Linux Foundation License Scan report
Project: lfai
Subproject: marquez
Snapshot on: 2020-06-01 (show repos)
Subproject: marquez
Snapshot on: 2020-06-01 (show repos)
marquez | d8cefcd3 |
marquez-airflow | 89b21056 |
marquez-airflow-quickstart | 693e3548 |
marquez-chart | c9ebfe59 |
marquez-java | 765654c5 |
marquez-python | 5681e105 |
marquez-web | c62a90ab |
Key findings:
Finding #1 |
Priority: High |
This repo contains one or more .jar files with compiled binary / object code. For .jar files that are upstream dependencies, we would strongly recommend pulling those in at build-time rather than distributing them in the source repos. Or, if they contain the project's own compiled binary / object code, we would not recommend distributing them within the source code repo itself, and instead configuring to compile it at build time.
|
95 files (show files) |
marquez-java/gradle/wrapper/gradle-wrapper.jar/META-INF/MANIFEST.MF
marquez-java/gradle/wrapper/gradle-wrapper.jar/gradle-cli-classpath.properties marquez-java/gradle/wrapper/gradle-wrapper.jar/gradle-cli-parameter-names.properties marquez-java/gradle/wrapper/gradle-wrapper.jar/gradle-wrapper-classpath.properties marquez-java/gradle/wrapper/gradle-wrapper.jar/gradle-wrapper-parameter-names.properties marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/AbstractCommandLineConverter.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/AbstractPropertiesCommandLineConverter.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineArgumentException.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineConverter.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineOption.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$1.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$AfterFirstSubCommand.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$AfterOptions.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$BeforeFirstSubCommand.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$CaseInsensitiveStringComparator.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$KnownOptionParserState.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$MissingOptionArgState.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$OptionAwareParserState.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$OptionComparator.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$OptionParserState.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$OptionString.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$OptionStringComparator.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$ParserState.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$UnknownOptionParserState.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/ParsedCommandLine.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/ParsedCommandLineOption.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/ProjectPropertiesCommandLineConverter.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/SystemPropertiesCommandLineConverter.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/BootstrapMainStarter.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Download$1.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Download$ProxyAuthenticator.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Download.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/DownloadProgressListener.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/ExclusiveFileAccessManager.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/GradleUserHomeLookup.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/GradleWrapperMain.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/IDownload.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Install$1.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Install.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Logger.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/PathAssembler$LocalDistribution.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/PathAssembler.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/SystemPropertiesHandler.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/WrapperConfiguration.class marquez-java/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/WrapperExecutor.class marquez/gradle/wrapper/gradle-wrapper.jar/META-INF/MANIFEST.MF marquez/gradle/wrapper/gradle-wrapper.jar/gradle-cli-classpath.properties marquez/gradle/wrapper/gradle-wrapper.jar/gradle-cli-parameter-names.properties marquez/gradle/wrapper/gradle-wrapper.jar/gradle-wrapper-classpath.properties marquez/gradle/wrapper/gradle-wrapper.jar/gradle-wrapper-parameter-names.properties marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/AbstractCommandLineConverter.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/AbstractPropertiesCommandLineConverter.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineArgumentException.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineConverter.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineOption.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$1.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$AfterFirstSubCommand.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$AfterOptions.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$BeforeFirstSubCommand.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$CaseInsensitiveStringComparator.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$KnownOptionParserState.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$MissingOptionArgState.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$OptionAwareParserState.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$OptionComparator.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$OptionParserState.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$OptionString.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$OptionStringComparator.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$ParserState.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser$UnknownOptionParserState.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/CommandLineParser.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/ParsedCommandLine.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/ParsedCommandLineOption.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/ProjectPropertiesCommandLineConverter.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/cli/SystemPropertiesCommandLineConverter.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/BootstrapMainStarter$1.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/BootstrapMainStarter.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Download$1.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Download$DefaultDownloadProgressListener.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Download$ProxyAuthenticator.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Download.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/DownloadProgressListener.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/ExclusiveFileAccessManager.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/GradleUserHomeLookup.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/GradleWrapperMain.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/IDownload.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Install$1.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Install$InstallCheck.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Install.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/Logger.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/PathAssembler$LocalDistribution.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/PathAssembler.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/SystemPropertiesHandler.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/WrapperConfiguration.class marquez/gradle/wrapper/gradle-wrapper.jar/org/gradle/wrapper/WrapperExecutor.class |
Finding #2 |
Priority: Medium |
This project is under the Apache-2.0 license; however, the package.json manifest incorrectly lists the license as MIT. I would recommend correcting this to "Apache-2.0".
|
1 file (show files) |
marquez-web/package.json
|
License summary:
Project Licenses: | ||||
Apache-2.0 | 241 | |||
Apache-2.0 (ASF license header) | 2 | |||
Check license statement: | ||||
MIT (check license statement) | 1 | |||
Attribution: | ||||
Apache-2.0 AND BSD-3-Clause AND MIT | 1 | |||
Other: | ||||
OFL-1.1 | 5 | |||
No license found: | ||||
No license found in file | 346 | |||
No license found in file - excluded file extension | 14 | |||
No license found in file - empty file | 5 | |||
TOTAL | 615 |
Counts are numbers of files detected in the scanned repos.
Please contact Steve Winslow (swinslow@linuxfoundation.org) with any questions, comments, etc. regarding this report.