Linux Foundation License Scan report

Project: lfai
Subproject: marquez
Snapshot on: 2020-06-01 (show repos)
marquez d8cefcd3
marquez-airflow 89b21056
marquez-airflow-quickstart 693e3548
marquez-chart c9ebfe59
marquez-java 765654c5
marquez-python 5681e105
marquez-web c62a90ab

Key findings:

Finding #1
Priority: High
This repo contains one or more .jar files with compiled binary / object code. For .jar files that are upstream dependencies, we would strongly recommend pulling those in at build-time rather than distributing them in the source repos. Or, if they contain the project's own compiled binary / object code, we would not recommend distributing them within the source code repo itself, and instead configuring to compile it at build time.
95 files (show files)
marquez-java/gradle/wrapper/gradle-wrapper.jar/META-INF/MANIFEST.MF
marquez-java/gradle/wrapper/gradle-wrapper.jar/gradle-cli-classpath.properties
marquez-java/gradle/wrapper/gradle-wrapper.jar/gradle-cli-parameter-names.properties
marquez-java/gradle/wrapper/gradle-wrapper.jar/gradle-wrapper-classpath.properties
marquez-java/gradle/wrapper/gradle-wrapper.jar/gradle-wrapper-parameter-names.properties
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/AbstractCommandLineConverter.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/AbstractPropertiesCommandLineConverter.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineArgumentException.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineConverter.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineOption.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$1.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$AfterFirstSubCommand.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$AfterOptions.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$BeforeFirstSubCommand.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$CaseInsensitiveStringComparator.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$KnownOptionParserState.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$MissingOptionArgState.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$OptionAwareParserState.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$OptionComparator.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$OptionParserState.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$OptionString.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$OptionStringComparator.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$ParserState.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$UnknownOptionParserState.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/ParsedCommandLine.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/ParsedCommandLineOption.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/ProjectPropertiesCommandLineConverter.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/SystemPropertiesCommandLineConverter.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/BootstrapMainStarter.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Download$1.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Download$ProxyAuthenticator.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Download.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/DownloadProgressListener.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/ExclusiveFileAccessManager.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/GradleUserHomeLookup.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/GradleWrapperMain.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/IDownload.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Install$1.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Install.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Logger.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/PathAssembler$LocalDistribution.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/PathAssembler.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/SystemPropertiesHandler.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/WrapperConfiguration.class
marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/WrapperExecutor.class
marquez/gradle/wrapper/gradle-wrapper.jar/META-INF/MANIFEST.MF
marquez/gradle/wrapper/gradle-wrapper.jar/gradle-cli-classpath.properties
marquez/gradle/wrapper/gradle-wrapper.jar/gradle-cli-parameter-names.properties
marquez/gradle/wrapper/gradle-wrapper.jar/gradle-wrapper-classpath.properties
marquez/gradle/wrapper/gradle-wrapper.jar/gradle-wrapper-parameter-names.properties
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/AbstractCommandLineConverter.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/AbstractPropertiesCommandLineConverter.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineArgumentException.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineConverter.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineOption.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$1.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$AfterFirstSubCommand.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$AfterOptions.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$BeforeFirstSubCommand.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$CaseInsensitiveStringComparator.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$KnownOptionParserState.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$MissingOptionArgState.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$OptionAwareParserState.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$OptionComparator.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$OptionParserState.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$OptionString.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$OptionStringComparator.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$ParserState.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$UnknownOptionParserState.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/ParsedCommandLine.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/ParsedCommandLineOption.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/ProjectPropertiesCommandLineConverter.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/SystemPropertiesCommandLineConverter.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/BootstrapMainStarter$1.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/BootstrapMainStarter.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Download$1.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Download$DefaultDownloadProgressListener.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Download$ProxyAuthenticator.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Download.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/DownloadProgressListener.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/ExclusiveFileAccessManager.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/GradleUserHomeLookup.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/GradleWrapperMain.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/IDownload.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Install$1.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Install$InstallCheck.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Install.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Logger.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/PathAssembler$LocalDistribution.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/PathAssembler.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/SystemPropertiesHandler.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/WrapperConfiguration.class
marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/WrapperExecutor.class
Finding #2
Priority: Medium
This project is under the Apache-2.0 license; however, the package.json manifest incorrectly lists the license as MIT. I would recommend correcting this to "Apache-2.0".
1 file (show files)
marquez-web/package.json

License summary:

Project Licenses:
  Apache-2.0   241
  Apache-2.0 (ASF license header)   2
Check license statement:
  MIT (check license statement)   1
Attribution:
  Apache-2.0 AND BSD-3-Clause AND MIT   1
Other:
  OFL-1.1   5
No license found:
  No license found in file   346
  No license found in file - excluded file extension   14
  No license found in file - empty file   5
TOTAL   615  

Counts are numbers of files detected in the scanned repos.


Please contact Steve Winslow (swinslow@linuxfoundation.org) with any questions, comments, etc. regarding this report.