From dc777bd603fbd439a91e269b52336979f4ce513a Mon Sep 17 00:00:00 2001 From: Rakshithasai123 Date: Wed, 26 Nov 2025 15:15:36 +0530 Subject: [PATCH] Add THIRD-PARTY-NOTICES.txt with package details(id-authentication) This file lists third-party packages used in the project along with their licenses, versions, and homepages. Signed-off-by: Rakshithasai123 --- THIRD-PARTY-NOTICES.txt | 205 ++++++++++++++++++++++++++++++++++++++++ 1 file changed, 205 insertions(+) create mode 100644 THIRD-PARTY-NOTICES.txt diff --git a/THIRD-PARTY-NOTICES.txt b/THIRD-PARTY-NOTICES.txt new file mode 100644 index 0000000000..eaf56ca909 --- /dev/null +++ b/THIRD-PARTY-NOTICES.txt @@ -0,0 +1,205 @@ +THIRD-PARTY-NOTICES + +This project includes third-party packages that are distributed under various open-source licenses. Below is a list of packages and their associated licenses. + +================================================================================ +Package: Spring Boot, Spring Framework, Spring Cloud & Spring Kafka (starters and core modules) +Version: 3.3.x / 6.x family (per SBOM; e.g., spring-boot-starter-webflux 3.3.2) +License: Apache License 2.0 +Homepage: https://spring.io/projects/spring-boot +================================================================================ + +================================================================================ +Package: Spring Batch (Core & Integration Modules) +Version: 5.x family (per SBOM) +License: Apache License 2.0 (Inferred from project’s official repository) +Homepage: https://spring.io/projects/spring-batch +================================================================================ + +================================================================================ +Package: Spring Security Test +Version: 6.x family (per SBOM) +License: Apache License 2.0 (Inferred from project’s official repository) +Homepage: https://spring.io/projects/spring-security +================================================================================ + +================================================================================ +Package: SpringDoc OpenAPI (WebMVC UI Starter & Maven Plugin) +Version: 2.x / 0.2 (per SBOM) +License: Apache License 2.0 +Homepage: https://springdoc.org/ +================================================================================ + +================================================================================ +Package: Micrometer (Core & Prometheus Registry) +Version: 1.x family (per SBOM) +License: Apache License 2.0 (Inferred from project’s official repository) +Homepage: https://micrometer.io/ +================================================================================ + +================================================================================ +Package: Jackson (Core, Annotations, Databind, Dataformat XML, JAXB Annotations, Afterburner) +Version: 2.x family (per SBOM) +License: Apache License 2.0 (Inferred from project’s official repository) +Homepage: https://github.com/FasterXML/jackson +================================================================================ + +================================================================================ +Package: Apache Commons (Lang3, Codec) +Version: 3.x family (per SBOM) +License: Apache License 2.0 (Inferred from project’s official repository) +Homepage: https://commons.apache.org/ +================================================================================ + +================================================================================ +Package: Apache HttpComponents (HttpClient, HttpMime) +Version: 4.5.x (per SBOM; e.g., httpmime 4.5.9) +License: Apache License 2.0 +Homepage: https://hc.apache.org/httpcomponents-client-4.5.x/ +================================================================================ + +================================================================================ +Package: JSON Libraries (JSON.org, JSON Simple, JSON Path) +Version: Various (per SBOM) +License: + - JSON.org: JSON License (Inferred from project’s official repository) + - JSON Simple & JSON Path: Apache License 2.0 (Inferred from project’s official repositories) +Homepage: + - JSON.org: https://www.json.org/ + - JSON Simple: https://github.com/fangyidong/json-simple + - JSON Path: https://github.com/json-path/JsonPath +================================================================================ + +================================================================================ +Package: Hibernate Validator +Version: 8.x family (per SBOM) +License: Apache License 2.0 (Inferred from project’s official repository) +Homepage: https://hibernate.org/validator/ +================================================================================ + +================================================================================ +Package: PostgreSQL JDBC Driver +Version: 42.x family (per SBOM) +License: PostgreSQL License (BSD-style) (Inferred from project’s official repository) +Homepage: https://jdbc.postgresql.org/ +================================================================================ + +================================================================================ +Package: TensorFlow Java +Version: 1.15.0 +License: Apache License 2.0 +Homepage: https://www.tensorflow.org/ +================================================================================ + +================================================================================ +Package: OpenCV Java (org.openpnp:opencv) +Version: 4.5.3-4 +License: BSD 3-Clause +Homepage: https://github.com/openpnp/opencv +================================================================================ + +================================================================================ +Package: Project Lombok +Version: 1.x family (per SBOM) +License: MIT License (Inferred from project’s official repository) +Homepage: https://projectlombok.org/ +================================================================================ + +================================================================================ +Package: Testing Libraries (JUnit 4, JUnit Vintage, Mockito, PowerMock, ByteBuddy, Objenesis) +Version: Various (per SBOM) +License: + - JUnit 4: Eclipse Public License 1.0 (Inferred from project’s official repository) + - JUnit Vintage: Eclipse Public License 2.0 (Inferred from project’s official repository) + - Mockito: MIT License (Inferred from project’s official repository) + - PowerMock: Apache License 2.0 (Inferred from project’s official repository) + - ByteBuddy: Apache License 2.0 (Inferred from project’s official repository) + - Objenesis: Apache License 2.0 (Inferred from project’s official repository) +Homepage: + - JUnit: https://junit.org/ + - Mockito: https://site.mockito.org/ + - PowerMock: https://github.com/powermock/powermock + - ByteBuddy: https://bytebuddy.net/ + - Objenesis: https://objenesis.org/ +================================================================================ + +================================================================================ +Package: Apache Maven Build Plugins (Compiler, Source, Jar, War, Surefire, GPG, Javadoc, Shade, Antrun) +Version: Various 2.x–3.x (per SBOM) +License: Apache License 2.0 +Homepage: https://maven.apache.org/plugins/ +================================================================================ + +================================================================================ +Package: Central Publishing Maven Plugin +Version: 0.7.0 +License: Apache License 2.0 +Homepage: https://central.sonatype.org/publish/publish-maven/ +================================================================================ + +================================================================================ +Package: Spring Boot Maven Plugin +Version: 3.x family (per SBOM) +License: Apache License 2.0 (Inferred from project’s official repository) +Homepage: https://docs.spring.io/spring-boot/docs/current/maven-plugin/reference/html/ +================================================================================ + +================================================================================ +Package: Spring Boot Actuator & Micrometer Prometheus Integration +Version: 3.3.x / 1.x family (per SBOM) +License: Apache License 2.0 (Inferred from project’s official repositories) +Homepage: + - Spring Boot Actuator: https://spring.io/projects/spring-boot + - Micrometer Prometheus Registry: https://micrometer.io/docs/registry/prometheus +================================================================================ + +================================================================================ +Package: MOSIP Platform Components (Kernel, ID Repository, Authentication Modules, Demographics & Biometrics APIs, WebSub Client, Template Manager, ID Generators, Key Manager, CBEFF Utilities, Data Access) +Version: 1.3.0-SNAPSHOT and 1.3.x family (per SBOM) +License: Mozilla Public License 2.0 (Inferred from MOSIP project’s official repositories) +Homepage: https://github.com/mosip +================================================================================ + +================================================================================ +Package: MOSIP e-Signet Components (esignet-core, esignet-integration-api) +Version: 1.3.x family (per SBOM) +License: Mozilla Public License 2.0 (Inferred from MOSIP project’s official repositories) +Homepage: https://github.com/mosip/esignet +================================================================================ + +================================================================================ +Package: MOSIP SDKs & Utilities (biosdk-client, demosdk, biometrics-util, testrig apitest commons) +Version: 1.3.x family (per SBOM) +License: Mozilla Public License 2.0 (Inferred from MOSIP project’s official repositories) +Homepage: https://github.com/mosip +================================================================================ + +================================================================================ +Package: SourceAFIS for Java +Version: 3.x family (per SBOM) +License: Apache License 2.0 (Inferred from project’s official repository) +Homepage: https://sourceafis.machinezoo.com/ +================================================================================ + +================================================================================ +Package: Linked Data Signatures Java +Version: 1.0.0 +License: Apache License 2.0 (Inferred from project’s official repository) +Homepage: https://github.com/WebOfTrust/ld-signatures-java +================================================================================ + +================================================================================ +Package: MOSIP OpenID Bridge & WebSub Client APIs +Version: 1.3.x family (per SBOM) +License: Mozilla Public License 2.0 (Inferred from MOSIP project’s official repositories) +Homepage: https://github.com/mosip +================================================================================ + +================================================================================ +Package: MOSIP Authentication Services (Core, Common, Filter APIs, Hotlist Filter, Auth Type Lock Filter) +Version: 1.3.x family (per SBOM) +License: Mozilla Public License 2.0 (Inferred from MOSIP project’s official repositories) +Homepage: https://github.com/mosip/id-authentication +================================================================================ + +Full license texts and additional details for each of the above packages are available in the license/ directory of this repository. Please refer to those files or the original source of each package for complete legal terms and conditions.