package": "github.com/mvdan/xurls", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-205", + "package": "github.com/mxk/go-flowrate", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-206", + "package": "github.com/ncabatoff/process-exporter", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-207", + "package": "github.com/nightlyone/lockfile", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-208", + "package": "github.com/novln/docker-parser", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-209", + "package": "github.com/NYTimes/gziphandler", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-210", + "package": "github.com/olekukonko/tablewriter", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-211", + "package": "github.com/onsi/ginkgo", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-212", + "package": "github.com/onsi/gomega", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-213", + "package": "github.com/opencontainers/image-spec", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-214", + "package": "github.com/opencontainers/runtime-spec", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-215", + "package": "github.com/opencontainers/selinux", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-216", + "package": "github.com/openshift/origin", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-217", + "package": "github.com/opentracing/opentracing-go", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-218", + "package": "github.com/parnurzeal/gorequest", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-219", + "package": "github.com/patrickmn/go-cache", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-220", + "package": "github.com/paultag/sniff", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-221", + "package": "github.com/pborman/uuid", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-222", + "package": "github.com/pelletier/go-buffruneio", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-223", + "package": "github.com/pelletier/go-toml", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-224", + "package": "github.com/petar/GoLLRB", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-225", + "package": "github.com/peterbourgon/diskv", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-226", + "package": "github.com/pierrec/lz4", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-227", + "package": "github.com/pierrec/xxHash", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-228", + "package": "github.com/pkg/browser", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-229", + "package": "github.com/pkg/errors", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-230", + "package": "github.com/pkg/profile", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-231", + "package": "github.com/pkg/sftp", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-232", + "package": "github.com/pmezard/go-difflib", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-233", + "package": "github.com/pquerna/cachecontrol", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-234", + "package": "github.com/pquerna/ffjson", + "license": "(BSD-3-Clause AND Apache-2.0 AND ISC)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-235", + "package": "github.com/prometheus/client_golang", + "license": "(BSD-3-Clause AND Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-236", + "package": "github.com/prometheus/client_model", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-237", + "package": "github.com/prometheus/common", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-238", + "package": "github.com/prometheus/procfs", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-239", + "package": "github.com/PuerkitoBio/purell", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-240", + "package": "github.com/PuerkitoBio/urlesc", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-241", + "package": "github.com/r2d4/external-storage", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-242", + "package": "github.com/rackspace/gophercloud", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-243", + "package": "github.com/rancher/go-rancher", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-244", + "package": "github.com/rcrowley/go-metrics", + "license": "BSD-2-Clause-FreeBSD", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-245", + "package": "github.com/renstrom/dedent", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-246", + "package": "github.com/Rican7/retry", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-247", + "package": "github.com/riemann/riemann-go-client", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-248", + "package": "github.com/robfig/cron", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-249", + "package": "github.com/russross/blackfriday", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-250", + "package": "github.com/samalba/dockerclient", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-251", + "package": "github.com/satori/go.uuid", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-252", + "package": "github.com/scalingdata/gcfg", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-253", + "package": "github.com/sdboyer/constext", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-254", + "package": "github.com/seccomp/libseccomp-golang", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-255", + "package": "github.com/sergi/go-diff", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-256", + "package": "github.com/Shopify/sarama", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-257", + "package": "github.com/shurcooL/githubv4", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-258", + "package": "github.com/shurcooL/go", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-259", + "package": "github.com/shurcooL/graphql", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-260", + "package": "github.com/shurcooL/sanitized_anchor_name", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-261", + "package": "github.com/sirupsen/logrus", + "license": "(BSD-2-Clause AND BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-262", + "package": "github.com/skynetservices/skydns", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-263", + "package": "github.com/smartystreets/go-aws-auth", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-264", + "package": "github.com/soheilhy/cmux", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-265", + "package": "github.com/spf13/afero", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-266", + "package": "github.com/spf13/cast", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-267", + "package": "github.com/spf13/cobra", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-268", + "package": "github.com/spf13/jwalterweatherman", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-269", + "package": "github.com/spf13/pflag", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-270", + "package": "github.com/spf13/viper", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-271", + "package": "github.com/storageos/go-api", + "license": "(BSD-2-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-272", + "package": "github.com/streadway/quantile", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-273", + "package": "github.com/stretchr/objx", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-274", + "package": "github.com/stretchr/testify", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-275", + "package": "github.com/syndtr/gocapability", + "license": "BSD-2-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-276", + "package": "github.com/tchap/go-patricia", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-277", + "package": "github.com/thockin/glogr", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-278", + "package": "github.com/thockin/logr", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-279", + "package": "github.com/tmc/grpc-websocket-proxy", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-280", + "package": "github.com/tsenart/vegeta", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-281", + "package": "github.com/ugorji/go", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-282", + "package": "github.com/Unknwon/goconfig", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-283", + "package": "github.com/urfave/cli", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-284", + "package": "github.com/vishvananda/netlink", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-285", + "package": "github.com/vishvananda/netns", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-286", + "package": "github.com/vmware/govmomi", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-287", + "package": "github.com/vmware/photon-controller-go-sdk", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-288", + "package": "github.com/weaveworks/mesh", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-289", + "package": "github.com/xanzy/go-cloudstack", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-290", + "package": "github.com/xeipuuv/gojsonpointer", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-291", + "package": "github.com/xeipuuv/gojsonreference", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-292", + "package": "github.com/xeipuuv/gojsonschema", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-293", + "package": "github.com/xiang90/probing", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-294", + "package": "github.com/zakjan/cert-chain-resolver", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-295", + "package": "github.com/ziutek/syslog", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-296", + "package": "go.opencensus.io", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-297", + "package": "go.uber.org/atomic", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-298", + "package": "go.uber.org/multierr", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-299", + "package": "go.uber.org/zap", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-300", + "package": "go4.org/errorutil", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-301", + "package": "golang.org/x/build", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-302", + "package": "golang.org/x/exp", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-303", + "package": "golang.org/x/lint", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-304", + "package": "golang.org/x/oauth2", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-305", + "package": "golang.org/x/sync", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-306", + "package": "golang.org/x/sys", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-307", + "package": "golang.org/x/text", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-308", + "package": "golang.org/x/time", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-309", + "package": "golang.org/x/tools", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause AND Apache-2.0 AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-310", + "package": "golang/archive/tar", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-311", + "package": "gonum.org/v1/gonum", + "license": "((BSD-3-Clause OR CC0-1.0) AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-312", + "package": "google.golang.org/cloud", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-313", + "package": "google.golang.org/genproto", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-314", + "package": "gopkg.in/check.v1", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-315", + "package": "gopkg.in/cheggaaa/pb.v1", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-316", + "package": "gopkg.in/fsnotify", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-317", + "package": "gopkg.in/gcfg.v1", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-318", + "package": "gopkg.in/go-playground/pool.v3", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-319", + "package": "gopkg.in/igm/sockjs-go.v2", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-320", + "package": "gopkg.in/inf.v0", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-321", + "package": "gopkg.in/natefinch/lumberjack.v2", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-322", + "package": "gopkg.in/olivere/elastic.v3", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-323", + "package": "gopkg.in/olivere/elastic.v5", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-324", + "package": "gopkg.in/robfig/cron.v2", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-325", + "package": "gopkg.in/square/go-jose.v2", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-326", + "package": "gopkg.in/src-d", + "license": "Apache-2.0", + "approvedDate": "2019-11-01", + "status": "apache-2.0", + "comment": "Apache-2.0, no approval needed", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-327", + "package": "gopkg.in/tomb.v1", + "license": "BSD-3-Clause", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-328", + "package": "jquery.scrollto", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-329", + "package": "marked", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-330", + "package": "mime", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-331", + "package": "minimist", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-332", + "package": "node-static", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-333", + "package": "optimist", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-334", + "package": "ui-router for Angular", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-335", + "package": "vbom.ml/util", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-11-01-336", + "package": "wordwrap", + "license": "MIT", + "approvedDate": "2019-11-01", + "status": "allowlisted", + "comment": "allowlisted", + "scope": "build-time dependency" + }, + { + "id": "exc-2019-05-20-001", + "package": "VirtualBox Linux Guest Drivers Makefile", + "license": "GPL-2.0-only", + "approvedDate": "2019-05-20", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-05-20" + }, + { + "id": "exc-2019-03-11-001", + "package": "Angular", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-002", + "package": "Asciidoctor", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-003", + "package": "Azure acr-docker-credential-helper", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-004", + "package": "Backbone", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-005", + "package": "bitbucket.org/bertimus9/systemstat", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-006", + "package": "bitbucket.org/ww/goautoneg", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-007", + "package": "bootstrap", + "license": "(CC-BY-3.0 AND MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-008", + "package": "dialog-polyfill.css", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-009", + "package": "font-awesome", + "license": "(CC-BY-3.0 AND MIT AND OFL-1.1)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-010", + "package": "Gingko", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-011", + "package": "github.com/Azure/azure-pipeline-go", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-012", + "package": "github.com/bungle/lua-resty-template", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-013", + "package": "github.com/c4milo/gotoolkit", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-014", + "package": "github.com/client9/misspell", + "license": "(Unlicense AND BSD-3-Clause AND MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-015", + "package": "github.com/d2g/dhcp4", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-016", + "package": "github.com/d2g/dhcp4client", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-017", + "package": "github.com/dgryski/go-onlinestats", + "license": "(MIT AND LicenseRef-Public-domain-statement)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-018", + "package": "github.com/docker/go-units", + "license": "(CC-BY-SA-4.0 AND CC-BY-4.0 AND Apache-2.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-019", + "package": "github.com/docker/spdystream", + "license": "(CC-BY-SA-4.0 AND CC-BY-4.0 AND BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-020", + "package": "github.com/go-sql-driver/mysql", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-021", + "package": "github.com/gonum/graph", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-022", + "package": "github.com/google/go-github", + "license": "(BSD-3-Clause AND CC-BY-3.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-023", + "package": "github.com/grpc-ecosystem/grpc-opentracing", + "license": "(BSD-3-Clause AND LicenseRef-Google-Patents-Notice-GRPC)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-024", + "package": "github.com/hashicorp/errwrap", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-025", + "package": "github.com/hashicorp/go-cleanhttp", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-026", + "package": "github.com/hashicorp/go-multierror", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-027", + "package": "github.com/hashicorp/golang-lru", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-028", + "package": "github.com/hashicorp/hcl", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-029", + "package": "github.com/hooklift/iso9660", + "license": "MPL-2.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-030", + "package": "github.com/howeyc/gopass", + "license": "(ISC AND CDDL-1.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-031", + "package": "github.com/jbenet/go-context", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-032", + "package": "github.com/JeffAshton/win_pdh", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-033", + "package": "github.com/jmank88/nuts", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-034", + "package": "github.com/johanneswuerbach/nfsexports", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-035", + "package": "github.com/joshdk/go-junit", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-036", + "package": "github.com/jteeuwen/go-bindata", + "license": "CC0-1.0", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-037", + "package": "github.com/konsorten/go-windows-terminal-sequences", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-038", + "package": "github.com/marstr/guid", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-039", + "package": "github.com/mattn/go-sqlite3", + "license": "(MIT AND LicenseRef-Public-domain-statement)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-040", + "package": "github.com/multiarch/qemu-user-static", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-041", + "package": "github.com/Nvveen/Gotty", + "license": "BSD-2-Clause-FreeBSD", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-042", + "package": "github.com/opencontainers/go-digest", + "license": "(CC-BY-SA-4.0 AND CC-BY-4.0 AND Apache-2.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-043", + "package": "github.com/opencontainers/runc", + "license": "(LicenseRef-CC-unspecified AND Apache-2.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-044", + "package": "github.com/quobyte/api", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-045", + "package": "github.com/rubiojr/go-vhd", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-046", + "package": "github.com/sigma/go-inotify", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-047", + "package": "github.com/spotinst/spotinst-sdk-go", + "license": "(BSD-3-Clause AND Apache-2.0 AND MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-048", + "package": "github.com/src-d/gcfg", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-049", + "package": "github.com/tent/http-link-go", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-050", + "package": "github.com/xanzy/ssh-agent", + "license": "(Apache-2.0 AND MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-051", + "package": "github.com/zchee/go-vmnet", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-052", + "package": "go-srcimporter", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-053", + "package": "go9p", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-054", + "package": "godep", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-055", + "package": "golang.org/x/crypto", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause AND MIT AND LicenseRef-Public-domain-statement)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-056", + "package": "golang.org/x/net", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-2-Clause AND BSD-3-Clause AND CC-BY-3.0 AND (BSD-3-Clause OR LicenseRef-W3C-Test-Suite-License-1))", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-057", + "package": "golang/expansion", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-058", + "package": "golang/go/types", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-059", + "package": "golang/internal/srcimporter", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-060", + "package": "golang/json", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-061", + "package": "golang/netutil", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-062", + "package": "golang/reflect", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-063", + "package": "golang/template", + "license": "(LicenseRef-Google-Patents-Notice-Golang AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "modified from upstream; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-064", + "package": "Google Protocol Buffers", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-065", + "package": "google.golang.org/api", + "license": "(BSD-3-Clause AND Apache-2.0 AND MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-066", + "package": "google.golang.org/appengine", + "license": "(BSD-3-Clause AND Apache-2.0)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-067", + "package": "google.golang.org/grpc", + "license": "(BSD-3-Clause AND Apache-2.0 AND LicenseRef-Google-Patents-Notice-GRPC)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-068", + "package": "gopkg.in/warnings.v0", + "license": "BSD-2-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Insufficient stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-069", + "package": "Handlebars", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-070", + "package": "Highlight", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-071", + "package": "highlight.js", + "license": "(BSD-3-Clause AND MIT AND CC0-1.0 AND LicenseRef-Public-domain-statement)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-072", + "package": "htpasswd", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-073", + "package": "jQuery", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-074", + "package": "jQuery BBQ", + "license": "(MIT OR GPL-2.0+)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-075", + "package": "jQuery hashchange event", + "license": "(GPL-2.0+ OR MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-076", + "package": "jQuery Slideto", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-077", + "package": "jQuery Wiggle", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-078", + "package": "moment.js", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-079", + "package": "normalize.css", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-080", + "package": "Octicons", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-081", + "package": "parseUri", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-082", + "package": "Pause", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-083", + "package": "Pure CSS", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-084", + "package": "shred", + "license": "ISC", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-085", + "package": "sigs.k8s.io/yaml", + "license": "(BSD-3-Clause AND MIT)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "fork of github.com/ghodss/yaml; not auto-allowlist because: Modified; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-086", + "package": "speter.net/go/exp", + "license": "(BSD-2-Clause AND BSD-3-Clause)", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "not auto-allowlist because: No measure of stars / forks; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-087", + "package": "sprintf() for JavaScript", + "license": "BSD-3-Clause", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + }, + { + "id": "exc-2019-03-11-088", + "package": "Underscore.js", + "license": "MIT", + "approvedDate": "2019-03-11", + "status": "approved", + "comment": "contained directly in repo; not auto-allowlist because: Not isolated; approved by GB exception 2019-03-11" + } + ] +} \ No newline at end of file diff --git a/netlify.toml b/netlify.toml new file mode 100644 index 00000000..feae2d4b --- /dev/null +++ b/netlify.toml @@ -0,0 +1,14 @@ +[build] + base = "license-exceptions/" + command = "node scripts/generate-all.js && mkdir -p _site && cp -r site/* _site/ && cp exceptions.json CNCF-licensing-exceptions.csv cncf-exceptions-current.spdx _site/" + publish = "license-exceptions/_site" + +[build.environment] + NODE_VERSION = "20" + +[[headers]] + for = "/*" + [headers.values] + X-Frame-Options = "DENY" + X-Content-Type-Options = "nosniff" + Referrer-Policy = "strict-origin-when-cross-origin"
Package Package or Category License Project Scope Status Approved Date